Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: HpK1CuI+PUdhVeeevWj5Xkosyvh/lcDW2Y3E4DlIY7o=
Subject key identifier: A3:09:40:C5:3C:7B:1E:E2:13:3C:45:2A:E0:E8:DB:8D:19:66:4B:FB
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019D9A74D536836FBAF6D279E84FED7384C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 1795
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: kaawTWn373ESMRDtLxVVkz+u4AC+VKv78o3B2bUfm9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d5:36:83:6f:ba:f6:d2:79:e8:4f:ed:73:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=a30940c53c7b1ee2133c452ae0e8db8d19664bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:1c:37:83:db:0c:42:b6:62:d1:74:2a:df:
93:2c:ab:ea:bb:1c:b9:dd:4b:4d:a3:56:84:41:74:
d3:a3:30:3d:50:ea:ca:87:78:c0:f2:6a:1b:f6:b3:
1c:be:fa:41:82:41:4f:4a:27:85:bf:2b:85:3a:73:
c5:aa:e7:78:7f:65:46:0f:43:09:b7:21:75:5d:6d:
5b:cd:f8:cb:25:50:d7:01:05:98:63:73:cc:14:b2:
98:e0:34:2a:71:6c:89:c5:38:d4:a0:cc:0a:5c:0d:
61:8f:99:cb:d0:2a:42:db:b6:f8:c1:55:10:6c:fb:
db:e2:ea:ba:be:91:9d:63:5f:4c:f4:05:8e:fb:f2:
37:22:5d:1c:80:5f:66:1f:f9:68:2b:f6:bf:67:79:
53:18:7a:6f:5b:b0:78:b2:14:0c:b6:66:38:98:ce:
74:cd:38:b6:c5:2a:b6:2a:ed:b1:18:e7:a1:98:a0:
9f:15:79:14:d0:a2:01:8a:e1:ba:c6:b9:37:24:3c:
b9:d3:a9:32:ae:93:49:07:43:44:35:7f:b8:0a:fd:
d1:ec:ce:1c:3a:08:ba:d0:5c:12:91:c7:60:bd:34:
04:94:2e:2a:3e:31:da:c1:e7:de:42:55:4d:3d:f4:
db:0c:c9:a5:60:5b:8c:37:b6:c8:73:d9:87:61:d4:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:40:C5:3C:7B:1E:E2:13:3C:45:2A:E0:E8:DB:8D:19:66:4B:FB
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:eb:0b:a9:ca:99:39:04:97:6d:dc:ed:fd:2c:83:2e:b0:
95:5a:2e:fa:e1:f8:07:85:5f:29:bb:33:f7:58:8b:0a:f5:1a:
0e:c4:bf:a8:d8:99:01:96:ba:c4:13:9f:0a:72:30:7e:61:85:
f6:1b:f1:23:8a:97:59:2e:f5:30:94:74:dc:05:99:23:de:38:
66:f7:c6:19:25:a3:30:e1:00:53:7f:11:5f:a2:6b:1d:4a:96:
4d:e6:8e:c1:6c:29:61:ea:cf:69:20:d3:c9:39:21:be:f9:e5:
fd:56:10:87:9f:c5:26:c3:e8:b6:34:f4:78:0d:3b:43:53:d5:
21:26:78:1d:24:66:6e:b5:03:53:41:7f:30:f9:86:2a:a4:32:
5d:45:c3:32:0c:42:10:1d:14:f3:bb:f6:0c:fe:ea:7d:ed:1b:
e3:2c:d4:b0:81:b8:d1:ab:9a:f3:9f:fd:49:57:83:f3:0f:a1:
d8:56:03:51:33:22:50:87:5b:6f:88:2d:98:3d:02:c0:91:08:
9e:6c:86:e3:dd:e8:8b:78:48:c0:63:7f:f4:f4:f9:ab:d2:0b:
ce:1e:82:07:be:73:ab:cf:a3:e9:52:4c:c9:97:7a:0e:4d:cd:
ae:b2:c6:0c:41:50:fb:ab:a8:1c:1a:52:22:37:c5:8f:d7:9b:
c5:cd:50:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adNU2g2+69tJ56E/tc4THMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh
MGNmNmEwHhcNMjYwNDE3MDgwMDQxWhcNMjYwNDE4MDgwMDQxWjAzMTEwLwYDVQQD
EyhhMzA5NDBjNTNjN2IxZWUyMTMzYzQ1MmFlMGU4ZGI4ZDE5NjY0YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu4cN4PbDEK2YtF0Kt+TLKvquxy5
3UtNo1aEQXTTozA9UOrKh3jA8mob9rMcvvpBgkFPSieFvyuFOnPFqud4f2VGD0MJ
tyF1XW1bzfjLJVDXAQWYY3PMFLKY4DQqcWyJxTjUoMwKXA1hj5nL0CpC27b4wVUQ
bPvb4uq6vpGdY19M9AWO+/I3Il0cgF9mH/loK/a/Z3lTGHpvW7B4shQMtmY4mM50
zTi2xSq2Ku2xGOehmKCfFXkU0KIBiuG6xrk3JDy506kyrpNJB0NENX+4Cv3R7M4c
Ogi60FwSkcdgvTQElC4qPjHawefeQlVNPfTbDMmlYFuMN7bIc9mHYdSX2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMJQMU8ex7iEzxFKuDo240ZZkv7MB8GA1UdIwQY
MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt
ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi
LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUzrC6nK
mTkEl23c7f0sgy6wlVou+uH4B4VfKbsz91iLCvUaDsS/qNiZAZa6xBOfCnIwfmGF
9hvxI4qXWS71MJR03AWZI944ZvfGGSWjMOEAU38RX6JrHUqWTeaOwWwpYerPaSDT
yTkhvvnl/VYQh5/FJsPotjT0eA07Q1PVISZ4HSRmbrUDU0F/MPmGKqQyXUXDMgxC
EB0U87v2DP7qfe0b4yzUsIG40aua85/9SVeD8w+h2FYDUTMiUIdbb4gtmD0CwJEI
nmyG493oi3hIwGN/9PT5q9ILzh6CB75zq8+j6VJMyZd6Dk3NrrLGDEFQ+6uoHBpS
IjfFj9ebxc1Qqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:42 2026 by rpki-client