Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: kFRBx7dhTyX3t1yNlQmiEdvaW57Nfv/uJ574fafmetY=
Subject key identifier: 16:22:CE:EB:7C:20:86:67:9B:22:90:FA:95:BD:36:27:79:F6:C3:65
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019CABD9FF33C57242CC5D3EAA163E8A4393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: 3GOUf5zM72xHW-KizqGmfejZI-I.roa (hash: 7Jjry34OgvJlCQgmEgxo8SwsDK8ifphC6Z5s0sCqAbk=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: gA4HggT+H2JaYR3mar2ofmxTHYvqlAOZx4Qwgi8/iUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ff:33:c5:72:42:cc:5d:3e:aa:16:3e:8a:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=1622ceeb7c2086679b2290fa95bd362779f6c365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:53:2f:f5:d3:40:c7:af:4a:e4:a1:bd:81:
82:d2:a3:35:83:63:0d:8c:48:8d:54:53:26:fc:3d:
a3:b7:9d:66:ff:5f:94:8e:7b:0f:e3:8d:da:24:be:
40:bc:cd:ea:11:32:83:f5:a4:33:2e:66:b5:2e:d1:
62:9a:48:36:20:64:8a:08:a3:36:e1:a8:a4:8f:f3:
6d:d3:8c:64:b3:78:f8:c4:9e:16:36:0c:83:31:ca:
1b:2b:77:2b:aa:07:77:cc:62:0c:4b:0a:d9:9b:c6:
fa:05:fe:16:71:5a:2f:5a:bd:67:96:8c:87:45:d7:
a6:73:e1:ab:27:45:5e:2b:8a:22:1c:44:cd:09:9f:
72:07:a7:6d:5a:5b:05:b9:4a:e6:a5:62:a7:b0:8b:
b7:db:58:51:0f:ef:81:4c:25:32:89:f5:85:c6:15:
39:54:4a:29:c3:f9:4c:25:50:06:e1:3d:e6:07:8e:
2e:de:af:cc:b4:d4:6e:f6:27:9a:4f:e9:ea:5f:14:
05:e9:a0:e5:f1:84:e0:d7:2a:05:84:dd:d9:52:1f:
e1:c2:ef:11:c0:0a:6d:6c:0c:86:a4:a3:c8:56:98:
8c:c8:da:5c:ca:00:f8:d3:cf:a5:4d:36:56:b8:4f:
fb:10:09:d3:35:02:a0:b6:65:f6:d3:6c:8e:0b:e2:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:22:CE:EB:7C:20:86:67:9B:22:90:FA:95:BD:36:27:79:F6:C3:65
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a6:93:08:33:be:94:ea:40:3e:0d:21:7a:0c:81:d5:a9:95:
65:b2:ad:8b:b5:c3:c1:c1:2b:fd:92:b2:0a:d5:f3:f1:5c:56:
e8:df:4c:28:ca:f9:d5:20:67:84:a0:b7:b1:e1:1a:32:94:bd:
d8:76:e0:55:ac:e5:02:64:3a:7e:ec:2d:9d:9b:cd:df:6d:75:
71:30:89:36:71:5e:4a:71:7e:5f:70:ba:88:08:c0:0c:fa:c1:
c1:40:3e:27:34:bb:87:37:87:ac:ec:26:94:28:26:a2:96:0d:
79:de:34:44:d2:37:c9:a1:34:28:0c:c5:fe:7e:9f:f7:68:1e:
cd:70:e8:d6:f0:37:5b:e2:96:9e:1e:7c:6e:9c:50:d3:c0:f7:
17:e7:e7:a0:ce:fd:65:ea:2e:2b:8e:01:2d:e7:ae:39:42:97:
5a:88:50:fc:98:71:9a:96:2b:84:c7:68:44:d3:b3:cc:4f:65:
24:11:e8:80:fa:d9:67:1b:57:61:8f:07:77:d8:14:a1:29:6c:
dc:9e:de:ac:3c:11:0f:dd:00:4f:4d:25:9d:4c:1f:15:32:98:
e5:cd:03:9b:58:47:b7:84:18:bc:f7:9a:74:3f:15:65:09:2c:
da:40:e7:07:f3:ab:fe:d5:a3:7a:5f:bb:00:c9:c6:09:b9:66:
5e:77:b0:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2f8zxXJCzF0+qhY+ikOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5
MzA5OWYwHhcNMjYwMzAyMDAwMTU2WhcNMjYwMzAzMDAwMTU2WjAzMTEwLwYDVQQD
EygxNjIyY2VlYjdjMjA4NjY3OWIyMjkwZmE5NWJkMzYyNzc5ZjZjMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskNTL/XTQMevSuShvYGC0qM1g2MN
jEiNVFMm/D2jt51m/1+UjnsP443aJL5AvM3qETKD9aQzLma1LtFimkg2IGSKCKM2
4aikj/Nt04xks3j4xJ4WNgyDMcobK3crqgd3zGIMSwrZm8b6Bf4WcVovWr1nloyH
Rdemc+GrJ0VeK4oiHETNCZ9yB6dtWlsFuUrmpWKnsIu321hRD++BTCUyifWFxhU5
VEopw/lMJVAG4T3mB44u3q/MtNRu9ieaT+nqXxQF6aDl8YTg1yoFhN3ZUh/hwu8R
wAptbAyGpKPIVpiMyNpcygD408+lTTZWuE/7EAnTNQKgtmX202yOC+LYDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYizut8IIZnmyKQ+pW9Nid59sNlMB8GA1UdIwQY
MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt
NzYyNDMyZmRkNGRkLzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk
LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqaTCDO+
lOpAPg0hegyB1amVZbKti7XDwcEr/ZKyCtXz8VxW6N9MKMr51SBnhKC3seEaMpS9
2HbgVazlAmQ6fuwtnZvN3211cTCJNnFeSnF+X3C6iAjADPrBwUA+JzS7hzeHrOwm
lCgmopYNed40RNI3yaE0KAzF/n6f92gezXDo1vA3W+KWnh58bpxQ08D3F+fnoM79
ZeouK44BLeeuOUKXWohQ/JhxmpYrhMdoRNOzzE9lJBHogPrZZxtXYY8Hd9gUoSls
3J7erDwRD90AT00lnUwfFTKY5c0Dm1hHt4QYvPeadD8VZQks2kDnB/Or/tWjel+7
AMnGCblmXnewLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:24 2026 by rpki-client