Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: 0Qj1Ll/U2jbChi5S+SgvP5t9g5/87AqNojoiXLvAdhk=
Subject key identifier: 24:5F:EC:59:12:1A:E3:B8:3D:4B:FD:38:38:92:DD:44:D8:A5:9C:BA
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 019CACEBD92212F898AD0A28C1B4AAAE3800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 114B
Signing time: Mon 02 Mar 2026 05:01:03 +0000
Manifest this update: Mon 02 Mar 2026 05:01:03 +0000
Manifest next update: Tue 03 Mar 2026 05:01:03 +0000
Files and hashes: 1: 2hflLbfqAWKpFyYGnXBTWiWqwxs.roa (hash: lI9Xhzw78sH7hBtTcjJSosgoG/UbF5gG44NR4ynAOeo=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: xUiraMc7+HZxoRxCRv03fsHgfm+v3gzCrxw58kGrj4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d9:22:12:f8:98:ad:0a:28:c1:b4:aa:ae:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Mar 2 05:01:03 2026 GMT
Not After : Mar 3 05:01:03 2026 GMT
Subject: CN=245fec59121ae3b83d4bfd383892dd44d8a59cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:d9:f7:34:2a:9e:b9:e8:46:e8:f5:84:5e:
48:0c:a3:29:bc:c2:61:a0:7d:54:4c:72:1b:30:88:
48:b8:04:8f:1b:c7:2f:09:f3:30:5a:aa:ed:da:7f:
21:15:99:98:98:97:6b:8b:d2:ac:fa:8a:a2:56:1a:
f7:27:71:a8:95:02:e0:f1:a4:47:b7:b8:4b:2e:2a:
5a:9a:c7:ba:3c:a1:48:6a:32:4c:d1:ca:7a:63:b4:
5d:9c:e8:5e:9e:1d:21:d2:e9:d7:c2:6f:a0:c0:15:
dd:2c:13:28:cb:7f:da:43:6c:03:6b:6e:87:4f:72:
1e:a1:bc:9e:cb:21:a7:05:ac:8b:0d:90:ae:66:7f:
97:e3:35:7b:b9:41:5e:b3:fb:e7:17:f7:84:ba:61:
a6:f7:7d:a5:4d:4b:bc:22:b1:53:4e:4e:a7:78:cd:
f6:2a:f2:79:0b:91:be:c4:fd:89:06:56:ba:e4:51:
9b:09:66:53:d8:62:1f:3f:36:76:44:c7:78:9a:5b:
9e:b5:2c:f2:68:62:bf:98:8c:2f:90:03:86:91:06:
be:ee:7e:bc:14:eb:8a:49:29:77:2c:be:d0:eb:d0:
51:b4:b6:51:6b:0e:50:90:4d:4e:26:91:63:1d:37:
90:f8:73:79:1a:c4:96:4d:43:f3:f8:21:a0:dc:59:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:EC:59:12:1A:E3:B8:3D:4B:FD:38:38:92:DD:44:D8:A5:9C:BA
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d5:41:85:15:b2:f2:32:d6:5b:8f:b0:58:b2:de:81:f6:eb:
ba:9a:5d:86:59:50:eb:38:23:05:76:49:00:58:cd:5e:81:06:
d6:5e:fa:96:f0:81:82:d6:9b:bf:90:9e:f7:1d:1c:e0:1f:b6:
27:ca:e7:4d:85:42:b1:da:d4:4b:e7:68:49:b1:e7:1a:e6:35:
a3:b4:4e:e1:f8:83:97:8f:00:da:63:33:1f:84:6e:6d:c7:e3:
94:bc:7e:de:16:99:10:42:63:85:06:a0:db:15:57:30:1d:54:
0b:60:19:c0:41:2b:66:07:e5:f1:78:be:1b:04:9e:a3:8e:a2:
56:9e:8b:4a:44:9b:0c:70:31:89:94:6f:84:d6:b0:33:86:b7:
2f:52:bd:35:6a:84:0e:38:06:63:0e:4e:b4:4d:d8:98:71:2b:
3c:41:a0:79:b5:4c:45:13:9d:f2:bf:59:f2:d0:43:87:0f:46:
0b:91:29:76:f9:3c:7e:44:e9:61:f6:46:04:76:63:37:4e:dc:
d5:f7:79:8c:5d:70:78:dd:71:31:6f:5f:d3:38:a1:78:cf:e9:
2e:fb:68:04:4d:0b:62:ed:c6:e0:18:a7:d4:c7:f0:8b:ec:51:
44:63:ff:58:1e:ec:3e:0f:1a:fe:9e:c7:9b:6e:ec:34:ba:aa:
15:40:1a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys69kiEviYrQoowbSqrjgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmVlZTc4YTAwODRkODMxZGUxYTI1MDAxODNlMTY0ODk1
MTZjY2YwHhcNMjYwMzAyMDUwMTAzWhcNMjYwMzAzMDUwMTAzWjAzMTEwLwYDVQQD
EygyNDVmZWM1OTEyMWFlM2I4M2Q0YmZkMzgzODkyZGQ0NGQ4YTU5Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79bZ9zQqnrnoRuj1hF5IDKMpvMJh
oH1UTHIbMIhIuASPG8cvCfMwWqrt2n8hFZmYmJdri9Ks+oqiVhr3J3GolQLg8aRH
t7hLLipamse6PKFIajJM0cp6Y7RdnOhenh0h0unXwm+gwBXdLBMoy3/aQ2wDa26H
T3IeobyeyyGnBayLDZCuZn+X4zV7uUFes/vnF/eEumGm932lTUu8IrFTTk6neM32
KvJ5C5G+xP2JBla65FGbCWZT2GIfPzZ2RMd4mluetSzyaGK/mIwvkAOGkQa+7n68
FOuKSSl3LL7Q69BRtLZRaw5QkE1OJpFjHTeQ+HN5GsSWTUPz+CGg3Fky8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRf7FkSGuO4PUv9ODiS3UTYpZy6MB8GA1UdIwQY
MBaAFM8u7nigCE2DHeGiUAGD4WSJUWzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYt
NzE4YjljNDBmZDI1LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYtNzE4YjljNDBmZDI1
LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9VBhRWy
8jLWW4+wWLLegfbruppdhllQ6zgjBXZJAFjNXoEG1l76lvCBgtabv5Ce9x0c4B+2
J8rnTYVCsdrUS+doSbHnGuY1o7RO4fiDl48A2mMzH4RubcfjlLx+3haZEEJjhQag
2xVXMB1UC2AZwEErZgfl8Xi+GwSeo46iVp6LSkSbDHAxiZRvhNawM4a3L1K9NWqE
DjgGYw5OtE3YmHErPEGgebVMRROd8r9Z8tBDhw9GC5Epdvk8fkTpYfZGBHZjN07c
1fd5jF1weN1xMW9f0ziheM/pLvtoBE0LYu3G4Bin1Mfwi+xRRGP/WB7sPg8a/p7H
m27sNLqqFUAa5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:53 2026 by rpki-client