Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: cLtyNyjgHjkARumGbajahfgzDDpXFH6cU8gvbkViyns=
Subject key identifier: 69:AF:F8:A1:45:78:5C:72:1D:B6:1F:D1:93:B9:10:49:C1:52:6D:29
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 019CADFE4FE9A6EF2B6E4A57DEA635022FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 156D
Signing time: Mon 02 Mar 2026 10:00:50 +0000
Manifest this update: Mon 02 Mar 2026 10:00:50 +0000
Manifest next update: Tue 03 Mar 2026 10:00:50 +0000
Files and hashes: 1: 1YDQiRpIkl8dKkn91J4BZcjxLG8.roa (hash: swQzBQz8qYH+Ns05cWnj9m77XbPZt1CRiB4AvNOU1+4=)
2: 6mugNtdudbDdBm5CKSX1k0XhW7Q.roa (hash: QwJGGsLBaGqVdpKRP/uEJPtx3uyW+xZeB/D0UVYiuCA=)
3: JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa (hash: VfIPApxtxEUphMHmhUBJLte8wFfUS25OGKXWPVng31I=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: X3LJhHmbxgJloINt+Es9dojFsIlf+sAgd+c2iUO4Jbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4f:e9:a6:ef:2b:6e:4a:57:de:a6:35:02:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Mar 2 10:00:50 2026 GMT
Not After : Mar 3 10:00:50 2026 GMT
Subject: CN=69aff8a145785c721db61fd193b91049c1526d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:cf:a2:8d:19:1f:98:92:46:ee:f4:22:5e:
c1:f8:ff:b4:8a:d4:46:df:b5:ef:b4:b2:cc:e3:14:
c8:ba:3e:31:15:2d:6f:4c:bc:11:6d:94:fd:18:6b:
95:91:09:e2:a9:30:00:c8:48:b6:74:dc:94:c4:9f:
ea:5c:ae:08:c4:04:0e:91:29:d7:03:22:35:52:23:
0a:3c:fc:95:c1:fa:d4:ec:d1:8b:62:af:5e:e6:92:
0f:67:d1:5d:fb:32:41:2f:e1:26:27:ec:cd:ec:78:
fe:41:3d:af:fa:46:5c:93:d1:c0:bd:f8:9a:55:fb:
e8:db:ed:22:23:b8:c5:ef:3a:38:40:e9:d9:64:23:
60:c3:48:a0:a7:23:9f:fe:77:f6:e6:d7:ef:73:a5:
9a:4f:1e:e7:29:9f:90:65:18:19:e4:cd:d9:d1:9f:
c0:1b:cb:c0:28:10:14:01:90:40:a1:ee:97:3d:40:
da:00:17:2a:f6:03:d7:5d:9b:92:49:f0:4f:a9:ed:
38:0b:1e:86:ca:52:34:ec:4f:3e:ad:b2:f0:cd:c7:
93:6a:26:0e:5d:7a:bb:ba:48:b4:e4:86:98:06:e9:
44:30:38:63:24:44:dd:9f:99:08:1b:77:2b:fb:48:
8c:0b:ff:a6:bb:b2:c2:ec:7b:3e:ca:6a:a7:2b:cf:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:F8:A1:45:78:5C:72:1D:B6:1F:D1:93:B9:10:49:C1:52:6D:29
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8e:c2:59:35:1f:35:9d:35:ce:6a:a6:00:c3:a3:2f:56:24:
8b:b6:e8:ca:9c:37:24:70:d4:d0:bb:8c:1d:c6:57:f5:8c:5c:
51:4d:c3:fc:f2:03:a7:20:74:02:43:1f:73:e3:b3:6a:1a:39:
ed:79:eb:a4:09:8d:aa:ce:35:47:2f:1b:6c:b7:a7:a6:31:a7:
c2:e2:7a:93:bc:30:61:a0:a4:2a:7b:7b:b2:9f:be:a7:9e:7c:
c2:eb:7c:2a:58:7a:ec:c5:20:47:a3:1d:94:79:ac:f8:be:34:
7e:d7:37:4b:50:20:40:d0:b3:7f:3b:b0:d0:9c:18:66:3a:19:
30:db:71:68:b0:5b:6d:fb:1a:67:b3:3f:31:0e:35:44:e8:4c:
b0:99:4a:bd:8a:fb:10:a0:35:7f:e2:3f:81:64:9b:c5:33:99:
2d:fb:3c:a5:3e:98:41:42:9b:4d:93:0b:01:bc:f3:a9:17:3d:
95:fa:df:05:54:78:5a:31:89:94:91:f5:df:5d:86:cf:b9:d2:
bd:94:6d:b8:10:ac:13:f2:9e:b4:16:b3:e9:04:3b:1c:d5:61:
ab:8c:d6:52:1f:59:a0:8f:ea:59:4f:af:1b:fa:7a:23:ee:e5:
33:ef:0b:df:b2:4a:3e:1d:88:4a:23:97:e3:1a:a2:0d:41:12:
4d:8f:e0:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/k/ppu8rbkpX3qY1Ai+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx
Njk1MDYwHhcNMjYwMzAyMTAwMDUwWhcNMjYwMzAzMTAwMDUwWjAzMTEwLwYDVQQD
Eyg2OWFmZjhhMTQ1Nzg1YzcyMWRiNjFmZDE5M2I5MTA0OWMxNTI2ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpPPoo0ZH5iSRu70Il7B+P+0itRG
37XvtLLM4xTIuj4xFS1vTLwRbZT9GGuVkQniqTAAyEi2dNyUxJ/qXK4IxAQOkSnX
AyI1UiMKPPyVwfrU7NGLYq9e5pIPZ9Fd+zJBL+EmJ+zN7Hj+QT2v+kZck9HAvfia
Vfvo2+0iI7jF7zo4QOnZZCNgw0igpyOf/nf25tfvc6WaTx7nKZ+QZRgZ5M3Z0Z/A
G8vAKBAUAZBAoe6XPUDaABcq9gPXXZuSSfBPqe04Cx6GylI07E8+rbLwzceTaiYO
XXq7uki05IaYBulEMDhjJETdn5kIG3cr+0iMC/+mu7LC7Hs+ymqnK88JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmv+KFFeFxyHbYf0ZO5EEnBUm0pMB8GA1UdIwQY
MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct
ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx
LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl47CWTUf
NZ01zmqmAMOjL1Yki7boypw3JHDU0LuMHcZX9YxcUU3D/PIDpyB0AkMfc+Ozaho5
7XnrpAmNqs41Ry8bbLenpjGnwuJ6k7wwYaCkKnt7sp++p558wut8Klh67MUgR6Md
lHms+L40ftc3S1AgQNCzfzuw0JwYZjoZMNtxaLBbbfsaZ7M/MQ41ROhMsJlKvYr7
EKA1f+I/gWSbxTOZLfs8pT6YQUKbTZMLAbzzqRc9lfrfBVR4WjGJlJH1312Gz7nS
vZRtuBCsE/KetBaz6QQ7HNVhq4zWUh9ZoI/qWU+vG/p6I+7lM+8L37JKPh2ISiOX
4xqiDUESTY/gLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:19 2026 by rpki-client