Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: vSUGVPLi45I07BV+bkKDxV816z0V5dAIxsLRb2wnv30=
Subject key identifier: E9:DD:D4:A9:2E:97:35:B4:A9:06:A8:99:D3:76:F5:FB:71:5B:52:92
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019D9962AB81A5147644E35FCD62C36EC810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 12E0
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: OI6lTww0ligOxRChq327SUeVX5I7TClYOJaAyETgDRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ab:81:a5:14:76:44:e3:5f:cd:62:c3:6e:c8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=e9ddd4a92e9735b4a906a899d376f5fb715b5292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:96:09:62:d7:86:5a:55:6f:ba:c1:ed:90:
79:aa:c6:8e:11:51:4f:92:06:a0:dd:dd:28:c9:c3:
a9:0b:c4:a5:53:2b:e7:ab:9b:78:ca:83:be:3a:c4:
30:b3:13:6d:32:8c:bc:8f:e3:24:bb:ab:2e:75:a7:
f5:17:49:67:c0:0d:ec:c1:e1:60:c9:c7:10:9e:61:
71:38:ce:29:c3:83:bd:1b:6d:ed:7b:35:75:c6:9d:
a1:88:ef:a3:c1:f4:e0:e5:1b:b9:b7:9d:f7:86:e6:
e4:21:8b:a3:b2:db:8f:33:08:c2:a4:2a:c3:e9:80:
5c:5a:30:5e:f4:08:75:38:ea:13:7f:f8:5a:d8:36:
e0:5f:72:e3:54:e5:2e:44:8e:d3:5d:98:f3:7d:2e:
ef:80:2f:2b:27:39:74:89:ed:80:01:b5:0a:49:08:
9f:63:4b:91:92:b5:eb:d0:cb:ca:4f:c0:69:12:cd:
de:89:d1:4c:d3:92:d9:a7:66:7e:4f:9f:61:f4:86:
b8:b7:14:e0:4b:c0:d5:06:ac:54:94:bb:65:b9:45:
5f:c9:3f:8e:c9:a9:b1:78:80:cf:39:b5:57:36:a1:
59:47:55:25:98:17:d1:46:ad:8e:1c:53:88:5e:bf:
42:bb:c9:48:ba:38:50:6c:fe:32:f0:41:e6:a8:e0:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:D4:A9:2E:97:35:B4:A9:06:A8:99:D3:76:F5:FB:71:5B:52:92
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:43:89:9a:36:44:c9:ce:de:81:fd:b4:28:c9:76:10:bc:
2a:86:ed:63:32:98:ca:a2:06:c9:23:f4:46:31:0e:0e:d5:00:
93:dc:31:49:24:e8:e8:19:ce:c0:98:cb:0c:13:69:dc:0f:7a:
ba:7d:24:65:eb:01:f1:84:da:a0:6e:e9:50:50:ad:04:dd:55:
ef:49:ef:2b:4f:6c:78:d6:8a:c9:8f:3b:9c:e6:88:e0:e6:34:
95:66:73:3e:3b:aa:f0:6b:d1:de:13:b1:a8:4f:f4:cb:17:28:
fd:b8:d7:9e:ec:a4:eb:a7:83:b4:3a:9b:90:59:9e:e0:52:eb:
9e:41:34:1c:27:48:40:32:8b:59:d2:93:65:c4:03:10:6b:74:
60:37:eb:bb:bd:97:89:0f:79:c6:20:67:b4:f4:3d:d6:ab:45:
71:78:31:e4:50:bb:29:ce:14:e4:e2:84:2b:c4:f4:68:74:01:
5a:4d:f1:3f:09:dd:3d:82:24:24:f4:ad:6b:f0:f9:53:24:9e:
c9:80:cd:49:cf:45:98:ac:99:85:10:dc:66:a8:22:eb:a1:db:
7a:cc:62:27:08:91:0c:cf:97:5f:b3:79:6e:f5:78:54:bb:39:
53:a5:26:1a:be:60:c1:ac:a2:21:43:5f:87:68:cf:a3:3e:45:
7c:dd:b2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYquBpRR2RONfzWLDbsgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj
NTYwMjYwHhcNMjYwNDE3MDMwMTEzWhcNMjYwNDE4MDMwMTEzWjAzMTEwLwYDVQQD
EyhlOWRkZDRhOTJlOTczNWI0YTkwNmE4OTlkMzc2ZjVmYjcxNWI1MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc6WCWLXhlpVb7rB7ZB5qsaOEVFP
kgag3d0oycOpC8SlUyvnq5t4yoO+OsQwsxNtMoy8j+Mku6sudaf1F0lnwA3sweFg
yccQnmFxOM4pw4O9G23tezV1xp2hiO+jwfTg5Ru5t533hubkIYujstuPMwjCpCrD
6YBcWjBe9Ah1OOoTf/ha2DbgX3LjVOUuRI7TXZjzfS7vgC8rJzl0ie2AAbUKSQif
Y0uRkrXr0MvKT8BpEs3eidFM05LZp2Z+T59h9Ia4txTgS8DVBqxUlLtluUVfyT+O
yamxeIDPObVXNqFZR1UlmBfRRq2OHFOIXr9Cu8lIujhQbP4y8EHmqOB2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnd1KkulzW0qQaomdN29ftxW1KSMB8GA1UdIwQY
MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt
Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm
LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiVDiZo2
RMnO3oH9tCjJdhC8KobtYzKYyqIGySP0RjEODtUAk9wxSSTo6BnOwJjLDBNp3A96
un0kZesB8YTaoG7pUFCtBN1V70nvK09seNaKyY87nOaI4OY0lWZzPjuq8GvR3hOx
qE/0yxco/bjXnuyk66eDtDqbkFme4FLrnkE0HCdIQDKLWdKTZcQDEGt0YDfru72X
iQ95xiBntPQ91qtFcXgx5FC7Kc4U5OKEK8T0aHQBWk3xPwndPYIkJPSta/D5UySe
yYDNSc9FmKyZhRDcZqgi66HbesxiJwiRDM+XX7N5bvV4VLs5U6UmGr5gwayiIUNf
h2jPoz5FfN2yIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:36 2026 by rpki-client