Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: YZ1wIziyLTsfmyEU1LzjtCF0OX0x1qg+7Zr6DrEt7TA=
Subject key identifier: 8B:9B:C8:2C:03:BF:A9:56:92:B8:D6:24:9D:F5:41:9B:A8:BA:BF:C7
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 019D99D04D2DE10947053D33F115052CFF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 0983
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: JH3PjcuTJnfwMSHmTR/08txAJ6XBGzBL/QkPFoHnHi8=)
2: fSa9ZsWpt6cpzETcA7PiodhwAl0.roa (hash: JZ8+GnG0s73YtbrymyZrp39I9Tjd+XU3bo06GAVoOFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4d:2d:e1:09:47:05:3d:33:f1:15:05:2c:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=8b9bc82c03bfa95692b8d6249df5419ba8babfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7f:5f:d0:ce:ad:a1:dd:5c:6c:c7:5e:d3:60:
f7:50:fb:af:a1:45:a3:16:00:70:25:2b:41:3b:72:
fe:7d:65:f8:de:9f:1c:6a:50:84:16:07:2c:5a:de:
1e:0f:11:8b:b3:03:c2:8d:e9:3e:ca:b3:6b:8f:a3:
48:a4:c5:e5:1b:0c:f6:4a:15:06:92:d4:f1:29:00:
1e:76:4d:88:b4:36:7f:91:00:3c:c2:23:5b:b5:27:
a4:4d:d3:22:f0:ff:98:1e:40:03:f6:a8:5b:9e:60:
e6:32:48:57:10:17:79:63:51:a8:c1:e5:52:de:97:
53:36:51:55:0c:d1:bb:0c:d3:2a:0e:1f:01:99:78:
23:4d:dc:68:94:15:0f:2f:91:59:19:98:bf:32:22:
13:ce:be:c6:d2:50:bb:8c:74:62:7e:c2:8b:fd:d5:
4a:59:7d:52:be:7c:93:81:01:15:07:bd:0c:56:8c:
bb:27:1a:ca:ca:5f:e7:43:9f:c5:7f:81:73:ac:9f:
c6:ce:b6:dd:f3:8d:83:00:1d:53:95:c9:ad:64:11:
41:5e:cb:06:56:ab:58:3d:eb:24:a0:96:49:13:62:
fa:7d:83:fd:36:69:c9:0c:64:77:ce:2d:e1:91:8e:
6a:f2:1b:89:89:99:80:29:08:9d:e9:3f:80:63:f4:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:C8:2C:03:BF:A9:56:92:B8:D6:24:9D:F5:41:9B:A8:BA:BF:C7
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:51:a3:b2:56:c3:cd:fa:e5:fb:02:f5:30:0f:0a:d0:d3:25:
e9:1b:9a:48:4c:d2:f1:47:e1:ef:e4:3d:fd:67:c9:c4:02:5c:
fb:16:96:15:1f:eb:fd:d6:91:c3:07:a5:bc:92:82:39:f8:99:
7c:0d:e2:5c:ae:62:4f:44:97:97:b1:ea:55:cb:77:cd:a1:0b:
e1:ac:8a:a0:d1:aa:37:c6:8e:3a:56:51:5d:08:f6:45:75:bc:
6c:a0:ef:e8:b4:ff:9c:7e:c5:bf:52:19:21:35:9d:10:aa:8d:
ed:0e:47:4d:35:f3:ac:03:f0:8f:1a:0c:d2:e8:6d:0f:80:84:
19:96:1b:44:1b:f0:69:2a:da:3a:80:43:4f:18:46:65:39:e6:
b6:77:1d:82:d8:98:4c:55:58:e6:31:08:ab:04:27:b0:11:40:
73:2e:a3:74:42:b9:55:19:1a:84:9a:3e:67:a5:a1:13:51:6d:
88:a3:be:97:f9:59:40:a6:71:c3:c1:a8:97:c9:61:c7:7f:ed:
5d:7e:81:a1:81:9e:11:26:11:05:c4:fd:cb:d8:7a:c2:f6:ae:
06:f0:a7:3b:1b:45:10:2f:35:0a:35:41:d0:0e:cd:ed:49:2c:
86:56:34:ea:b9:ef:9d:4b:15:73:24:5d:b2:f2:b2:f9:1f:25:
63:de:71:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0E0t4QlHBT0z8RUFLP94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWQyN2NlMDcyY2EzMzZkM2FmYWFiODg3OWY5NGVjNjM0
NTU2NjkwHhcNMjYwNDE3MDUwMDU4WhcNMjYwNDE4MDUwMDU4WjAzMTEwLwYDVQQD
Eyg4YjliYzgyYzAzYmZhOTU2OTJiOGQ2MjQ5ZGY1NDE5YmE4YmFiZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X9f0M6tod1cbMde02D3UPuvoUWj
FgBwJStBO3L+fWX43p8calCEFgcsWt4eDxGLswPCjek+yrNrj6NIpMXlGwz2ShUG
ktTxKQAedk2ItDZ/kQA8wiNbtSekTdMi8P+YHkAD9qhbnmDmMkhXEBd5Y1GoweVS
3pdTNlFVDNG7DNMqDh8BmXgjTdxolBUPL5FZGZi/MiITzr7G0lC7jHRifsKL/dVK
WX1SvnyTgQEVB70MVoy7JxrKyl/nQ5/Ff4FzrJ/Gzrbd842DAB1TlcmtZBFBXssG
VqtYPeskoJZJE2L6fYP9NmnJDGR3zi3hkY5q8huJiZmAKQid6T+AY/QonQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIubyCwDv6lWkrjWJJ31QZuour/HMB8GA1UdIwQY
MBaAFHWdJ84HLKM206+quIeflOxjRVZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUt
NzAxMjNmNDk1MTEwLzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUtNzAxMjNmNDk1MTEw
LzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslGjslbD
zfrl+wL1MA8K0NMl6RuaSEzS8Ufh7+Q9/WfJxAJc+xaWFR/r/daRwwelvJKCOfiZ
fA3iXK5iT0SXl7HqVct3zaEL4ayKoNGqN8aOOlZRXQj2RXW8bKDv6LT/nH7Fv1IZ
ITWdEKqN7Q5HTTXzrAPwjxoM0uhtD4CEGZYbRBvwaSraOoBDTxhGZTnmtncdgtiY
TFVY5jEIqwQnsBFAcy6jdEK5VRkahJo+Z6WhE1FtiKO+l/lZQKZxw8Gol8lhx3/t
XX6BoYGeESYRBcT9y9h6wvauBvCnOxtFEC81CjVB0A7N7UkshlY06rnvnUsVcyRd
svKy+R8lY95xUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:41 2026 by rpki-client