Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: g03JkMsW/GZZKfOwjU41S21/QKpc/68Q3axD4oQmuZQ=
Subject key identifier: 39:DB:C0:40:F5:E5:E6:30:26:59:43:53:99:34:4D:CB:1D:56:1D:2F
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019D9A3E43429E2B470E174C4F85590EBD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0C05
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: 2Wyxez9lwJjrigvZyDwF8uAZSJc.roa (hash: WXXGeEGJ4mJ3r+j3BB1vcRuu9R5jmSbFBlSKzGyw5vo=)
2: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: 4j3dd3cDN0sJ3hhzKKU5FY/PlaACq6CqBJMhU4x5/kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:43:42:9e:2b:47:0e:17:4c:4f:85:59:0e:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=39dbc040f5e5e6302659435399344dcb1d561d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:f2:54:83:91:1e:48:96:28:b6:7a:61:d5:
69:80:69:8a:57:9f:39:66:11:fb:25:1c:2c:7a:6f:
0d:11:8a:ed:6e:05:7e:c9:34:e5:40:ec:c5:72:87:
ec:90:d3:3e:8c:af:12:fc:ba:8e:7e:ab:0b:2a:af:
72:4d:35:fc:e4:6a:ea:20:f4:28:05:e0:d8:59:3e:
a7:fe:d1:26:50:20:60:ee:c2:51:22:8b:59:ec:c2:
60:31:4e:21:5e:d0:c7:b0:e4:c9:0b:09:c8:f8:7a:
a8:30:d3:03:c5:ee:bb:7f:d0:63:0e:99:59:bb:db:
4b:b3:72:d3:70:3c:d5:e4:44:aa:bd:a1:ff:6c:e0:
16:f2:9f:85:bc:34:10:8d:38:4e:3b:d4:3a:9c:c1:
0b:f7:92:b5:82:0c:c8:bb:5e:71:b3:d8:5b:8d:c7:
99:9a:36:d3:02:fb:da:5b:bf:f7:5c:51:54:32:7d:
90:a0:d1:15:c9:39:2a:b0:61:32:bf:7b:0a:e6:7a:
d6:a3:df:3e:6b:e9:f4:a2:12:0c:4a:d8:91:a6:0e:
7c:31:95:94:7e:94:48:87:da:34:c0:43:42:a4:d9:
26:9f:85:e4:0f:1f:f6:53:45:10:82:6d:0f:ba:66:
e3:a4:a9:b7:fa:c6:7e:4e:f9:4a:5c:0a:d0:8f:97:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:C0:40:F5:E5:E6:30:26:59:43:53:99:34:4D:CB:1D:56:1D:2F
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:59:8a:a5:02:08:56:9c:26:d4:01:58:c3:1d:21:a4:8d:c8:
4b:3c:f2:d6:04:e0:5e:9d:ae:c7:02:75:3c:22:43:51:db:8a:
74:df:85:53:5d:ca:0b:cc:bf:fb:55:cd:3d:58:17:1c:ef:eb:
59:0b:b5:c2:93:25:ce:34:ab:0e:1d:31:57:1f:9d:8f:60:e0:
37:0b:e1:f2:1e:9a:79:21:26:fd:c1:4a:e8:29:57:4c:64:87:
49:d0:08:71:98:f6:91:23:36:04:ec:2d:39:15:17:d3:58:12:
3c:1e:a2:7a:8d:57:61:b5:c5:a0:e6:b0:09:21:b3:08:f1:13:
22:90:98:8d:5d:9d:e7:51:10:10:e8:c3:fc:b4:f6:57:84:97:
08:23:08:41:5d:23:81:19:1a:b2:95:d8:be:a8:6a:ed:bd:5c:
85:c0:1e:fe:47:45:e4:40:9c:4d:e6:4d:5c:01:59:0f:6b:db:
99:88:fc:55:6d:45:4d:d6:aa:fe:6d:da:ef:89:c1:bc:ef:03:
79:04:ca:5d:f2:33:f5:70:9c:7e:53:8b:3c:91:86:d6:c0:e3:
78:25:f2:0d:d6:fa:d8:96:94:0d:8a:0c:31:80:2e:a5:73:9d:
90:df:5f:2e:de:10:53:e6:d8:b7:2c:0b:5a:fb:dd:ce:eb:80:
42:82:13:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkNCnitHDhdMT4VZDr05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2
MWRlNTQwHhcNMjYwNDE3MDcwMTA0WhcNMjYwNDE4MDcwMTA0WjAzMTEwLwYDVQQD
EygzOWRiYzA0MGY1ZTVlNjMwMjY1OTQzNTM5OTM0NGRjYjFkNTYxZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZHyVIORHkiWKLZ6YdVpgGmKV585
ZhH7JRwsem8NEYrtbgV+yTTlQOzFcofskNM+jK8S/LqOfqsLKq9yTTX85GrqIPQo
BeDYWT6n/tEmUCBg7sJRIotZ7MJgMU4hXtDHsOTJCwnI+HqoMNMDxe67f9BjDplZ
u9tLs3LTcDzV5ESqvaH/bOAW8p+FvDQQjThOO9Q6nMEL95K1ggzIu15xs9hbjceZ
mjbTAvvaW7/3XFFUMn2QoNEVyTkqsGEyv3sK5nrWo98+a+n0ohIMStiRpg58MZWU
fpRIh9o0wENCpNkmn4XkDx/2U0UQgm0PumbjpKm3+sZ+TvlKXArQj5er5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnbwED15eYwJllDU5k0TcsdVh0vMB8GA1UdIwQY
MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt
NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw
LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1mKpQII
Vpwm1AFYwx0hpI3ISzzy1gTgXp2uxwJ1PCJDUduKdN+FU13KC8y/+1XNPVgXHO/r
WQu1wpMlzjSrDh0xVx+dj2DgNwvh8h6aeSEm/cFK6ClXTGSHSdAIcZj2kSM2BOwt
ORUX01gSPB6ieo1XYbXFoOawCSGzCPETIpCYjV2d51EQEOjD/LT2V4SXCCMIQV0j
gRkaspXYvqhq7b1chcAe/kdF5ECcTeZNXAFZD2vbmYj8VW1FTdaq/m3a74nBvO8D
eQTKXfIz9XCcflOLPJGG1sDjeCXyDdb62JaUDYoMMYAupXOdkN9fLt4QU+bYtywL
WvvdzuuAQoIT8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:38 2026 by rpki-client