Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: BgOJ1H/f7RhpkiScPcbWs9pC1sHEfGfH0lMaeED3iMo=
Subject key identifier: 88:D1:4B:64:1A:0B:26:F2:A7:42:56:C5:33:F1:1F:C9:4C:1D:9F:99
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019CAC100A9FF285400B87A476161281B05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 10F1
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: nrqEbHrQXg7Q+Q9JY2rEfIbSQMe5ULy9xOkT9WvHpq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0a:9f:f2:85:40:0b:87:a4:76:16:12:81:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=88d14b641a0b26f2a74256c533f11fc94c1d9f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:9c:f2:f5:f5:7d:97:c1:17:eb:33:7f:b5:
ed:a1:3b:5c:bb:33:3b:5b:8f:85:97:dd:8c:ca:86:
dd:64:a3:84:3e:68:13:ec:a0:07:cf:5a:52:62:cc:
9b:7f:1f:44:d5:96:39:00:d1:4d:c6:f9:67:8f:17:
d1:84:6b:1e:7b:1d:5a:0d:81:c4:26:b9:f6:1d:06:
c3:ba:e7:83:3f:ab:e1:e9:40:9f:99:b4:94:47:80:
77:40:b2:4f:6c:3e:22:20:e6:65:f7:ae:da:f4:ff:
90:55:0e:61:29:a7:3a:9e:54:01:f1:70:4b:d9:b9:
5d:41:14:d8:13:64:b6:1d:0d:ee:6f:1e:d4:03:95:
30:be:ff:e5:0a:04:9a:06:e0:14:a3:37:6c:3c:a9:
39:a1:ce:92:da:40:36:08:98:46:1d:40:9f:f4:92:
10:c2:d0:e6:b0:97:e4:5f:53:a7:af:42:39:87:f6:
68:d7:41:22:79:50:7a:da:d0:ee:eb:ae:9a:1e:a7:
df:68:fa:7b:04:28:42:4f:9c:cb:9b:1d:6b:90:04:
99:9e:ff:33:ff:c4:a2:86:db:08:1c:c3:e2:6d:09:
b6:cd:67:7d:df:17:37:d7:38:55:59:09:9c:5c:97:
ba:f1:a6:e6:bc:1e:aa:1f:d2:bb:02:e9:51:98:94:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:4B:64:1A:0B:26:F2:A7:42:56:C5:33:F1:1F:C9:4C:1D:9F:99
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c4:e8:a2:6e:5d:3f:dc:09:8f:be:15:4b:d3:57:77:31:ef:
e4:8c:dd:a2:ea:80:74:89:57:2c:23:b7:49:9e:d8:04:a9:e3:
f7:94:1f:f8:43:25:de:ce:3d:b8:fd:27:b4:c1:70:9e:db:b1:
33:0a:a8:3a:7f:1e:90:71:0e:26:b5:8b:57:1e:2f:0d:ed:82:
f7:00:4d:df:a3:8b:2b:00:d8:80:db:3a:f9:77:5b:d3:28:fc:
4f:e7:24:91:69:94:39:3b:2f:09:cc:72:0a:bc:b6:be:15:22:
4f:fc:b4:12:74:4e:75:25:d8:4a:8f:0a:5d:d9:f3:cd:95:80:
29:dd:68:6b:68:a0:f3:64:d9:2c:69:7e:49:6f:2f:c1:48:8f:
6a:d3:d5:7b:9d:c3:df:7b:61:24:4c:19:09:8f:e3:b2:85:78:
56:5a:30:0f:81:42:8a:51:ce:b6:41:68:ca:03:84:03:5b:3b:
37:35:25:6f:7e:04:3b:b6:40:cc:02:9f:1a:c8:8e:96:8b:54:
d1:29:d0:b6:0c:c0:0e:9c:b7:f5:c5:61:f1:66:3a:b3:91:d7:
da:26:35:c7:0c:44:53:37:f1:36:b9:06:d1:24:d5:65:ae:a7:
82:50:bd:d9:f7:75:74:ee:d6:32:b2:29:db:8c:32:d6:42:5d:
e6:9a:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:11 2026 by rpki-client