Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: kVdfPgYvZ6idd1mMvgAw+IGZZMHrodrHLjkANdM3y1U=
Subject key identifier: A9:E2:14:C9:C1:76:13:1A:4D:84:B3:E6:79:DC:88:58:44:53:1D:EF
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019CAAFD4FB01C52E4E465FD805F7E1C5633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: yoAuceg1aHINSLr43YsPdEVfZSSm4D7rRQEuq05Dqnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4f:b0:1c:52:e4:e4:65:fd:80:5f:7e:1c:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=a9e214c9c176131a4d84b3e679dc885844531def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:c2:eb:58:6a:0a:f5:54:38:b9:99:20:8f:
87:bf:a1:44:1c:b1:ef:7d:07:63:55:54:28:90:c9:
88:be:d8:2d:a6:03:15:71:5d:52:2c:7c:71:64:c1:
3a:d0:d6:6e:6b:1d:9b:20:a6:ac:e4:47:2d:4e:26:
b4:7f:2a:11:d9:ae:d5:6a:00:e6:36:40:fa:6f:1b:
5c:1a:54:e2:f8:64:46:df:da:6b:78:27:11:67:a0:
91:63:27:d2:16:f5:4a:24:67:40:3e:12:78:eb:4f:
78:6f:a1:88:50:8c:10:d7:3e:b3:df:dd:45:aa:24:
f5:99:ce:24:55:42:8f:60:31:05:e2:53:9e:ab:d5:
83:22:cf:2f:9d:b3:54:74:93:f3:cb:e2:36:f0:f4:
7f:c9:8d:43:25:08:8e:da:78:72:cb:24:1c:d0:c2:
c7:dc:0b:30:d7:a3:e9:a6:91:03:ad:bb:cb:c0:8d:
60:07:3e:74:3e:0f:c4:91:d9:3a:4d:0b:0f:0b:da:
c5:5c:02:03:cb:67:cd:19:c8:a2:ee:84:2d:a3:e7:
42:d5:4e:83:25:b3:19:d3:56:49:a7:df:31:c8:64:
dc:97:97:e0:13:52:f8:4a:23:1d:3a:ad:b6:29:6c:
eb:15:a4:45:70:c6:da:b5:6f:5a:85:bc:fa:00:fa:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:14:C9:C1:76:13:1A:4D:84:B3:E6:79:DC:88:58:44:53:1D:EF
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b2:aa:97:ca:e3:a2:9e:8b:88:cb:b1:75:36:6a:ad:b4:c3:
4d:61:43:ba:ed:bc:57:61:ee:a4:55:21:c6:07:c9:f8:31:7c:
60:05:2f:e8:f0:e8:a9:5a:de:a8:2f:d0:28:77:cc:3b:f9:57:
0f:30:de:f7:d1:f8:b4:2a:3f:e7:a3:74:44:2c:d7:18:67:ce:
47:de:d5:1b:17:15:02:61:73:8d:77:57:7f:18:fd:b5:80:9b:
9b:30:3c:a8:55:61:0c:18:b4:b8:3c:f2:ab:9c:61:8d:0e:21:
cd:5f:e3:b0:fd:17:26:ed:c0:67:67:3f:1d:ac:48:af:48:f0:
52:b5:04:f3:89:6d:76:9c:11:1c:3d:f0:2e:c5:19:96:34:3b:
59:1f:e1:bf:dc:82:bb:19:b0:12:04:b1:5e:69:7e:ff:64:0f:
f6:1c:85:14:84:85:7a:ae:7f:ab:d2:1b:46:c5:00:11:25:d6:
5a:94:45:a7:e7:59:55:4e:b3:34:1f:c9:e3:97:22:e6:ca:cc:
a5:23:37:bf:a3:77:49:c6:43:a1:6a:54:2d:96:e5:67:4f:23:
81:1b:87:d7:27:c2:0e:c3:e7:7c:e8:29:4d:db:7c:2b:61:d3:
6e:32:25:fe:82:aa:af:9d:9a:ea:d5:38:57:d4:cf:9f:49:e2:
be:15:70:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/U+wHFLk5GX9gF9+HFYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh
YTMwNDQwHhcNMjYwMzAxMjAwMDUzWhcNMjYwMzAyMjAwMDUzWjAzMTEwLwYDVQQD
EyhhOWUyMTRjOWMxNzYxMzFhNGQ4NGIzZTY3OWRjODg1ODQ0NTMxZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiPC61hqCvVUOLmZII+Hv6FEHLHv
fQdjVVQokMmIvtgtpgMVcV1SLHxxZME60NZuax2bIKas5EctTia0fyoR2a7VagDm
NkD6bxtcGlTi+GRG39preCcRZ6CRYyfSFvVKJGdAPhJ46094b6GIUIwQ1z6z391F
qiT1mc4kVUKPYDEF4lOeq9WDIs8vnbNUdJPzy+I28PR/yY1DJQiO2nhyyyQc0MLH
3Asw16PpppEDrbvLwI1gBz50Pg/Ekdk6TQsPC9rFXAIDy2fNGcii7oQto+dC1U6D
JbMZ01ZJp98xyGTcl5fgE1L4SiMdOq22KWzrFaRFcMbatW9ahbz6APopkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKniFMnBdhMaTYSz5nnciFhEUx3vMB8GA1UdIwQY
MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt
YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1
LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrKql8rj
op6LiMuxdTZqrbTDTWFDuu28V2HupFUhxgfJ+DF8YAUv6PDoqVreqC/QKHfMO/lX
DzDe99H4tCo/56N0RCzXGGfOR97VGxcVAmFzjXdXfxj9tYCbmzA8qFVhDBi0uDzy
q5xhjQ4hzV/jsP0XJu3AZ2c/HaxIr0jwUrUE84ltdpwRHD3wLsUZljQ7WR/hv9yC
uxmwEgSxXml+/2QP9hyFFISFeq5/q9IbRsUAESXWWpRFp+dZVU6zNB/J45ci5srM
pSM3v6N3ScZDoWpULZblZ08jgRuH1yfCDsPnfOgpTdt8K2HTbjIl/oKqr52a6tU4
V9TPn0nivhVwng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:49 2026 by rpki-client