Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: BNk/9J7aCkZ/EgiXiP4tfac0bhp2SNMbAAxsPdWZ7Vg=
Subject key identifier: 0E:64:23:70:82:9B:6D:10:51:45:72:14:D0:DD:9E:1E:59:EB:73:DC
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019CABA203E4BF2BCB835286C97CB22E5DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 0B29
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: yvrrKB9xTDA56bK0HryCCRMUjQpnb2aMgb3zmX//cl0=)
2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:03:e4:bf:2b:cb:83:52:86:c9:7c:b2:2e:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=0e642370829b6d1051457214d0dd9e1e59eb73dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:fc:a1:01:58:ca:c9:b7:be:ee:21:7e:29:
c2:75:da:bd:a9:ba:47:96:0f:95:b4:77:b6:ac:83:
ee:0c:11:9f:13:c7:f2:97:a1:37:22:59:c9:41:e8:
6e:3c:ea:3a:d5:bd:ae:b8:40:5f:81:1f:36:6c:19:
6a:c2:e2:98:a2:58:4c:2a:81:81:e3:1e:32:64:1f:
70:76:68:55:f9:52:00:0e:aa:4b:4d:a0:65:4b:20:
b5:e2:c2:9e:6e:a0:65:7c:ce:2c:2c:5a:d1:32:83:
d3:98:86:3a:6d:09:e9:d9:b8:35:98:7d:bb:7e:ea:
1f:ef:d9:90:d0:2d:dd:ae:3e:82:75:b8:6b:f5:12:
c5:d0:00:d0:59:44:2d:e9:5d:43:19:97:b4:e7:69:
13:b8:7c:dd:eb:9d:d9:21:f4:e9:92:45:3c:1a:30:
ed:16:36:fb:79:93:9f:fa:11:4e:7b:00:00:83:35:
57:9d:54:02:23:15:d8:4e:b7:15:3c:f1:c6:3d:f1:
c3:a9:2d:76:cb:80:14:49:b6:c7:cd:65:cd:5c:46:
cf:62:79:16:cb:d4:fe:3b:30:20:fb:63:5e:68:6a:
51:6f:03:59:ec:f1:ea:a0:aa:69:f9:b1:f1:83:0d:
47:06:fd:ff:51:b5:32:81:e1:f8:35:97:c4:98:af:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:23:70:82:9B:6D:10:51:45:72:14:D0:DD:9E:1E:59:EB:73:DC
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:45:d1:70:88:9e:62:e0:c7:84:f0:8b:a1:e0:c3:c0:36:
21:e4:28:24:cd:1f:51:62:f3:43:df:31:0c:ad:95:26:11:69:
a0:4d:4a:5d:94:9d:1f:27:68:af:c8:ec:0a:93:98:17:20:69:
f5:60:78:77:99:14:4a:18:af:3e:fc:b9:94:9e:23:5f:13:9e:
de:5b:01:e7:e8:3e:e7:8c:dd:a8:bd:1c:aa:ea:ea:94:db:fb:
dd:06:ec:a5:ee:34:a7:2b:96:5f:cc:67:67:dd:b8:95:16:9c:
28:4b:e9:44:54:91:da:9b:53:75:8f:d7:54:4f:44:c9:70:c8:
a6:93:b8:4c:24:71:49:16:9a:52:54:13:cc:11:4d:d9:1a:5e:
cc:60:69:e1:8b:0c:56:ae:c6:25:6a:ed:12:ea:75:da:36:a5:
dc:14:56:84:7d:ce:6b:90:1b:db:90:81:96:de:35:ec:6f:9a:
b4:70:c6:34:5a:38:66:ea:2e:47:a3:aa:1b:64:70:f5:a7:b1:
a4:01:79:dd:6d:ff:17:e9:fc:05:f1:9a:00:b0:d8:4e:e2:4a:
82:43:23:d3:f2:50:36:56:8b:5b:9d:b0:b1:52:d7:81:69:76:
f1:0e:f9:d1:e4:1b:60:c1:61:30:4d:58:77:1a:d2:40:00:71:
85:0d:1f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrogPkvyvLg1KGyXyyLl24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjYwMzAxMjMwMDQ3WhcNMjYwMzAyMjMwMDQ3WjAzMTEwLwYDVQQD
EygwZTY0MjM3MDgyOWI2ZDEwNTE0NTcyMTRkMGRkOWUxZTU5ZWI3M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MX8oQFYysm3vu4hfinCddq9qbpH
lg+VtHe2rIPuDBGfE8fyl6E3IlnJQehuPOo61b2uuEBfgR82bBlqwuKYolhMKoGB
4x4yZB9wdmhV+VIADqpLTaBlSyC14sKebqBlfM4sLFrRMoPTmIY6bQnp2bg1mH27
fuof79mQ0C3drj6Cdbhr9RLF0ADQWUQt6V1DGZe052kTuHzd653ZIfTpkkU8GjDt
Fjb7eZOf+hFOewAAgzVXnVQCIxXYTrcVPPHGPfHDqS12y4AUSbbHzWXNXEbPYnkW
y9T+OzAg+2NeaGpRbwNZ7PHqoKpp+bHxgw1HBv3/UbUygeH4NZfEmK94/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5kI3CCm20QUUVyFNDdnh5Z63PcMB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEBF0XCI
nmLgx4Twi6Hgw8A2IeQoJM0fUWLzQ98xDK2VJhFpoE1KXZSdHydor8jsCpOYFyBp
9WB4d5kUShivPvy5lJ4jXxOe3lsB5+g+54zdqL0cqurqlNv73Qbspe40pyuWX8xn
Z924lRacKEvpRFSR2ptTdY/XVE9EyXDIppO4TCRxSRaaUlQTzBFN2RpezGBp4YsM
Vq7GJWrtEup12jal3BRWhH3Oa5Ab25CBlt417G+atHDGNFo4ZuouR6OqG2Rw9aex
pAF53W3/F+n8BfGaALDYTuJKgkMj0/JQNlaLW52wsVLXgWl28Q750eQbYMFhME1Y
dxrSQABxhQ0fZQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:45 2026 by rpki-client