Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: fauQXS7m9jodhODWZV5yIM/0vX/yMeuS+PDNfnRKvaw=
Subject key identifier: 37:9C:30:1F:CA:49:C0:06:48:1B:6B:17:2E:2E:5C:15:44:7C:40:E9
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019D99D0E8B2F1CBE3D869BC3D7BE988DE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0E0C
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: wa74Do31KzQh02n/TcNYhPzi+I5FjujA2C2Mqn49SA8=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e8:b2:f1:cb:e3:d8:69:bc:3d:7b:e9:88:de:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=379c301fca49c006481b6b172e2e5c15447c40e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:6c:92:54:3e:e6:87:7b:ad:c2:93:b1:cb:
72:35:c8:45:52:c9:f7:dc:be:5f:0e:95:5b:71:d5:
8f:c9:9a:ff:0f:bc:a7:bf:0e:d0:38:7f:1b:da:69:
c5:70:f2:27:24:a7:41:e4:b0:03:ca:76:8e:8f:11:
d3:b6:97:41:cd:8f:e4:69:c9:bf:c5:d2:79:95:9c:
1c:66:69:64:21:05:fd:40:f3:44:08:3b:5b:80:3b:
87:b2:94:59:f2:d2:31:ec:80:8e:e8:a9:d4:eb:ed:
67:53:53:6c:c8:ca:61:a6:ab:ba:9d:2f:0a:9f:d4:
82:ce:33:7a:21:5f:28:64:c0:ca:d3:be:e6:f5:15:
51:c7:0a:02:69:09:95:4c:00:a3:f7:b4:6b:b4:d7:
ea:b9:16:3b:10:68:a5:05:4f:c0:86:96:d9:09:ec:
25:11:f9:3d:db:47:65:55:18:38:97:6d:38:8d:dd:
7d:98:75:be:11:b3:e3:fd:72:0b:db:b1:4b:ff:32:
bf:d7:b9:78:55:55:4b:90:8f:d3:2f:c4:f2:9b:83:
7a:6f:d5:c1:fb:ce:75:77:75:4d:58:8a:c4:56:76:
5f:6e:5c:b7:bf:67:57:90:67:8b:20:d4:65:89:69:
bf:48:24:8f:20:bc:4d:ef:6b:69:83:ad:4f:49:f7:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9C:30:1F:CA:49:C0:06:48:1B:6B:17:2E:2E:5C:15:44:7C:40:E9
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:ec:56:0f:32:85:54:70:44:8a:04:7d:dc:b3:38:6e:7c:
b5:12:3a:69:f5:f1:ca:40:91:b2:74:56:45:be:fa:28:94:eb:
96:ce:35:c0:2f:9c:28:9b:6b:c2:94:b7:bf:47:b4:e8:61:f7:
a7:86:a4:7d:01:f6:2d:08:ff:34:7f:ae:4d:96:ca:f0:df:85:
3b:c8:5f:70:94:b2:4d:e8:e9:6b:ab:b1:a0:51:51:24:cd:68:
5f:90:da:8b:3b:bc:d5:94:13:86:da:54:e6:b8:5a:43:d5:ca:
e6:90:ad:3c:2c:2f:f7:e0:89:d3:0c:48:7e:51:5c:bd:bb:61:
02:ad:01:bc:fe:0e:6e:96:27:c6:fe:07:15:40:18:12:e7:06:
c9:c6:af:be:3d:8a:e1:03:00:ec:24:bc:15:ac:a6:e4:47:4a:
f5:38:0a:66:38:90:71:e9:17:82:6a:39:c9:8a:d2:92:3d:25:
d1:25:09:04:16:d6:a8:2f:11:6a:f1:71:15:d6:6f:a6:68:33:
de:cb:c6:bb:96:91:3c:b6:5d:60:b0:3a:54:d2:9a:a6:46:20:
06:64:88:0b:1d:ff:5e:d7:4a:ee:1d:7f:43:af:a5:9d:e6:a1:
38:86:f9:af:2e:ae:42:25:ca:a8:21:20:30:f7:24:08:a3:71:
cd:1b:a5:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Oiy8cvj2Gm8PXvpiN5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0
YjViMTEwHhcNMjYwNDE3MDUwMTM4WhcNMjYwNDE4MDUwMTM4WjAzMTEwLwYDVQQD
EygzNzljMzAxZmNhNDljMDA2NDgxYjZiMTcyZTJlNWMxNTQ0N2M0MGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWVsklQ+5od7rcKTsctyNchFUsn3
3L5fDpVbcdWPyZr/D7ynvw7QOH8b2mnFcPInJKdB5LADynaOjxHTtpdBzY/kacm/
xdJ5lZwcZmlkIQX9QPNECDtbgDuHspRZ8tIx7ICO6KnU6+1nU1NsyMphpqu6nS8K
n9SCzjN6IV8oZMDK077m9RVRxwoCaQmVTACj97RrtNfquRY7EGilBU/AhpbZCewl
Efk920dlVRg4l204jd19mHW+EbPj/XIL27FL/zK/17l4VVVLkI/TL8Tym4N6b9XB
+851d3VNWIrEVnZfbly3v2dXkGeLINRliWm/SCSPILxN72tpg61PSfcASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDecMB/KScAGSBtrFy4uXBVEfEDpMB8GA1UdIwQY
MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt
NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl
LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4zsVg8y
hVRwRIoEfdyzOG58tRI6afXxykCRsnRWRb76KJTrls41wC+cKJtrwpS3v0e06GH3
p4akfQH2LQj/NH+uTZbK8N+FO8hfcJSyTejpa6uxoFFRJM1oX5Daizu81ZQThtpU
5rhaQ9XK5pCtPCwv9+CJ0wxIflFcvbthAq0BvP4ObpYnxv4HFUAYEucGycavvj2K
4QMA7CS8Faym5EdK9TgKZjiQcekXgmo5yYrSkj0l0SUJBBbWqC8RavFxFdZvpmgz
3svGu5aRPLZdYLA6VNKapkYgBmSICx3/XtdK7h1/Q6+lneahOIb5ry6uQiXKqCEg
MPckCKNxzRulpg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:01 2026 by rpki-client