Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: a78n46+AHy9cFU9H/56giuH38C0WrkWcvFjomEMdt+I=
Subject key identifier: 9A:A7:48:25:5C:E8:8F:0E:81:45:6E:E1:2D:9C:63:A5:0B:C3:0B:80
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019CAAC6FE3D501CC613B9A2E2FF23834A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: OqkSyBAnRdSVgZG+o7FkwYnD8jJuQXkwOBwpEwd1Obs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fe:3d:50:1c:c6:13:b9:a2:e2:ff:23:83:4a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=9aa748255ce88f0e81456ee12d9c63a50bc30b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:e0:e5:5a:46:e0:e1:6d:c4:d4:e3:4f:2c:
31:4b:9e:45:5d:f6:bf:3a:ae:c6:8d:10:38:e7:14:
0e:47:76:34:33:f2:d6:51:a4:56:f0:1b:88:46:ce:
25:b9:14:5a:69:1f:64:92:d8:0f:da:ae:b2:79:6a:
29:91:44:ed:56:08:8e:04:b6:a2:bc:36:de:a8:8a:
83:d3:61:a4:14:c5:1c:e2:a6:fd:ea:49:93:ec:44:
12:dc:c3:b2:a6:2c:47:51:e8:48:5e:ef:9f:77:55:
00:fc:27:25:f3:e9:7b:a7:fc:6a:98:bf:54:12:a1:
21:ba:25:e4:a9:ef:94:89:4b:aa:59:23:2b:c8:41:
0c:bc:08:6d:a5:d1:a2:0d:15:d5:69:69:a6:67:55:
ee:b6:96:f4:93:5c:20:61:b9:66:9a:92:35:45:97:
f6:c0:17:58:cb:c8:f1:1a:2f:c9:d7:1e:7d:1f:4f:
44:1a:a4:95:a0:c9:e4:dc:34:19:f7:32:70:67:fb:
9b:bb:df:d9:1f:33:3f:c9:96:30:b3:94:cf:9c:7c:
32:05:a0:06:a6:ff:ff:35:bb:5e:b1:6d:d4:c9:de:
34:98:48:02:1a:02:9c:48:5c:7d:39:66:63:86:47:
a3:d3:71:98:5d:60:d9:71:91:be:78:80:15:10:f1:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:48:25:5C:E8:8F:0E:81:45:6E:E1:2D:9C:63:A5:0B:C3:0B:80
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:45:4c:b0:a9:a5:c2:f9:1c:40:b6:e5:43:66:13:2e:36:3d:
60:df:2a:f4:a2:c3:b4:43:2a:b8:15:e3:61:f5:48:ae:df:9a:
f9:97:d1:2e:cc:f1:fc:bd:af:92:b4:fe:a4:87:6b:e7:79:a2:
ce:62:97:ac:25:09:71:c0:79:3f:af:ac:15:09:77:1e:64:bf:
63:74:ec:32:ff:3f:66:9d:dd:a9:60:ba:a8:4a:eb:75:03:c5:
45:a5:8c:d0:99:2c:47:7a:55:4a:43:d0:76:a8:1b:2b:ed:00:
fd:cf:d3:5b:50:56:11:16:f5:2d:7a:ae:c1:c7:11:fd:b9:c6:
74:99:80:77:2e:3c:3b:d2:cc:d8:e5:93:85:47:2a:62:bb:3d:
73:2b:1b:18:2d:a5:a7:35:fb:c2:0c:e2:07:ed:86:d8:50:ab:
79:43:74:cc:ca:11:3a:2c:9d:ac:81:7d:28:57:46:33:ab:f6:
d3:29:98:bc:2e:65:9b:79:e9:d2:fe:1c:c0:fe:17:4c:46:91:
55:cb:61:18:64:b2:9b:61:44:2a:5f:87:11:f7:29:c7:7e:2c:
2d:f5:95:f1:f2:1f:c2:09:ed:12:92:c8:dc:0a:f8:13:b8:b0:
74:4a:4a:47:59:fe:70:a0:e7:ff:b5:4c:92:dc:1c:20:9e:95:
26:23:08:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxv49UBzGE7mi4v8jg0pqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjYyMjRiY2ZiOGI4MmRlYWFiYWM4YzRjYTI1MDM3MWI5
NzQ2MTEwHhcNMjYwMzAxMTkwMTMzWhcNMjYwMzAyMTkwMTMzWjAzMTEwLwYDVQQD
Eyg5YWE3NDgyNTVjZTg4ZjBlODE0NTZlZTEyZDljNjNhNTBiYzMwYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mXg5VpG4OFtxNTjTywxS55FXfa/
Oq7GjRA45xQOR3Y0M/LWUaRW8BuIRs4luRRaaR9kktgP2q6yeWopkUTtVgiOBLai
vDbeqIqD02GkFMUc4qb96kmT7EQS3MOypixHUehIXu+fd1UA/Ccl8+l7p/xqmL9U
EqEhuiXkqe+UiUuqWSMryEEMvAhtpdGiDRXVaWmmZ1Xutpb0k1wgYblmmpI1RZf2
wBdYy8jxGi/J1x59H09EGqSVoMnk3DQZ9zJwZ/ubu9/ZHzM/yZYws5TPnHwyBaAG
pv//NbtesW3Uyd40mEgCGgKcSFx9OWZjhkej03GYXWDZcZG+eIAVEPEbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqnSCVc6I8OgUVu4S2cY6ULwwuAMB8GA1UdIwQY
MBaAFM9mIkvPuLgt6qusjEyiUDcbl0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjIt
Yjk1NGM1MGZkYmIwLzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjItYjk1NGM1MGZkYmIw
LzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUVMsKml
wvkcQLblQ2YTLjY9YN8q9KLDtEMquBXjYfVIrt+a+ZfRLszx/L2vkrT+pIdr53mi
zmKXrCUJccB5P6+sFQl3HmS/Y3TsMv8/Zp3dqWC6qErrdQPFRaWM0JksR3pVSkPQ
dqgbK+0A/c/TW1BWERb1LXquwccR/bnGdJmAdy48O9LM2OWThUcqYrs9cysbGC2l
pzX7wgziB+2G2FCreUN0zMoROiydrIF9KFdGM6v20ymYvC5lm3np0v4cwP4XTEaR
VcthGGSym2FEKl+HEfcpx34sLfWV8fIfwgntEpLI3Ar4E7iwdEpKR1n+cKDn/7VM
ktwcIJ6VJiMI6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:47 2026 by rpki-client