Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: kJE1RQrmTdsJomNzYqbu02QKJEyJOnUHWQCc44l8KfY=
Subject key identifier: E6:93:20:99:EA:21:95:98:A6:EB:08:19:1D:46:F0:5D:CF:B3:76:0D
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 019CAA8F9E8D97AA97AE43FAF5B0468E8F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 06F7
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: 0HfdrkFwzKOseq34MOuOPbJYjyRNnGrHScV1Svm6bLs=)
2: GxtZLx_v4ZawHyhAp_9x0t2x-Bc.roa (hash: dCxYAJ2dCEl4aeNXHPw7bhwKpVSx+0iwsl5Y1tfVG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9e:8d:97:aa:97:ae:43:fa:f5:b0:46:8e:8f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=e6932099ea219598a6eb08191d46f05dcfb3760d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:be:84:15:61:c9:2a:6b:1e:74:7b:b7:0d:
bc:6b:4f:f4:75:d0:d5:6c:1a:35:ef:6d:e2:e9:7b:
fa:39:e7:37:03:99:02:d2:ee:2c:50:02:d2:68:4d:
e7:2d:91:3c:d1:4f:eb:da:81:b5:37:15:5f:c6:72:
c9:61:d4:45:c9:e7:3f:6e:1b:b7:f1:f4:03:e3:74:
58:e0:34:fd:97:eb:c3:70:eb:40:e5:5c:20:4c:46:
31:48:03:36:e8:c3:cb:4c:ee:fc:63:72:fd:2a:27:
62:dc:28:a8:06:23:1a:e4:55:ce:7c:e8:8b:eb:f2:
27:6f:a0:4c:9f:24:f2:17:80:aa:08:2d:0c:b7:18:
a6:d3:31:61:14:77:6f:38:1e:b1:a0:f3:cd:4e:4a:
72:2b:23:05:0b:69:10:5d:8c:4d:4c:e9:76:29:ce:
2b:4b:a6:58:bb:a7:4c:64:9b:ff:c4:71:4d:d0:4c:
d2:38:de:33:f4:47:3c:3d:28:67:17:b3:2d:7f:0e:
f5:43:ad:f1:c5:fc:25:9d:b2:97:67:ba:dc:8b:4e:
4a:4b:4e:e8:cd:f5:f3:33:5f:3e:4a:8b:37:2b:19:
0e:f8:b9:b6:4d:57:7d:54:51:d8:ed:20:b1:96:72:
36:70:25:57:50:bd:e5:78:ea:7c:b8:87:97:4f:ab:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:93:20:99:EA:21:95:98:A6:EB:08:19:1D:46:F0:5D:CF:B3:76:0D
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:44:c8:e0:a4:3f:7a:5c:74:c2:41:8e:5a:8a:b4:ed:4c:24:
e5:e5:7e:b5:33:81:e5:4c:17:d7:10:b7:4f:01:85:bc:48:24:
8e:07:10:a1:1c:30:82:36:a4:89:44:ee:17:39:c9:c1:ae:2b:
cb:d4:9f:31:64:9f:48:ab:ae:81:e0:6b:82:6a:ed:80:1d:62:
43:08:0a:b9:94:2f:6a:f2:c8:75:ba:68:04:db:97:d3:c5:c3:
92:cc:22:59:11:c9:28:ab:3c:f4:c7:e3:c6:15:a5:ae:a7:4c:
87:61:8b:75:ab:e2:82:da:fb:79:4b:2f:e7:f1:ea:d5:f7:43:
7d:e4:30:0a:17:a9:c4:fa:ed:4a:65:a4:8c:a0:32:bb:dc:7d:
9e:99:61:b4:6b:7f:c4:3b:ab:e3:1b:0f:b7:86:c8:e6:21:a9:
ed:07:49:2e:eb:c9:63:05:32:f8:79:b7:10:fb:c0:13:66:0b:
23:19:50:cd:a6:d3:6e:bc:87:a3:b0:04:dc:95:dc:01:60:6e:
01:7e:1f:b0:a3:b0:c5:d7:55:55:ce:08:1d:b6:f7:8c:7d:3e:
ec:de:92:67:58:29:76:2e:53:c7:19:47:3e:60:c6:ca:a0:2a:
ee:16:7b:c2:7f:b6:ca:e8:8b:ad:64:3c:25:07:b4:e2:f5:88:
ea:78:06:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj56Nl6qXrkP69bBGjo8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZWNlYzk2YTAzNzFhM2FlNjJkN2FhNmRkN2Q5ZTQzYWM1
NWQwMjUwHhcNMjYwMzAxMTgwMTA0WhcNMjYwMzAyMTgwMTA0WjAzMTEwLwYDVQQD
EyhlNjkzMjA5OWVhMjE5NTk4YTZlYjA4MTkxZDQ2ZjA1ZGNmYjM3NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1y+hBVhySprHnR7tw28a0/0ddDV
bBo1723i6Xv6Oec3A5kC0u4sUALSaE3nLZE80U/r2oG1NxVfxnLJYdRFyec/bhu3
8fQD43RY4DT9l+vDcOtA5VwgTEYxSAM26MPLTO78Y3L9Kidi3CioBiMa5FXOfOiL
6/Inb6BMnyTyF4CqCC0Mtxim0zFhFHdvOB6xoPPNTkpyKyMFC2kQXYxNTOl2Kc4r
S6ZYu6dMZJv/xHFN0EzSON4z9Ec8PShnF7Mtfw71Q63xxfwlnbKXZ7rci05KS07o
zfXzM18+Sos3KxkO+Lm2TVd9VFHY7SCxlnI2cCVXUL3leOp8uIeXT6ssKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaTIJnqIZWYpusIGR1G8F3Ps3YNMB8GA1UdIwQY
MBaAFNvs7JagNxo65i16pt19nkOsVdAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2Yjct
YTg3NjY1MjBmZWEyLzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMzRmMGMtZDkxMS00ODg3LTk2YjctYTg3NjY1MjBmZWEy
LzEvMi16c2xxQTNHanJtTFhxbTNYMmVRNnhWMENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANETI4KQ/
elx0wkGOWoq07Uwk5eV+tTOB5UwX1xC3TwGFvEgkjgcQoRwwgjakiUTuFznJwa4r
y9SfMWSfSKuugeBrgmrtgB1iQwgKuZQvavLIdbpoBNuX08XDkswiWRHJKKs89Mfj
xhWlrqdMh2GLdavigtr7eUsv5/Hq1fdDfeQwChepxPrtSmWkjKAyu9x9nplhtGt/
xDur4xsPt4bI5iGp7QdJLuvJYwUy+Hm3EPvAE2YLIxlQzabTbryHo7AE3JXcAWBu
AX4fsKOwxddVVc4IHbb3jH0+7N6SZ1gpdi5TxxlHPmDGyqAq7hZ7wn+2yuiLrWQ8
JQe04vWI6ngGzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:07 2026 by rpki-client