Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: YTQVL7HP9nkFkLmDPprboPu0nk1HMvs5E8Wso/9g9v0=
Subject key identifier: F5:F4:8A:41:BA:99:B2:DD:B5:39:11:30:E7:6D:A1:EA:54:BB:A3:51
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019CAB344865D5A67AE148B9E1C4D74F8005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0ED1
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: lgjWE5f6FBur4txLoui9WQ1m0Wg.roa (hash: Nc9dyrcUa1QHYvN/T1aLg2QBZKFaf7gWSdVmcW5gdec=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: YYFKK6LDbsGURnM8DASpCQZxFHUxZVyECnsYAppq9iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:48:65:d5:a6:7a:e1:48:b9:e1:c4:d7:4f:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=f5f48a41ba99b2ddb5391130e76da1ea54bba351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:cc:d6:7a:4c:b1:b6:18:54:a2:09:d3:ec:
07:8b:9c:0f:75:4d:ed:10:7d:d5:43:b1:9e:92:16:
67:b2:90:c4:30:d9:55:37:3f:68:f5:c8:e4:a1:15:
d9:e0:81:6c:55:87:90:a1:13:9c:80:fd:18:d7:4b:
90:b9:5d:2c:d1:28:53:27:50:bc:94:b3:73:f0:78:
92:60:ba:af:f5:a2:d4:a4:eb:22:db:6d:a3:99:68:
71:39:17:8a:24:84:27:0b:ad:0e:6e:88:8d:38:37:
61:ab:42:63:6c:89:9c:c8:5f:7a:15:44:a9:9e:b5:
4a:4e:01:90:7e:22:4d:aa:cd:85:64:75:32:9d:08:
36:d6:c8:4e:ae:2d:0b:34:76:c5:50:61:5d:81:cc:
14:df:ee:12:f6:cb:a9:66:db:95:66:53:30:7a:bd:
fa:a4:99:a8:af:e2:51:3e:1e:98:d9:df:f9:09:ef:
f7:2d:ec:e2:93:e9:b4:84:30:ec:bc:f3:ce:71:d1:
d3:de:9b:e3:06:60:2a:39:44:89:f6:58:96:cd:e4:
47:4e:99:22:5c:3b:68:30:be:14:f6:c1:12:01:97:
b2:c6:4c:1c:6f:5b:79:37:45:cf:15:a5:df:c0:9b:
89:ea:fa:ea:44:60:18:57:8b:76:50:06:ab:f9:eb:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:8A:41:BA:99:B2:DD:B5:39:11:30:E7:6D:A1:EA:54:BB:A3:51
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:6a:66:67:ff:93:a8:0c:b0:72:fe:a1:49:73:5e:27:b3:
61:e4:40:34:67:09:ef:a8:36:28:73:f9:a5:a0:ee:6c:dc:84:
2f:52:cc:e8:e6:aa:56:51:26:75:fb:1c:1f:9b:65:46:d2:e0:
46:ca:c4:77:70:14:84:0e:7e:2b:26:d4:bc:c1:4a:df:5e:81:
a5:fb:02:89:04:4f:78:5e:49:26:6c:af:3b:fa:bb:9b:73:34:
f3:fe:91:c3:50:ad:7b:30:c0:43:68:ed:4b:8f:15:41:bb:4c:
d7:d3:23:17:e9:c0:4b:89:ac:e5:94:cb:bd:5d:73:f5:f7:d1:
86:ec:c2:4f:8f:43:26:85:0c:99:57:e2:bc:d1:78:8b:24:33:
fb:3d:87:f6:95:a7:91:b5:04:22:36:fd:7b:93:ab:cd:01:2e:
c1:32:2d:77:58:fb:1b:6e:dd:fa:97:e3:e0:64:13:d1:54:c5:
ac:d0:ab:43:c6:b8:6c:ea:ac:d2:f2:84:9b:51:90:e9:f7:ff:
f4:43:f2:58:46:79:00:66:01:b8:38:08:d3:f3:51:5d:b1:01:
d6:f4:e4:25:cc:b3:53:d3:f5:4a:18:98:86:43:11:b6:24:b4:
3f:53:0f:6f:3a:f8:85:83:33:55:3f:6a:19:2a:66:b5:91:b3:
ac:d4:e7:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNEhl1aZ64Ui54cTXT4AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWE3OGE4NTEyZjkwOWNlNmQ0NzMyNTJmMDRjZjE5ZTll
NjhhMmEwHhcNMjYwMzAxMjEwMDU2WhcNMjYwMzAyMjEwMDU2WjAzMTEwLwYDVQQD
EyhmNWY0OGE0MWJhOTliMmRkYjUzOTExMzBlNzZkYTFlYTU0YmJhMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUvM1npMsbYYVKIJ0+wHi5wPdU3t
EH3VQ7GekhZnspDEMNlVNz9o9cjkoRXZ4IFsVYeQoROcgP0Y10uQuV0s0ShTJ1C8
lLNz8HiSYLqv9aLUpOsi222jmWhxOReKJIQnC60OboiNODdhq0JjbImcyF96FUSp
nrVKTgGQfiJNqs2FZHUynQg21shOri0LNHbFUGFdgcwU3+4S9supZtuVZlMwer36
pJmor+JRPh6Y2d/5Ce/3Lezik+m0hDDsvPPOcdHT3pvjBmAqOUSJ9liWzeRHTpki
XDtoML4U9sESAZeyxkwcb1t5N0XPFaXfwJuJ6vrqRGAYV4t2UAar+evu6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX0ikG6mbLdtTkRMOdtoepUu6NRMB8GA1UdIwQY
MBaAFKWaeKhRL5Cc5tRzJS8Ezxnp5ooqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0Mzct
NDM4ZTg0YzcxMDdkLzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0MzctNDM4ZTg0YzcxMDdk
LzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyNqZmf/
k6gMsHL+oUlzXiezYeRANGcJ76g2KHP5paDubNyEL1LM6OaqVlEmdfscH5tlRtLg
RsrEd3AUhA5+KybUvMFK316BpfsCiQRPeF5JJmyvO/q7m3M08/6Rw1CtezDAQ2jt
S48VQbtM19MjF+nAS4ms5ZTLvV1z9ffRhuzCT49DJoUMmVfivNF4iyQz+z2H9pWn
kbUEIjb9e5OrzQEuwTItd1j7G27d+pfj4GQT0VTFrNCrQ8a4bOqs0vKEm1GQ6ff/
9EPyWEZ5AGYBuDgI0/NRXbEB1vTkJcyzU9P1ShiYhkMRtiS0P1MPbzr4hYMzVT9q
GSpmtZGzrNTnvA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:31 2026 by rpki-client