Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: 6tCPhIiKm8A4cfCc2vTuHp9IfGlXFTWANiXaNov8vWc=
Subject key identifier: 56:3C:3E:CF:12:23:91:18:ED:F0:03:AD:26:5F:20:8E:1B:BD:22:6C
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019CAA21B1049403085F8515FD5D2B76564F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 10F0
Signing time: Sun 01 Mar 2026 16:01:00 +0000
Manifest this update: Sun 01 Mar 2026 16:01:00 +0000
Manifest next update: Mon 02 Mar 2026 16:01:00 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: P66FQXNLoXMMk3C1LSdw2rncKXYoIZPjYxNXpvfuE1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:b1:04:94:03:08:5f:85:15:fd:5d:2b:76:56:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Mar 1 16:01:00 2026 GMT
Not After : Mar 2 16:01:00 2026 GMT
Subject: CN=563c3ecf12239118edf003ad265f208e1bbd226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:70:f6:18:5f:90:e0:a0:f1:48:17:4b:30:
89:36:3d:5e:83:eb:c1:11:df:6e:82:2d:19:77:9c:
f9:58:99:b9:2a:66:7a:c8:58:4f:cd:51:26:b1:fb:
d9:5b:b3:16:ce:15:04:a0:82:5e:41:91:72:63:5f:
68:8a:d4:15:b0:28:b9:1c:7d:f7:17:4f:9d:e0:fb:
93:0b:13:2d:fd:47:d3:0a:3d:61:c3:6a:cb:cc:83:
8c:3d:f0:7f:ab:15:44:f2:bd:db:38:dc:e0:4f:2f:
43:ec:1d:af:51:36:c2:ab:5e:a7:35:65:a2:4f:cf:
35:87:f0:09:d3:bc:70:9a:f5:8d:29:78:82:75:ac:
f2:9e:6a:80:59:74:65:ef:72:2a:0f:9b:aa:ef:9f:
40:6c:24:28:da:bf:62:7f:cf:f0:46:41:83:1a:d2:
0f:7a:dc:23:7c:e9:b2:d2:27:b8:a6:c7:6f:18:1d:
0d:1f:8f:2d:35:f4:66:1b:70:f6:e6:0f:64:4f:8b:
a1:fe:31:80:55:1d:cb:14:b7:35:16:65:be:eb:e6:
c7:22:0a:05:a9:53:55:2f:8e:be:8a:e9:37:38:20:
be:6e:03:92:00:87:e6:c4:3e:8b:ce:81:5b:bc:b0:
05:0b:71:ea:22:27:40:92:83:77:64:3c:b9:98:c8:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:3E:CF:12:23:91:18:ED:F0:03:AD:26:5F:20:8E:1B:BD:22:6C
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:b0:fa:aa:5f:c3:9c:41:cd:f7:82:97:2a:8e:e3:d3:79:
f9:0d:84:56:27:22:d2:b9:fa:9a:ca:a8:fe:3e:f4:1a:cc:b1:
73:a2:78:0b:f0:1c:b4:6c:67:96:b2:2e:89:b1:43:fd:cc:6f:
60:fe:4d:c8:5f:14:77:1d:1a:b4:d4:3d:3c:6d:f2:12:52:c0:
aa:3a:8e:73:63:58:d9:f8:f4:e9:44:9b:ae:bb:fd:26:dc:5b:
7f:20:c6:03:b5:b9:c5:ca:8b:f1:98:31:7c:86:8a:6b:2c:3e:
f0:5e:b2:d4:cb:ee:80:88:d0:85:fe:13:fc:de:c4:48:9e:dc:
39:ae:dc:9a:02:73:31:3c:00:1c:54:fd:58:52:86:10:af:a9:
db:e6:9f:0f:4f:fb:06:97:74:ed:92:cf:b3:fa:81:b2:b8:88:
32:bd:8a:91:43:bf:2b:3a:15:c3:c6:38:59:c1:77:5e:5b:75:
54:d1:2d:02:9c:05:9a:de:bd:93:93:73:5d:dd:a3:d8:c5:dd:
16:1f:bd:a4:34:27:b6:ab:27:27:94:7c:3b:d1:83:f6:33:9d:
4f:b8:d7:9a:3c:b3:87:7d:4c:c2:9b:cf:4c:7a:f5:e8:7d:aa:
2b:12:05:ca:a5:0a:29:28:36:9e:24:f3:3d:ac:a4:ed:94:fd:
38:7b:b6:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIbEElAMIX4UV/V0rdlZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1
ODUyMGMwHhcNMjYwMzAxMTYwMTAwWhcNMjYwMzAyMTYwMTAwWjAzMTEwLwYDVQQD
Eyg1NjNjM2VjZjEyMjM5MTE4ZWRmMDAzYWQyNjVmMjA4ZTFiYmQyMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Zw9hhfkOCg8UgXSzCJNj1eg+vB
Ed9ugi0Zd5z5WJm5KmZ6yFhPzVEmsfvZW7MWzhUEoIJeQZFyY19oitQVsCi5HH33
F0+d4PuTCxMt/UfTCj1hw2rLzIOMPfB/qxVE8r3bONzgTy9D7B2vUTbCq16nNWWi
T881h/AJ07xwmvWNKXiCdazynmqAWXRl73IqD5uq759AbCQo2r9if8/wRkGDGtIP
etwjfOmy0ie4psdvGB0NH48tNfRmG3D25g9kT4uh/jGAVR3LFLc1FmW+6+bHIgoF
qVNVL46+iuk3OCC+bgOSAIfmxD6LzoFbvLAFC3HqIidAkoN3ZDy5mMiGCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY8Ps8SI5EY7fADrSZfII4bvSJsMB8GA1UdIwQY
MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt
MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4
LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkaw+qpf
w5xBzfeClyqO49N5+Q2EVici0rn6msqo/j70Gsyxc6J4C/ActGxnlrIuibFD/cxv
YP5NyF8Udx0atNQ9PG3yElLAqjqOc2NY2fj06USbrrv9JtxbfyDGA7W5xcqL8Zgx
fIaKayw+8F6y1MvugIjQhf4T/N7ESJ7cOa7cmgJzMTwAHFT9WFKGEK+p2+afD0/7
Bpd07ZLPs/qBsriIMr2KkUO/KzoVw8Y4WcF3Xlt1VNEtApwFmt69k5NzXd2j2MXd
Fh+9pDQntqsnJ5R8O9GD9jOdT7jXmjyzh31MwpvPTHr16H2qKxIFyqUKKSg2niTz
Payk7ZT9OHu2Qw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:34 2026 by rpki-client