Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: wxXITuY1uvRSny4uQ5QgiJlvol7viUX5ET4ddfwMVUQ=
Subject key identifier: BB:09:4E:EE:56:15:E8:82:6D:0C:92:66:E1:AB:7B:13:68:35:F4:2C
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 019CAD5957CEB514CE3B6089565B23A0EB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 1044
Signing time: Mon 02 Mar 2026 07:00:39 +0000
Manifest this update: Mon 02 Mar 2026 07:00:39 +0000
Manifest next update: Tue 03 Mar 2026 07:00:39 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: HX6pLeDHPF9N6Y5kXpvhtvF5ri3PpwF5YmCgf5YCEes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:57:ce:b5:14:ce:3b:60:89:56:5b:23:a0:eb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Mar 2 07:00:39 2026 GMT
Not After : Mar 3 07:00:39 2026 GMT
Subject: CN=bb094eee5615e8826d0c9266e1ab7b136835f42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:85:a9:47:40:f7:7f:12:0c:87:65:d4:1a:
ce:4d:8f:a9:5a:6e:25:fa:43:d3:a7:1a:68:24:84:
07:1d:d4:59:27:c2:b8:ad:d5:32:ef:4e:15:31:3e:
82:b9:6c:45:20:9e:47:0b:0e:54:53:3e:86:be:9a:
34:a9:6a:b9:f7:d5:85:f0:34:e3:9c:96:41:75:7d:
29:de:53:ea:02:65:0a:5d:34:be:eb:4f:db:f6:0a:
a5:2d:c4:ff:ea:af:d6:43:f1:40:b8:f7:1c:fa:d7:
8a:ee:08:6e:8e:6e:fc:f6:f7:ee:89:f6:a5:5c:14:
37:21:8d:63:3d:ae:34:62:de:4f:73:6b:fa:aa:94:
e2:7a:76:91:c3:66:d6:08:33:8f:d5:61:28:4a:b4:
d4:b2:c0:fd:12:f1:09:2f:fe:c2:eb:2f:aa:3c:fa:
f5:0e:6c:23:9c:b5:cd:b1:5c:4f:65:75:18:5e:15:
d7:93:9d:30:51:38:09:09:27:db:ca:31:d8:fa:97:
93:b9:9d:59:9f:05:9e:f1:33:d5:2c:72:f4:14:34:
71:7f:d4:3f:43:34:43:ba:58:74:52:2f:34:30:eb:
e3:45:02:46:4b:c4:1a:73:cc:36:4e:19:c9:e2:b2:
8e:6c:9e:cb:4b:8d:5a:32:28:b2:35:a9:5f:74:ac:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:4E:EE:56:15:E8:82:6D:0C:92:66:E1:AB:7B:13:68:35:F4:2C
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:7e:e8:3e:02:d2:70:7c:3c:42:e0:29:10:0b:76:d3:71:
9f:c3:c0:23:22:36:7d:46:ca:e9:52:6b:be:86:b6:79:01:50:
51:9a:b3:1f:4c:10:96:d6:27:8c:e6:52:b7:5f:c4:7b:2a:4b:
eb:1b:7c:d5:90:33:cd:83:ec:89:13:dc:14:ae:ec:8e:c8:e1:
b0:6c:a8:af:e4:26:90:96:28:45:a7:a2:8f:06:c6:74:6b:12:
72:45:26:e1:f5:51:7e:d7:73:a6:01:df:f4:91:77:3f:18:fe:
99:20:48:19:fb:c8:9f:22:aa:fb:40:c5:be:54:1f:d4:f2:46:
04:e3:9e:3f:2b:6d:46:db:56:7e:b4:32:07:c1:d8:ad:d7:1b:
59:6d:91:fc:fc:d2:88:43:11:45:a7:73:70:20:8d:f0:bc:55:
9c:de:84:8c:6d:e7:cb:db:f1:ea:ad:8b:a7:43:70:a0:69:bb:
a9:be:a7:54:72:c9:19:21:7b:61:b1:7f:bb:47:02:1e:1c:61:
7f:8c:5e:de:88:c0:7a:61:f7:a6:6c:5f:87:da:16:6d:12:c9:
90:57:20:9e:26:80:6e:e8:4d:85:b6:0d:bc:75:94:ab:11:d5:
b2:87:03:57:d4:1d:d5:b3:c2:d1:c6:42:24:cb:da:b8:b7:ae:
a6:71:a3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWVfOtRTOO2CJVlsjoOufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2
Mjc5ZWMwHhcNMjYwMzAyMDcwMDM5WhcNMjYwMzAzMDcwMDM5WjAzMTEwLwYDVQQD
EyhiYjA5NGVlZTU2MTVlODgyNmQwYzkyNjZlMWFiN2IxMzY4MzVmNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr66FqUdA938SDIdl1BrOTY+pWm4l
+kPTpxpoJIQHHdRZJ8K4rdUy704VMT6CuWxFIJ5HCw5UUz6Gvpo0qWq599WF8DTj
nJZBdX0p3lPqAmUKXTS+60/b9gqlLcT/6q/WQ/FAuPcc+teK7ghujm789vfuifal
XBQ3IY1jPa40Yt5Pc2v6qpTienaRw2bWCDOP1WEoSrTUssD9EvEJL/7C6y+qPPr1
DmwjnLXNsVxPZXUYXhXXk50wUTgJCSfbyjHY+peTuZ1ZnwWe8TPVLHL0FDRxf9Q/
QzRDulh0Ui80MOvjRQJGS8Qac8w2ThnJ4rKObJ7LS41aMiiyNalfdKxu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsJTu5WFeiCbQySZuGrexNoNfQsMB8GA1UdIwQY
MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt
MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx
LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABx+6D4C
0nB8PELgKRALdtNxn8PAIyI2fUbK6VJrvoa2eQFQUZqzH0wQltYnjOZSt1/EeypL
6xt81ZAzzYPsiRPcFK7sjsjhsGyor+QmkJYoRaeijwbGdGsSckUm4fVRftdzpgHf
9JF3Pxj+mSBIGfvInyKq+0DFvlQf1PJGBOOePyttRttWfrQyB8HYrdcbWW2R/PzS
iEMRRadzcCCN8LxVnN6EjG3ny9vx6q2Lp0NwoGm7qb6nVHLJGSF7YbF/u0cCHhxh
f4xe3ojAemH3pmxfh9oWbRLJkFcgniaAbuhNhbYNvHWUqxHVsocDV9Qd1bPC0cZC
JMvauLeupnGj4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:24 2026 by rpki-client