Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: Svw4Mr/DW/28+4euIK5+xl9/IZFhXaJL3YDz2TcmZ2Y=
Subject key identifier: 3A:00:66:A8:0A:FA:E0:A8:3F:98:88:B1:A6:15:43:52:03:CB:A7:70
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 019D99D047FAF12B2578897D684503BF4033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0DD1
Signing time: Fri 17 Apr 2026 05:00:57 +0000
Manifest this update: Fri 17 Apr 2026 05:00:57 +0000
Manifest next update: Sat 18 Apr 2026 05:00:57 +0000
Files and hashes: 1: 4Bv5xQ3eOktWbNiksOI6_CyDYwE.roa (hash: AzbxLrQ0rBUs69Ie4HmTc38VBCdV7Bu9rChwxjbGaTI=)
2: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: khQAgs/WYNxhSYvR81Yc/S1o1S0FZ9H5/FYvKj0Vass=)
3: fdwbgBklrjdovCeYbqvQYFGn8iQ.roa (hash: 8Me+/KWLgHoPwHgTQu4VQrh3NLbvTzJ2Ie0jnlhQSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:47:fa:f1:2b:25:78:89:7d:68:45:03:bf:40:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Apr 17 05:00:57 2026 GMT
Not After : Apr 18 05:00:57 2026 GMT
Subject: CN=3a0066a80afae0a83f9888b1a615435203cba770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:02:2a:8f:7f:d7:2e:1f:aa:7c:5f:59:0c:
af:27:00:c7:4e:6d:2f:e2:e3:37:70:7d:33:83:c9:
a4:38:1a:cf:f2:b8:94:fd:b5:85:ba:ec:9c:f8:72:
2c:26:85:b2:9f:1f:71:56:0d:20:3c:c1:cd:dc:58:
cc:82:d4:66:6f:39:53:5f:c6:7e:2b:38:25:3b:44:
b2:2c:7c:ff:c8:51:69:a7:76:34:c2:5c:17:59:15:
fc:7c:6d:41:7a:02:39:1e:94:8a:5e:f9:cb:56:0a:
83:e3:72:33:e0:67:dc:87:30:24:36:a4:8a:95:23:
e5:6e:fe:b8:42:fb:20:10:42:b1:63:94:2c:a9:97:
5e:65:cb:77:cb:a4:71:88:c4:fe:e2:c2:70:69:25:
97:b7:65:12:3e:55:61:38:3c:cd:0a:ce:21:a8:60:
52:42:47:28:de:b1:8b:f9:e4:77:ba:5d:7b:0c:5e:
e6:57:50:6a:ba:2f:d9:7a:20:0d:1d:af:5d:30:b7:
71:0e:3e:8d:80:7b:d9:a7:62:8a:8d:55:e3:d5:9a:
23:44:af:15:38:7c:ba:4f:36:bf:23:49:f6:01:8c:
d0:f4:1c:ba:c3:fb:93:60:60:11:eb:44:04:4c:b8:
21:c1:ab:5b:dc:7b:d2:39:1f:e0:07:29:14:a3:e1:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:66:A8:0A:FA:E0:A8:3F:98:88:B1:A6:15:43:52:03:CB:A7:70
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a9:f6:eb:53:d2:74:00:12:d8:71:31:a3:1d:75:3a:34:90:
b3:89:ae:aa:8b:23:d0:57:5a:4a:a6:27:62:75:b2:3e:cc:25:
0b:52:fa:39:8e:0e:12:97:0d:eb:b9:cf:17:c4:76:c0:43:e6:
4f:c4:7b:30:bd:89:10:5a:e0:28:05:e8:52:6e:e9:ad:02:57:
99:92:db:53:ec:98:b7:24:06:75:1d:f3:6f:67:6c:4c:4b:f4:
5f:45:45:bf:55:8a:f9:b0:49:0b:d6:ad:c1:f0:5c:43:c3:4a:
38:ee:e1:2c:0a:a8:1d:b0:59:63:14:75:ec:08:85:9e:54:ea:
bf:18:7c:f2:04:15:9f:ed:0d:40:60:a1:d4:8b:fd:4f:bc:f4:
26:06:df:21:7c:8a:22:7e:f5:8b:e0:f3:95:fa:dd:d7:ab:02:
b8:9d:d1:8f:d8:c4:ca:3e:f4:85:c0:72:cf:30:bd:0d:94:7a:
f6:37:ea:61:cd:0c:23:69:71:d2:a4:4f:1b:26:51:6d:8d:88:
0d:3e:4c:a7:3a:d6:e6:2e:09:2a:2d:5e:d7:1e:bd:4d:c9:ce:
90:20:5e:b7:44:28:1f:4a:e8:0b:78:42:d8:d8:5b:2c:1d:c0:
49:03:75:75:bd:96:60:4a:35:b2:9a:7d:b5:ef:22:a9:bf:41:
8f:ed:be:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Ef68SsleIl9aEUDv0AzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2
NjlmMTIwHhcNMjYwNDE3MDUwMDU3WhcNMjYwNDE4MDUwMDU3WjAzMTEwLwYDVQQD
EygzYTAwNjZhODBhZmFlMGE4M2Y5ODg4YjFhNjE1NDM1MjAzY2JhNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLQCKo9/1y4fqnxfWQyvJwDHTm0v
4uM3cH0zg8mkOBrP8riU/bWFuuyc+HIsJoWynx9xVg0gPMHN3FjMgtRmbzlTX8Z+
KzglO0SyLHz/yFFpp3Y0wlwXWRX8fG1BegI5HpSKXvnLVgqD43Iz4GfchzAkNqSK
lSPlbv64QvsgEEKxY5QsqZdeZct3y6RxiMT+4sJwaSWXt2USPlVhODzNCs4hqGBS
Qkco3rGL+eR3ul17DF7mV1Bqui/ZeiANHa9dMLdxDj6NgHvZp2KKjVXj1ZojRK8V
OHy6Tza/I0n2AYzQ9By6w/uTYGAR60QETLghwatb3HvSOR/gBykUo+FKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoAZqgK+uCoP5iIsaYVQ1IDy6dwMB8GA1UdIwQY
MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt
YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl
LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqn261PS
dAAS2HExox11OjSQs4muqosj0FdaSqYnYnWyPswlC1L6OY4OEpcN67nPF8R2wEPm
T8R7ML2JEFrgKAXoUm7prQJXmZLbU+yYtyQGdR3zb2dsTEv0X0VFv1WK+bBJC9at
wfBcQ8NKOO7hLAqoHbBZYxR17AiFnlTqvxh88gQVn+0NQGCh1Iv9T7z0JgbfIXyK
In71i+Dzlfrd16sCuJ3Rj9jEyj70hcByzzC9DZR69jfqYc0MI2lx0qRPGyZRbY2I
DT5MpzrW5i4JKi1e1x69TcnOkCBet0QoH0roC3hC2NhbLB3ASQN1db2WYEo1spp9
te8iqb9Bj+2+bQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:19 2026 by rpki-client