Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: QtihUa+h29EHaRXeiWSznicztlEUdGzfEWr+XQJeCgA=
Subject key identifier: C1:82:60:08:D4:94:AA:83:FD:F8:4A:6E:75:41:1B:58:3C:4E:0E:29
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019CAE35EF50DC074C9E990C7C2AB7C96A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 11C6
Signing time: Mon 02 Mar 2026 11:01:36 +0000
Manifest this update: Mon 02 Mar 2026 11:01:36 +0000
Manifest next update: Tue 03 Mar 2026 11:01:36 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 8le3+C/7b7wqNnxoLsojaRM2KPiDpjpG28EDwYdR790=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ef:50:dc:07:4c:9e:99:0c:7c:2a:b7:c9:6a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Mar 2 11:01:36 2026 GMT
Not After : Mar 3 11:01:36 2026 GMT
Subject: CN=c1826008d494aa83fdf84a6e75411b583c4e0e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:05:60:36:08:76:3e:36:d7:ba:18:bc:82:
31:f2:50:63:34:c4:d9:f6:e2:29:0d:6f:81:27:b4:
53:a0:4b:e9:1d:de:84:e4:b1:62:07:b0:ec:ad:07:
8a:85:02:84:a9:0d:25:f8:2f:f2:9c:2a:17:c4:e0:
27:b3:8e:9e:67:0d:f4:2e:b1:dc:cc:fd:ef:ed:4a:
d5:2b:8c:b6:30:00:0f:3a:e5:fb:e7:00:3b:f9:32:
74:ef:26:5b:6e:e3:ab:f4:ad:f3:6d:9c:77:32:94:
9e:5c:1a:bf:9c:9f:db:48:2b:93:db:52:fa:92:97:
f1:3e:d5:9d:de:e2:44:cd:f7:c7:34:c5:30:b4:e6:
dc:4f:cb:00:54:5f:2d:1d:ee:0d:db:7b:9e:2b:7a:
c4:7c:9d:37:d7:3d:d7:73:3d:91:a8:3b:10:e4:5c:
84:d3:30:e3:53:39:32:76:6f:d8:11:78:41:e8:4f:
dd:d0:dc:f4:1d:13:63:1d:1c:70:25:37:c9:4b:c9:
43:2e:ec:83:d8:e3:67:97:c1:8b:7a:6e:81:05:46:
3f:9b:a4:db:62:0e:d9:69:37:23:5a:b3:35:a8:fa:
17:eb:ac:cc:0a:22:25:5e:92:27:7e:9d:a0:db:ea:
d8:dc:34:3b:3b:c4:f9:dd:02:95:e7:48:8a:d1:c2:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:60:08:D4:94:AA:83:FD:F8:4A:6E:75:41:1B:58:3C:4E:0E:29
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:78:ae:cc:f4:61:6a:de:c8:b7:bd:ab:21:dd:84:f5:d7:4b:
1e:33:0c:71:ca:78:6f:b5:85:9b:a3:10:ea:4f:9f:e1:e5:9d:
2b:b6:2c:6f:e7:ed:0c:b9:84:30:93:5b:e0:ed:f4:f8:9a:91:
f3:91:c3:a6:80:56:2a:4e:c8:ab:a5:06:e4:89:17:fc:93:87:
61:ba:4d:3a:bb:f5:0d:9d:7e:ae:f4:9d:e2:d3:c9:43:37:c8:
5b:29:d3:93:b7:65:43:d2:ca:43:e6:22:4f:fe:a1:d3:dc:34:
ee:bc:e5:f2:0c:a5:55:94:6a:22:4d:2e:c1:08:9b:41:15:1f:
62:f7:e0:c6:2d:cb:68:ae:f4:39:bd:44:01:31:4b:e9:81:1d:
88:ce:f0:00:fb:4e:a6:e7:3d:9c:ca:c8:73:10:3b:0a:30:a7:
05:e0:c7:e6:21:c8:73:95:6f:56:22:dd:e6:01:c6:0b:70:82:
ec:5f:8f:94:ac:5d:2d:80:ff:c2:e3:79:fc:a2:6d:72:b1:d8:
6b:73:92:6b:0c:7f:ce:07:42:45:c5:dc:59:30:5c:a1:f6:6e:
91:91:d7:4c:78:c0:b7:5f:85:81:ce:93:e9:0a:da:01:9a:ec:
13:74:ed:cb:e8:e4:f1:2a:4a:72:df:30:23:c8:3c:b5:03:d1:
1c:5b:19:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNe9Q3AdMnpkMfCq3yWqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0
MmZjNmUwHhcNMjYwMzAyMTEwMTM2WhcNMjYwMzAzMTEwMTM2WjAzMTEwLwYDVQQD
EyhjMTgyNjAwOGQ0OTRhYTgzZmRmODRhNmU3NTQxMWI1ODNjNGUwZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlMFYDYIdj4217oYvIIx8lBjNMTZ
9uIpDW+BJ7RToEvpHd6E5LFiB7DsrQeKhQKEqQ0l+C/ynCoXxOAns46eZw30LrHc
zP3v7UrVK4y2MAAPOuX75wA7+TJ07yZbbuOr9K3zbZx3MpSeXBq/nJ/bSCuT21L6
kpfxPtWd3uJEzffHNMUwtObcT8sAVF8tHe4N23ueK3rEfJ031z3Xcz2RqDsQ5FyE
0zDjUzkydm/YEXhB6E/d0Nz0HRNjHRxwJTfJS8lDLuyD2ONnl8GLem6BBUY/m6Tb
Yg7ZaTcjWrM1qPoX66zMCiIlXpInfp2g2+rY3DQ7O8T53QKV50iK0cL+jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGCYAjUlKqD/fhKbnVBG1g8Tg4pMB8GA1UdIwQY
MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt
ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri
LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXiuzPRh
at7It72rId2E9ddLHjMMccp4b7WFm6MQ6k+f4eWdK7Ysb+ftDLmEMJNb4O30+JqR
85HDpoBWKk7Iq6UG5IkX/JOHYbpNOrv1DZ1+rvSd4tPJQzfIWynTk7dlQ9LKQ+Yi
T/6h09w07rzl8gylVZRqIk0uwQibQRUfYvfgxi3LaK70Ob1EATFL6YEdiM7wAPtO
puc9nMrIcxA7CjCnBeDH5iHIc5VvViLd5gHGC3CC7F+PlKxdLYD/wuN5/KJtcrHY
a3OSawx/zgdCRcXcWTBcofZukZHXTHjAt1+Fgc6T6QraAZrsE3Tty+jk8SpKct8w
I8g8tQPRHFsZRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:17 2026 by rpki-client