Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: RIyiQwQYq2B2IpXLgkaAPLRU5T4mJMBCmZUuRcLASrc=
Subject key identifier: 2A:F6:43:26:82:0D:83:35:9B:D8:AE:BC:53:40:13:09:85:1F:45:05
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019D9A06D36AEB85850F70B20DD42789E40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0D79
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=)
2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: c3KpxbWi00mEpnC4qj7d9qVIcsrx6Pj/Aw4vWY8dUHY=)
3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d3:6a:eb:85:85:0f:70:b2:0d:d4:27:89:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=2af64326820d83359bd8aebc53401309851f4505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:a1:3c:20:17:86:0f:05:f4:db:d7:c1:1a:
6b:66:7b:97:60:f2:d8:3e:19:ec:14:72:01:f2:90:
dd:e0:fe:82:90:77:81:28:e4:10:6e:42:99:5e:6f:
f8:71:df:72:6d:cc:1f:5b:cb:02:08:9c:bc:66:7c:
e0:12:9e:6c:b6:e8:99:b3:9f:04:82:12:e5:2a:81:
b7:95:16:97:1d:77:9a:3b:7a:3a:28:fa:03:46:a1:
59:38:a1:bd:03:a4:d8:ff:11:6e:9c:a7:dc:e8:78:
76:04:5c:11:e4:48:d0:60:36:c2:4e:4e:ff:b5:43:
eb:08:65:fd:39:b6:32:36:a7:3d:1c:da:5d:26:6e:
bc:69:dd:89:17:c3:d3:86:26:22:85:7b:da:9d:e9:
6d:31:ca:50:8f:c7:d4:9a:e5:20:95:fd:2b:be:2b:
2c:3f:c8:99:bf:b4:b4:f1:de:58:ef:d6:2a:8d:7e:
06:fa:4d:f3:cb:b0:8b:40:2d:a3:fb:f4:c7:f8:50:
7a:f3:a0:aa:6a:9c:dc:9e:b9:12:87:34:ed:89:a3:
8f:47:1d:94:b6:2b:c5:43:b7:19:16:a5:b8:18:56:
13:8f:7a:94:6c:86:c7:05:11:cf:75:74:20:0f:cd:
c6:55:61:e8:d5:04:0e:c1:dd:be:31:bf:93:63:33:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:43:26:82:0D:83:35:9B:D8:AE:BC:53:40:13:09:85:1F:45:05
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:24:1b:4f:ac:6e:ff:b2:3a:76:07:fe:07:8c:7a:0c:c6:
6a:85:53:85:19:6f:48:27:3f:19:6e:fc:8a:d1:4e:b9:a1:b4:
84:14:65:82:76:2c:b9:4d:c2:81:71:8e:99:c2:d8:2a:d3:cc:
8c:89:52:1a:f5:5f:98:e5:8d:51:3f:7a:cc:87:85:22:a8:91:
6a:8e:42:8e:06:68:19:20:4e:2a:01:0a:c9:d7:32:dc:82:2d:
40:cc:2d:e7:68:23:5b:cd:92:b8:ab:bf:78:2a:bf:0e:dd:54:
c7:7c:fb:f3:a0:e2:13:9c:a8:86:74:00:77:ed:8b:c9:85:09:
a0:f9:b9:93:49:13:5c:b1:ce:dd:1f:10:4c:89:09:96:db:1e:
cd:9f:58:8f:8b:a3:e9:04:de:59:5a:9b:06:49:94:15:60:86:
1b:7e:ef:51:cc:ae:5f:18:5e:87:b9:cf:3d:4b:d9:ee:20:d0:
5b:da:a8:38:c5:83:89:2e:b2:d2:b2:40:81:a7:21:6c:4c:82:
db:aa:0d:18:ca:93:28:2c:fd:86:ef:06:5b:d3:12:1f:15:b7:
d4:1e:9f:4a:cf:19:0e:0d:26:88:03:cb:b6:ff:c1:9f:a6:b3:
2e:46:99:f2:4d:45:33:94:00:ac:c3:14:c1:dd:19:76:47:b8:
0f:87:e6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBtNq64WFD3CyDdQnieQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx
NzEzZWEwHhcNMjYwNDE3MDYwMDMxWhcNMjYwNDE4MDYwMDMxWjAzMTEwLwYDVQQD
EygyYWY2NDMyNjgyMGQ4MzM1OWJkOGFlYmM1MzQwMTMwOTg1MWY0NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJahPCAXhg8F9NvXwRprZnuXYPLY
PhnsFHIB8pDd4P6CkHeBKOQQbkKZXm/4cd9ybcwfW8sCCJy8ZnzgEp5stuiZs58E
ghLlKoG3lRaXHXeaO3o6KPoDRqFZOKG9A6TY/xFunKfc6Hh2BFwR5EjQYDbCTk7/
tUPrCGX9ObYyNqc9HNpdJm68ad2JF8PThiYihXvaneltMcpQj8fUmuUglf0rviss
P8iZv7S08d5Y79YqjX4G+k3zy7CLQC2j+/TH+FB686CqapzcnrkShzTtiaOPRx2U
tivFQ7cZFqW4GFYTj3qUbIbHBRHPdXQgD83GVWHo1QQOwd2+Mb+TYzMTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr2QyaCDYM1m9iuvFNAEwmFH0UFMB8GA1UdIwQY
MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt
Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm
LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLIkG0+s
bv+yOnYH/geMegzGaoVThRlvSCc/GW78itFOuaG0hBRlgnYsuU3CgXGOmcLYKtPM
jIlSGvVfmOWNUT96zIeFIqiRao5CjgZoGSBOKgEKydcy3IItQMwt52gjW82SuKu/
eCq/Dt1Ux3z786DiE5yohnQAd+2LyYUJoPm5k0kTXLHO3R8QTIkJltsezZ9Yj4uj
6QTeWVqbBkmUFWCGG37vUcyuXxheh7nPPUvZ7iDQW9qoOMWDiS6y0rJAgachbEyC
26oNGMqTKCz9hu8GW9MSHxW31B6fSs8ZDg0miAPLtv/Bn6azLkaZ8k1FM5QArMMU
wd0Zdke4D4fmJg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:12 2026 by rpki-client