Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier: +nM+AYU2yW+oBStp3qSXKl1Q2mW4HmgjvX2A2MVO8LI=
Subject key identifier: 22:9E:9C:6C:54:66:A2:23:EE:54:DD:60:E9:7A:09:C9:0B:13:A7:B9
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019CAAFD57F68327786F1B1BAE623251039B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number: 1219
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: 4mkQMrlyEA5ZWh8SOWOIHRbBVXg.roa (hash: QjIp1iiXD6vyZ0MdKvtInyszrVm18OrO8O3KBCQDfSQ=)
2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: nIoDSotBL65MWs3YtP7oxoURy8IP/Ho87DZ6TFAtVPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:57:f6:83:27:78:6f:1b:1b:ae:62:32:51:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=229e9c6c5466a223ee54dd60e97a09c90b13a7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:15:4f:80:d4:45:44:b3:8a:70:fa:bb:ab:
44:6e:68:fb:92:b2:fe:1d:6f:2a:94:8f:d3:5d:f7:
3a:e2:cc:38:1c:d0:6d:ee:5e:ed:cb:d1:57:85:38:
ec:87:ff:52:fd:ab:d3:1c:a3:46:33:5d:4b:a0:06:
c2:5f:a8:5c:6e:d1:5d:0e:ae:02:4e:1a:11:06:09:
0f:a0:35:c5:1d:80:0f:86:1f:09:7c:00:7f:be:1a:
88:2d:16:f9:57:3f:f3:a5:d8:8c:2a:3b:ec:9a:50:
9a:f8:b3:e6:51:6f:9d:95:c2:e0:1e:5a:18:d5:0e:
16:e0:b2:45:86:e9:e2:c5:39:3b:61:01:e0:59:50:
71:ad:cc:68:56:f8:00:3a:07:41:e6:d4:18:5e:29:
d3:a2:0b:85:b7:74:96:10:1c:cb:52:93:5b:fa:27:
74:22:f0:93:aa:3c:e9:16:0a:b8:c9:4b:e0:e1:7e:
ce:13:3c:a0:8d:0a:6e:45:bc:dc:50:65:24:4d:40:
a3:d8:f8:ab:15:85:4b:7c:f5:16:ed:37:f1:c9:9d:
38:50:0e:f8:64:c3:81:bc:bf:ea:44:ab:b5:dc:41:
fe:92:48:6e:55:ab:fd:93:4c:f8:c5:4f:da:ac:d6:
ef:3e:0b:48:cb:dc:1c:d1:d6:46:21:9d:fc:bd:7f:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:9C:6C:54:66:A2:23:EE:54:DD:60:E9:7A:09:C9:0B:13:A7:B9
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:bf:89:59:bd:10:df:4c:12:bd:88:48:60:2a:bd:d6:6c:
a5:9e:e9:40:8a:a6:7c:ec:43:96:1f:84:60:0a:ec:d2:94:ff:
06:f9:e2:ba:a7:1a:c7:01:f1:e0:f5:6e:03:6f:f8:fa:d1:c6:
ce:6e:4d:01:2b:d6:26:1a:2d:8a:bd:61:6d:8a:bc:6c:10:9d:
a0:29:4f:25:0b:52:fd:2e:94:18:0c:db:d1:1b:f4:61:90:97:
0a:d6:bc:ff:d8:34:1a:78:96:15:b6:ea:b2:93:0e:1b:55:d6:
56:0e:26:02:6a:dc:0a:16:f8:11:53:74:a1:eb:5c:05:fa:d4:
b3:29:8e:37:48:76:71:a4:57:fc:1b:eb:1c:a3:e6:d5:2c:b5:
ba:f1:63:0b:c3:75:b5:9e:4e:9e:25:ba:cc:e3:89:dc:4a:2e:
96:e8:11:c6:fa:78:a9:8d:f2:25:06:b6:7d:92:0f:7a:94:be:
7d:43:98:aa:f6:94:00:af:93:45:31:60:08:fa:99:c4:43:d8:
02:29:fe:cd:1e:78:7c:aa:55:6e:96:15:6e:9b:85:0c:aa:c0:
a7:0d:c6:6e:ff:31:33:1d:74:89:54:77:b8:d5:08:14:2e:33:
82:0e:7d:04:aa:b7:6b:4f:9e:8d:60:87:15:ab:77:8b:86:c9:
3f:47:6a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Vf2gyd4bxsbrmIyUQObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OThkNzVlOGUzMmQ1ZTg0N2RmNGFhMWEzNWMyOTM0NGM5
NzZlMjYwHhcNMjYwMzAxMjAwMDU1WhcNMjYwMzAyMjAwMDU1WjAzMTEwLwYDVQQD
EygyMjllOWM2YzU0NjZhMjIzZWU1NGRkNjBlOTdhMDljOTBiMTNhN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu14VT4DURUSzinD6u6tEbmj7krL+
HW8qlI/TXfc64sw4HNBt7l7ty9FXhTjsh/9S/avTHKNGM11LoAbCX6hcbtFdDq4C
ThoRBgkPoDXFHYAPhh8JfAB/vhqILRb5Vz/zpdiMKjvsmlCa+LPmUW+dlcLgHloY
1Q4W4LJFhunixTk7YQHgWVBxrcxoVvgAOgdB5tQYXinToguFt3SWEBzLUpNb+id0
IvCTqjzpFgq4yUvg4X7OEzygjQpuRbzcUGUkTUCj2PirFYVLfPUW7TfxyZ04UA74
ZMOBvL/qRKu13EH+kkhuVav9k0z4xU/arNbvPgtIy9wc0dZGIZ38vX/55wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKenGxUZqIj7lTdYOl6CckLE6e5MB8GA1UdIwQY
MBaAFBWY116OMtXoR99KoaNcKTRMl24mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGIt
M2JjNmJjMzA2Zjg5LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGItM2JjNmJjMzA2Zjg5
LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuS/iVm9
EN9MEr2ISGAqvdZspZ7pQIqmfOxDlh+EYArs0pT/BvniuqcaxwHx4PVuA2/4+tHG
zm5NASvWJhotir1hbYq8bBCdoClPJQtS/S6UGAzb0Rv0YZCXCta8/9g0GniWFbbq
spMOG1XWVg4mAmrcChb4EVN0oetcBfrUsymON0h2caRX/BvrHKPm1Sy1uvFjC8N1
tZ5OniW6zOOJ3EoulugRxvp4qY3yJQa2fZIPepS+fUOYqvaUAK+TRTFgCPqZxEPY
Ain+zR54fKpVbpYVbpuFDKrApw3Gbv8xMx10iVR3uNUIFC4zgg59BKq3a0+ejWCH
Fat3i4bJP0dqpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:07 2026 by rpki-client