Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: 9vY7d0E1F5HqKTsGZwBxxuNeCT0RjvYuj3oZMK5o17I=
Subject key identifier: 0D:DE:98:FD:8B:7C:03:EC:E8:49:EA:49:D1:7D:B0:C8:D9:9B:11:80
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 019DA41CF32277201DE4033B09EC747BC2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 03CD
Signing time: Sun 19 Apr 2026 05:00:53 +0000
Manifest this update: Sun 19 Apr 2026 05:00:53 +0000
Manifest next update: Mon 20 Apr 2026 05:00:53 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: Zy1LhtgiTJTrqMawVuRm1Wm9PRzUr1TKzjCXEjvcxuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:f3:22:77:20:1d:e4:03:3b:09:ec:74:7b:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Apr 19 05:00:53 2026 GMT
Not After : Apr 20 05:00:53 2026 GMT
Subject: CN=0dde98fd8b7c03ece849ea49d17db0c8d99b1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:73:e8:22:d6:78:8a:48:f8:02:de:f6:d4:
8c:47:28:27:c6:fa:7f:2f:97:69:1d:17:d2:1e:dc:
af:e0:47:a1:d4:d0:5e:2b:5d:48:50:96:a4:a3:49:
61:90:48:ac:7c:66:15:ab:24:63:27:9a:b6:8c:50:
a5:92:e7:72:c5:86:09:81:89:95:8b:0e:72:06:a1:
d5:a4:59:92:fd:d6:28:3c:25:40:f3:57:f9:9a:c8:
fd:15:b4:f2:5b:f7:e5:69:5e:4e:6c:d8:db:d7:2f:
01:c5:b6:aa:32:78:3b:19:40:fc:91:80:9a:ca:78:
80:a4:75:ed:81:0b:27:ce:be:59:37:2c:09:25:d0:
ad:19:92:85:2e:b8:11:95:41:86:f4:51:5e:1d:3b:
d5:2a:67:54:45:7e:1d:d9:ee:55:4b:b1:74:c8:a7:
bf:96:92:98:1a:67:9c:10:14:cc:54:57:97:7a:d4:
7a:3e:1c:ab:1d:7a:32:64:e6:a1:38:df:ef:fd:d4:
e5:f4:54:3e:43:16:8a:2e:8f:95:24:32:4a:f0:b5:
51:2d:55:e1:2a:81:e0:5b:ed:01:52:bb:fd:ca:f7:
02:f2:c9:1f:fd:45:14:33:fd:35:c2:ce:55:a7:b8:
a0:07:7e:79:1e:b6:bd:b3:5b:54:73:bc:f0:71:c3:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DE:98:FD:8B:7C:03:EC:E8:49:EA:49:D1:7D:B0:C8:D9:9B:11:80
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:d1:5c:58:4d:e9:2a:c0:31:13:09:05:c9:c0:e3:66:75:
aa:a7:0a:3c:49:b9:d9:db:45:fd:d4:63:cc:e0:e3:34:22:d3:
7a:09:82:a5:eb:98:2c:02:7c:82:ee:e1:01:c7:de:69:c4:54:
46:76:f5:e9:72:80:12:e8:cf:ca:47:cd:f5:2f:ba:36:c0:94:
e1:55:13:58:85:f8:0d:6c:97:9f:89:70:53:35:30:a4:36:2c:
75:f1:72:92:de:01:15:6d:d3:78:00:99:cc:bf:ff:36:43:78:
0b:41:e7:1f:22:d0:48:00:45:74:b5:36:6c:55:f1:80:15:6e:
d6:dc:dc:75:45:10:f4:98:f9:7b:d4:27:8b:51:e5:06:a6:23:
55:94:41:c2:ad:75:c3:37:10:60:e4:85:88:ed:6c:69:43:1e:
b1:48:df:88:2c:f9:68:86:ea:87:b1:72:1f:c6:97:b4:8a:6b:
76:52:97:d4:78:2d:98:44:36:18:5f:c9:6c:ff:58:9e:48:e3:
30:a4:51:8f:2a:cc:cb:9f:3f:eb:a1:39:17:8b:82:f4:c4:23:
7b:72:40:9c:c7:1e:3e:7e:e2:1b:cd:fa:63:9a:d4:7d:5b:ef:
cd:f5:f7:9a:d1:88:8d:92:d4:21:0e:1d:7f:ab:a8:05:96:21:
5f:6c:40:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHPMidyAd5AM7Cex0e8KlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDNkMTNkZDI2ZjAwNDRhMjgzZmM2YTExZTc1NmEyYTJi
NTY5MWIwHhcNMjYwNDE5MDUwMDUzWhcNMjYwNDIwMDUwMDUzWjAzMTEwLwYDVQQD
EygwZGRlOThmZDhiN2MwM2VjZTg0OWVhNDlkMTdkYjBjOGQ5OWIxMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn5z6CLWeIpI+ALe9tSMRygnxvp/
L5dpHRfSHtyv4Eeh1NBeK11IUJako0lhkEisfGYVqyRjJ5q2jFClkudyxYYJgYmV
iw5yBqHVpFmS/dYoPCVA81f5msj9FbTyW/flaV5ObNjb1y8BxbaqMng7GUD8kYCa
yniApHXtgQsnzr5ZNywJJdCtGZKFLrgRlUGG9FFeHTvVKmdURX4d2e5VS7F0yKe/
lpKYGmecEBTMVFeXetR6PhyrHXoyZOahON/v/dTl9FQ+QxaKLo+VJDJK8LVRLVXh
KoHgW+0BUrv9yvcC8skf/UUUM/01ws5Vp7igB355Hra9s1tUc7zwccMaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3emP2LfAPs6EnqSdF9sMjZmxGAMB8GA1UdIwQY
MBaAFM0D0T3SbwBEooP8ahHnVqKitWkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUt
MWEzZmY1MzJiYzIwLzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUtMWEzZmY1MzJiYzIw
LzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4LRXFhN
6SrAMRMJBcnA42Z1qqcKPEm52dtF/dRjzODjNCLTegmCpeuYLAJ8gu7hAcfeacRU
Rnb16XKAEujPykfN9S+6NsCU4VUTWIX4DWyXn4lwUzUwpDYsdfFykt4BFW3TeACZ
zL//NkN4C0HnHyLQSABFdLU2bFXxgBVu1tzcdUUQ9Jj5e9Qni1HlBqYjVZRBwq11
wzcQYOSFiO1saUMesUjfiCz5aIbqh7FyH8aXtIprdlKX1HgtmEQ2GF/JbP9Ynkjj
MKRRjyrMy58/66E5F4uC9MQje3JAnMcePn7iG836Y5rUfVvvzfX3mtGIjZLUIQ4d
f6uoBZYhX2xA6w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:35 2026 by rpki-client