Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: 0UwATgzbA8ZPtFbNcVhE2WUjYB7Ryi88PstNXLttpEk=
Subject key identifier: F9:CC:34:EA:57:3D:D9:10:CB:AE:41:0A:4D:F1:BE:A2:91:36:1B:37
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 019D9A070464AE0427BC36F3D4BF11E83043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 1582
Signing time: Fri 17 Apr 2026 06:00:44 +0000
Manifest this update: Fri 17 Apr 2026 06:00:44 +0000
Manifest next update: Sat 18 Apr 2026 06:00:44 +0000
Files and hashes: 1: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: H9xq659qlPYyLNI/uesXHZc+dS/tOH5SLE01ZllSSXk=)
2: zsJeYAbKofBpijDlV1JN21oSRPc.roa (hash: i7qvLARvFAbwyr2d6HJClZJICp4QULfuGH4ozBybTr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:04:64:ae:04:27:bc:36:f3:d4:bf:11:e8:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Apr 17 06:00:44 2026 GMT
Not After : Apr 18 06:00:44 2026 GMT
Subject: CN=f9cc34ea573dd910cbae410a4df1bea291361b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:1b:df:e3:21:45:30:86:85:ce:b0:4c:c9:
1e:27:9d:ae:5f:54:3d:2d:97:5d:fb:ba:e9:ae:f8:
18:c2:84:b0:bb:63:44:32:2f:0b:00:06:d9:9d:a2:
0c:b3:16:b1:b8:23:c7:a2:90:42:ea:c8:ce:48:59:
bd:90:b5:f6:90:d5:a9:60:2a:65:e3:86:4a:fc:2e:
8f:6e:66:76:d5:9a:ca:07:1e:39:f5:87:9f:83:54:
12:0a:1d:83:bf:22:33:5e:a0:b7:46:09:8a:c2:28:
fe:25:3e:57:1e:da:8e:16:aa:30:0e:48:58:ac:c6:
a1:c9:85:a9:d9:9a:33:54:17:61:e1:22:1a:0d:e9:
3d:71:66:93:94:a0:56:9d:d6:b9:96:ea:7e:b9:64:
28:74:84:0d:55:78:7b:ff:36:62:b4:aa:46:3f:ca:
94:f3:5e:1a:bd:08:e3:34:a0:b1:dc:62:26:3d:ff:
5e:d7:30:cd:bd:5b:49:24:80:6f:51:57:52:a9:b3:
25:bc:2d:fc:b4:05:8f:ed:21:3e:d2:7a:bd:52:a9:
65:bb:a6:da:1d:fd:3e:3c:19:6b:72:17:e5:4f:aa:
f6:65:56:3d:74:66:ce:e5:77:40:b6:d5:35:1a:7c:
2d:6e:a8:03:35:9b:4c:07:dd:ad:e8:4c:e8:75:f6:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:34:EA:57:3D:D9:10:CB:AE:41:0A:4D:F1:BE:A2:91:36:1B:37
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0e:ed:2f:20:02:d0:a2:87:17:f2:c8:e0:6e:e6:42:9f:1e:
32:f9:21:73:5a:6f:29:48:35:5c:41:60:7e:c5:83:0d:0f:ec:
67:4c:c1:b9:e2:b2:bc:c4:9f:49:e2:7d:fe:24:ea:b2:47:f7:
4d:7e:5e:c2:14:14:ec:9a:b4:bb:b6:ee:4a:c6:11:02:b4:3f:
3e:5c:ad:0a:62:1d:76:52:98:fa:24:b2:a0:72:aa:93:c3:b8:
ab:30:57:d7:57:25:6c:8d:84:be:7d:ec:1b:19:4e:1a:2d:25:
e9:b5:c0:4d:b1:7a:77:6d:1f:e3:7c:fa:76:ea:aa:67:9d:d3:
a2:f4:4c:f5:ea:78:29:f5:7e:7f:25:5d:f9:ac:59:4a:e4:38:
67:f6:2f:fd:e1:fe:5b:35:8f:95:68:77:7a:54:78:3d:51:0e:
94:f6:f7:81:72:97:ed:a4:85:0a:8e:f8:5c:f9:17:82:46:46:
e5:6a:b0:77:27:c5:62:b2:0f:b7:0f:21:c7:57:eb:e7:20:05:
ac:4d:9d:41:c4:5b:74:0f:76:9c:8f:a7:b9:b0:a8:03:9a:a2:
a2:45:d2:3c:85:de:27:71:4d:92:de:a9:8c:46:82:73:3a:b7:
bc:b3:57:36:af:d2:eb:95:3e:51:ed:8c:32:f7:b7:90:19:4f:
2a:a9:d2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBwRkrgQnvDbz1L8R6DBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjVjMmY5NThhN2UyMWEzMTM1OTE2ZWVkMWE0ZDk3ODZl
MDlkYTMwHhcNMjYwNDE3MDYwMDQ0WhcNMjYwNDE4MDYwMDQ0WjAzMTEwLwYDVQQD
EyhmOWNjMzRlYTU3M2RkOTEwY2JhZTQxMGE0ZGYxYmVhMjkxMzYxYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEMb3+MhRTCGhc6wTMkeJ52uX1Q9
LZdd+7rprvgYwoSwu2NEMi8LAAbZnaIMsxaxuCPHopBC6sjOSFm9kLX2kNWpYCpl
44ZK/C6PbmZ21ZrKBx459Yefg1QSCh2DvyIzXqC3RgmKwij+JT5XHtqOFqowDkhY
rMahyYWp2ZozVBdh4SIaDek9cWaTlKBWnda5lup+uWQodIQNVXh7/zZitKpGP8qU
814avQjjNKCx3GImPf9e1zDNvVtJJIBvUVdSqbMlvC38tAWP7SE+0nq9Uqllu6ba
Hf0+PBlrchflT6r2ZVY9dGbO5XdAttU1GnwtbqgDNZtMB92t6EzodfZqCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnMNOpXPdkQy65BCk3xvqKRNhs3MB8GA1UdIwQY
MBaAFM5lwvlYp+IaMTWRbu0aTZeG4J2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2It
NWQ1OTZkMDBkZTljLzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2ItNWQ1OTZkMDBkZTlj
LzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ7tLyAC
0KKHF/LI4G7mQp8eMvkhc1pvKUg1XEFgfsWDDQ/sZ0zBueKyvMSfSeJ9/iTqskf3
TX5ewhQU7Jq0u7buSsYRArQ/PlytCmIddlKY+iSyoHKqk8O4qzBX11clbI2Evn3s
GxlOGi0l6bXATbF6d20f43z6duqqZ53TovRM9ep4KfV+fyVd+axZSuQ4Z/Yv/eH+
WzWPlWh3elR4PVEOlPb3gXKX7aSFCo74XPkXgkZG5WqwdyfFYrIPtw8hx1fr5yAF
rE2dQcRbdA92nI+nubCoA5qiokXSPIXeJ3FNkt6pjEaCczq3vLNXNq/S65U+Ue2M
Mve3kBlPKqnSow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:48 2026 by rpki-client