Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: 8So7QqROju55i1yro60RAh1TxbE16fJienwEL+JO9OI=
Subject key identifier: 53:95:F8:F2:8A:19:3D:0A:64:3A:28:24:0D:BE:2F:CE:E2:E8:62:D9
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019D9E1BC0EDD74BC7E9FC95E4705C537D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 02F2
Signing time: Sat 18 Apr 2026 01:01:52 +0000
Manifest this update: Sat 18 Apr 2026 01:01:52 +0000
Manifest next update: Sun 19 Apr 2026 01:01:52 +0000
Files and hashes: 1: SMSEOT3Bw8BdVDxGYRzfDIZdEU0.roa (hash: Q+jvQC3Cp7YojEH0cGPSd1xy7T9E3c9+3+jfE13JjeY=)
2: g8Z517-jOmVF6Xu2Nxp8NTAxGx4.roa (hash: OXnUsbk5vh8et8vrHb0/ntkeJcO9A+ORppXS73LPvXg=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: UYxaLEtjy2B0tADgfhvoS47UtHn0Ez8s630ZjT0Lyfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:c0:ed:d7:4b:c7:e9:fc:95:e4:70:5c:53:7d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Apr 18 01:01:52 2026 GMT
Not After : Apr 19 01:01:52 2026 GMT
Subject: CN=5395f8f28a193d0a643a28240dbe2fcee2e862d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:68:fb:ef:8a:7b:7a:18:f8:01:3e:ea:39:
b6:55:b6:c5:bf:da:39:62:21:4b:23:b0:4e:66:4d:
1b:1e:25:ab:f5:ad:5f:4a:60:b0:ed:83:2c:d1:0f:
9c:fd:21:df:57:80:67:e1:5c:d8:ce:1e:54:22:3c:
2c:04:e1:5c:8f:e5:15:45:e9:fa:9a:97:5c:6b:9c:
32:a0:85:23:74:7f:03:9b:31:84:12:65:77:a3:82:
cc:c8:5d:b2:7f:f6:e1:f5:88:34:09:69:1a:54:84:
de:67:74:f1:c6:16:4d:52:06:e5:21:9d:e9:21:79:
85:70:5e:0a:6d:93:94:ed:96:d8:62:51:01:c0:c1:
11:3e:2d:eb:b6:74:d1:94:11:65:ef:ad:45:45:0a:
aa:28:da:d3:f7:78:cd:9d:3b:d1:f1:3b:e9:14:8e:
9a:25:82:db:5a:3c:56:51:b3:ca:26:d6:3c:20:b0:
18:32:87:57:bf:a8:a1:96:21:98:e9:f1:1f:84:70:
26:d3:e5:0a:bd:e3:85:36:a8:49:94:f8:2a:4b:79:
5e:ee:a8:60:a0:5d:b2:d9:ce:cc:b1:c2:82:64:70:
7a:8a:95:a8:aa:92:4e:54:b6:4b:b6:ba:fb:37:dc:
b4:d8:95:76:40:38:fa:49:1e:cf:96:0b:ff:c3:4a:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:95:F8:F2:8A:19:3D:0A:64:3A:28:24:0D:BE:2F:CE:E2:E8:62:D9
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1f:ee:e6:d1:21:21:89:e9:97:5d:ed:30:c3:5d:f8:fa:5e:
92:68:83:70:05:c9:b4:2c:ff:d6:d1:41:ad:32:1f:69:7f:72:
02:78:63:d2:47:6e:1f:b1:7b:56:fe:20:8f:72:e5:bc:f5:7a:
86:ea:7c:7d:ab:0d:88:6d:9b:73:45:d1:8e:37:f9:46:ac:64:
67:c2:89:80:4c:9f:69:c3:a7:79:1a:2b:42:f1:ef:61:cc:2c:
22:48:fc:80:4a:03:8a:97:62:cd:6f:1b:bb:4a:e8:d7:70:99:
24:a1:2b:3e:01:11:e5:4a:d0:0a:cb:bf:03:8a:07:53:a8:8f:
73:57:ef:28:b5:19:cd:01:96:43:ec:b3:29:96:52:7e:8f:20:
bf:7e:d1:5e:be:c8:0b:96:9f:0d:8e:32:16:a7:e9:6c:4c:44:
97:3e:d7:b2:d0:ad:00:a2:7c:13:38:84:a4:57:90:b3:e3:06:
07:21:60:48:78:31:4b:0a:a9:46:0d:d5:e5:25:7e:34:c2:99:
9c:10:0f:4b:af:0c:30:2d:94:6f:e2:74:8e:8c:19:aa:03:b3:
3b:46:95:80:18:ca:c8:4f:68:f0:97:94:dc:d2:d8:b5:a6:3b:
a4:f5:d0:62:d1:69:58:58:28:87:35:e7:a5:2d:2a:1d:a7:b6:
a5:07:b8:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eG8Dt10vH6fyV5HBcU318MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjY5ZWY4YTU0ODMwYzVhN2I2Mzc4OTFmYzNjOTBhYjEy
Y2JhNzgwHhcNMjYwNDE4MDEwMTUyWhcNMjYwNDE5MDEwMTUyWjAzMTEwLwYDVQQD
Eyg1Mzk1ZjhmMjhhMTkzZDBhNjQzYTI4MjQwZGJlMmZjZWUyZTg2MmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNo+++Ke3oY+AE+6jm2VbbFv9o5
YiFLI7BOZk0bHiWr9a1fSmCw7YMs0Q+c/SHfV4Bn4VzYzh5UIjwsBOFcj+UVRen6
mpdca5wyoIUjdH8DmzGEEmV3o4LMyF2yf/bh9Yg0CWkaVITeZ3TxxhZNUgblIZ3p
IXmFcF4KbZOU7ZbYYlEBwMERPi3rtnTRlBFl761FRQqqKNrT93jNnTvR8TvpFI6a
JYLbWjxWUbPKJtY8ILAYModXv6ihliGY6fEfhHAm0+UKveOFNqhJlPgqS3le7qhg
oF2y2c7MscKCZHB6ipWoqpJOVLZLtrr7N9y02JV2QDj6SR7Plgv/w0r4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOV+PKKGT0KZDooJA2+L87i6GLZMB8GA1UdIwQY
MBaAFMz2nvilSDDFp7Y3iR/DyQqxLLp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDct
ZjQ1OTIzNWQ5ODdiLzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDctZjQ1OTIzNWQ5ODdi
LzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh/u5tEh
IYnpl13tMMNd+PpekmiDcAXJtCz/1tFBrTIfaX9yAnhj0kduH7F7Vv4gj3LlvPV6
hup8fasNiG2bc0XRjjf5RqxkZ8KJgEyfacOneRorQvHvYcwsIkj8gEoDipdizW8b
u0ro13CZJKErPgER5UrQCsu/A4oHU6iPc1fvKLUZzQGWQ+yzKZZSfo8gv37RXr7I
C5afDY4yFqfpbExElz7XstCtAKJ8EziEpFeQs+MGByFgSHgxSwqpRg3V5SV+NMKZ
nBAPS68MMC2Ub+J0jowZqgOzO0aVgBjKyE9o8JeU3NLYtaY7pPXQYtFpWFgohzXn
pS0qHae2pQe49w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:20:10 2026 by rpki-client