Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: ESV+VogA5dwNvpApPksbShyZTPGSUhhqy/ef+Tnyf7Y=
Subject key identifier: 9B:BC:6F:E9:6E:A2:0B:5D:A6:74:48:58:E5:AE:E2:DA:2E:44:7C:89
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019D98F51301BB6CB07D391F878B4347E18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: pidVOU8kL4d3q6c2dKkRNs+UNTMEUPJZV+26fFOkU5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:13:01:bb:6c:b0:7d:39:1f:87:8b:43:47:e1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=9bbc6fe96ea20b5da6744858e5aee2da2e447c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:f1:92:84:22:8d:c1:ed:8c:83:42:bb:b1:
23:db:83:ac:b5:89:0f:18:73:7e:9d:10:18:b1:bf:
94:aa:02:00:4e:7d:c8:3a:a6:a8:63:c7:53:69:5b:
bd:a2:c6:fc:aa:9d:7a:ec:23:15:8a:d6:c5:b5:ca:
18:c2:40:9f:8f:98:69:dc:ba:7c:83:77:34:ef:b9:
1a:86:21:1a:ca:3d:7c:14:88:48:62:f8:e6:d9:e0:
7a:ba:85:67:18:61:be:6a:09:91:5d:d1:9b:1d:d9:
cf:0d:01:58:b0:6e:18:14:b0:22:55:98:fd:be:72:
33:a7:7a:bc:e5:bc:cb:88:c2:f4:1b:7a:b2:ae:d1:
e4:fe:21:10:06:f4:41:5b:77:c2:9a:70:4a:db:a8:
78:2c:dd:53:1f:5a:e3:b2:2a:dc:2e:ce:df:c7:da:
3c:23:ce:49:96:f7:37:c8:62:96:4e:04:9f:4a:19:
39:ef:74:12:ab:24:ad:e9:3d:0f:0f:84:ff:51:06:
43:34:ac:a4:5b:dc:99:2a:1c:cf:ee:f0:6a:9c:9b:
f5:2b:7b:79:e8:2a:47:5b:be:97:68:2e:7a:80:bf:
8d:4c:cb:c5:d3:58:17:4d:10:04:52:45:58:69:73:
6c:43:fc:83:2d:5a:10:a2:dd:5a:1b:30:ff:ee:a6:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:6F:E9:6E:A2:0B:5D:A6:74:48:58:E5:AE:E2:DA:2E:44:7C:89
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:76:6f:3e:ca:d6:bc:1f:ef:62:eb:e9:de:3b:da:89:68:
ef:4b:ce:fb:9f:e3:ab:9a:b6:4e:9a:df:e5:93:de:4b:76:b0:
49:3c:20:16:4d:ee:65:63:6d:dc:7a:d2:cb:d4:59:61:10:ea:
e5:41:81:84:75:3b:d9:f3:17:b0:fc:f7:93:fa:0d:0b:ac:14:
ab:f0:a0:b1:68:cf:f5:b3:7b:83:64:f7:32:0f:3c:55:ec:0a:
64:ee:80:12:fb:36:26:e0:77:4c:79:4d:0b:1e:4f:eb:37:e4:
b4:79:01:df:82:69:d1:fd:6f:c9:4d:36:9e:8b:0c:ea:54:b9:
a3:a2:2a:dc:ce:3f:c8:c5:6d:2c:cf:42:84:c6:63:52:c3:3c:
4a:12:90:ed:bd:d5:a3:f5:75:d5:de:87:85:0c:2a:1e:ab:68:
e7:9b:b3:1a:09:e7:92:76:c4:f7:45:3c:ca:a6:cd:ba:e3:b7:
b5:35:71:38:33:b1:1d:56:17:a7:ea:e1:92:69:41:47:e0:0b:
cb:c6:4f:46:03:37:43:9c:73:e2:fc:b9:e8:f0:20:af:6d:ce:
5c:39:cc:d5:25:42:51:9c:f3:d3:d6:1b:26:7a:46:3c:b7:95:
79:34:d4:58:c5:e6:ea:8f:ce:22:98:31:4c:cc:6e:d0:aa:03:
7e:b9:f5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9RMBu2ywfTkfh4tDR+GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk
ZDQ5NTQwHhcNMjYwNDE3MDEwMTMxWhcNMjYwNDE4MDEwMTMxWjAzMTEwLwYDVQQD
Eyg5YmJjNmZlOTZlYTIwYjVkYTY3NDQ4NThlNWFlZTJkYTJlNDQ3Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVDxkoQijcHtjINCu7Ej24OstYkP
GHN+nRAYsb+UqgIATn3IOqaoY8dTaVu9osb8qp167CMVitbFtcoYwkCfj5hp3Lp8
g3c077kahiEayj18FIhIYvjm2eB6uoVnGGG+agmRXdGbHdnPDQFYsG4YFLAiVZj9
vnIzp3q85bzLiML0G3qyrtHk/iEQBvRBW3fCmnBK26h4LN1TH1rjsircLs7fx9o8
I85Jlvc3yGKWTgSfShk573QSqySt6T0PD4T/UQZDNKykW9yZKhzP7vBqnJv1K3t5
6CpHW76XaC56gL+NTMvF01gXTRAEUkVYaXNsQ/yDLVoQot1aGzD/7qYrowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu8b+luogtdpnRIWOWu4touRHyJMB8GA1UdIwQY
MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt
ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3
LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVt2bz7K
1rwf72Lr6d472olo70vO+5/jq5q2Tprf5ZPeS3awSTwgFk3uZWNt3HrSy9RZYRDq
5UGBhHU72fMXsPz3k/oNC6wUq/CgsWjP9bN7g2T3Mg88VewKZO6AEvs2JuB3THlN
Cx5P6zfktHkB34Jp0f1vyU02nosM6lS5o6Iq3M4/yMVtLM9ChMZjUsM8ShKQ7b3V
o/V11d6HhQwqHqto55uzGgnnknbE90U8yqbNuuO3tTVxODOxHVYXp+rhkmlBR+AL
y8ZPRgM3Q5xz4vy56PAgr23OXDnM1SVCUZzz09YbJnpGPLeVeTTUWMXm6o/OIpgx
TMxu0KoDfrn1pw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:44 2026 by rpki-client