Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: +ve3+pU2zV9iYekIqK13Ubug6dHirllcJ7y8eLXGZOY=
Subject key identifier: 15:95:D0:71:2E:02:D5:62:31:4E:49:58:7D:6D:F0:91:85:20:60:85
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019CAC0FFDBF8715E20DF88EF1D9349A4BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0498
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: WQ6DYURQXI89tqlPFoak6qkbu2T1jsela83yHzoqi6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fd:bf:87:15:e2:0d:f8:8e:f1:d9:34:9a:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=1595d0712e02d562314e49587d6df09185206085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:3d:c6:69:8d:1d:fb:26:b6:d1:b9:3d:fa:
94:62:9d:79:e4:fd:4b:b9:48:08:b0:fd:7d:c0:a8:
b1:2c:34:26:3a:b7:4c:25:de:72:23:24:a9:f2:07:
d1:2a:1c:d3:dd:52:e0:b3:dc:40:be:ad:cd:6b:65:
7a:83:a1:8d:36:eb:fb:4e:c4:0c:31:68:f4:5c:60:
6a:77:f9:86:dc:b2:7c:40:6f:f7:12:95:c8:6b:45:
4f:fa:b2:fb:bc:6a:21:0c:ea:58:e7:b6:d8:59:58:
95:66:bb:be:96:dc:31:cd:37:9f:40:6c:5b:22:e0:
0a:79:dc:44:4b:6c:dc:29:02:09:65:03:a8:c5:5f:
5c:ff:ea:7b:d5:8d:ae:df:4e:21:33:11:39:6a:0e:
bc:c6:66:95:41:4d:34:1f:a1:41:4b:95:f2:be:ee:
7d:96:3f:66:44:ac:d4:d8:a9:a0:cd:77:f0:38:48:
5e:bb:1e:f5:f9:19:4f:7a:37:68:9a:1e:3c:eb:0a:
a7:bf:e2:91:64:b9:01:87:1d:8c:b9:2d:c1:7b:93:
04:66:73:21:df:52:e6:b6:9f:b7:b3:44:b7:86:86:
8e:7a:a1:53:ba:b3:6e:dc:bf:2c:46:08:34:05:7d:
8d:4d:f5:48:3d:75:64:df:99:5c:73:e8:d0:f6:70:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:D0:71:2E:02:D5:62:31:4E:49:58:7D:6D:F0:91:85:20:60:85
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:27:11:f6:af:ee:2b:17:6c:40:35:c7:28:4c:da:d2:89:75:
60:af:be:96:f0:ff:c9:9f:ba:fd:22:a7:42:88:6f:66:42:cd:
0b:9b:da:bb:e5:39:39:00:96:43:60:bd:f0:29:5d:89:8f:e9:
51:c6:f2:d3:79:83:d3:15:f4:95:ab:22:cc:b7:d5:68:f5:3c:
94:e9:6e:8a:14:e9:32:f0:e5:93:5b:1e:5a:55:50:3e:d4:18:
0c:4c:f3:25:8f:db:43:4a:14:eb:77:28:06:9b:8b:f3:7a:c2:
91:ec:27:06:bd:22:90:52:51:be:ae:58:de:2c:d5:ff:bd:d5:
37:0f:d8:c8:9d:08:95:28:a5:64:81:b1:d0:25:93:b8:6d:96:
d3:7f:5d:36:25:01:c0:d0:fd:09:02:54:4e:3a:99:2e:58:59:
96:aa:8d:0b:ae:5b:9f:1c:52:2f:e2:dc:40:a7:82:78:be:7f:
5e:77:3c:22:47:33:2d:1e:14:57:25:76:5e:a1:80:12:d4:19:
60:cc:b6:2d:57:1d:fb:15:7b:ef:87:00:87:d5:e5:e8:cd:76:
96:49:e4:3d:00:41:53:b9:ef:02:9b:21:e4:0b:9e:14:6a:b5:
46:8b:a5:97:46:d2:de:8b:25:26:3a:3e:74:32:79:61:5b:5c:
34:c3:2b:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/2/hxXiDfiO8dk0mku3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5
ZTcwZjIwHhcNMjYwMzAyMDEwMDU1WhcNMjYwMzAzMDEwMDU1WjAzMTEwLwYDVQQD
EygxNTk1ZDA3MTJlMDJkNTYyMzE0ZTQ5NTg3ZDZkZjA5MTg1MjA2MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyY9xmmNHfsmttG5PfqUYp155P1L
uUgIsP19wKixLDQmOrdMJd5yIySp8gfRKhzT3VLgs9xAvq3Na2V6g6GNNuv7TsQM
MWj0XGBqd/mG3LJ8QG/3EpXIa0VP+rL7vGohDOpY57bYWViVZru+ltwxzTefQGxb
IuAKedxES2zcKQIJZQOoxV9c/+p71Y2u304hMxE5ag68xmaVQU00H6FBS5Xyvu59
lj9mRKzU2KmgzXfwOEheux71+RlPejdomh486wqnv+KRZLkBhx2MuS3Be5MEZnMh
31Lmtp+3s0S3hoaOeqFTurNu3L8sRgg0BX2NTfVIPXVk35lcc+jQ9nBKFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWV0HEuAtViMU5JWH1t8JGFIGCFMB8GA1UdIwQY
MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt
NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj
LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkScR9q/u
KxdsQDXHKEza0ol1YK++lvD/yZ+6/SKnQohvZkLNC5vau+U5OQCWQ2C98CldiY/p
Ucby03mD0xX0lasizLfVaPU8lOluihTpMvDlk1seWlVQPtQYDEzzJY/bQ0oU63co
BpuL83rCkewnBr0ikFJRvq5Y3izV/73VNw/YyJ0IlSilZIGx0CWTuG2W039dNiUB
wND9CQJUTjqZLlhZlqqNC65bnxxSL+LcQKeCeL5/Xnc8IkczLR4UVyV2XqGAEtQZ
YMy2LVcd+xV774cAh9Xl6M12lknkPQBBU7nvApsh5AueFGq1Roull0bS3oslJjo+
dDJ5YVtcNMMrQA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:49 2026 by rpki-client