Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: qM7uEM2miT+iVtyAwR5yQju7PmkJcPBFGYlVMXtELYQ=
Subject key identifier: F4:AF:D9:8D:2D:E6:BA:FB:55:72:16:F3:1C:62:77:F0:14:D7:B6:D2
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019CAAFD122FB425C2D243B2FB01AB6E6ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0EE2
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: JBGVuhUTG1uAdA7PJ8q3Bl_1zg4.roa (hash: ivCG2MEHaxXIQCRs1tmfeUJ68Epqw/GmvfL4Qq82QIM=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: 7Qui+uVgCpkv0fZWpOmuGOApIBmpLuV+07hNoP36s+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:12:2f:b4:25:c2:d2:43:b2:fb:01:ab:6e:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=f4afd98d2de6bafb557216f31c6277f014d7b6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:e9:fe:2f:3e:e8:29:ee:bc:c9:90:e4:c0:
89:2b:94:58:17:6b:da:a6:76:53:0c:b5:70:c0:e8:
29:ee:8f:2b:5f:71:4d:ad:55:3b:29:d4:d4:37:0c:
d7:53:7c:52:12:02:08:9f:76:9b:84:bf:ed:3c:18:
17:8a:54:d1:06:45:48:0e:44:02:64:2c:e7:77:92:
a0:8f:e5:ee:63:9d:aa:9d:c2:22:b2:5d:a4:a9:49:
f8:80:de:4a:ea:5b:da:b3:c6:76:1c:66:9c:ef:54:
ba:a8:32:fa:60:4c:23:b5:ee:a3:c6:3e:55:b4:ba:
22:a6:8b:84:b1:b0:79:00:0c:16:1b:e3:57:bb:27:
19:94:f1:ca:77:b6:c9:dd:52:cc:71:0a:46:02:31:
0e:1b:65:87:56:c4:65:ca:d8:a5:65:e3:d2:94:41:
77:14:c6:f9:a8:9e:f5:57:90:fc:de:d5:6b:13:5a:
e1:82:92:e9:c9:74:29:32:b1:42:f6:c0:62:07:b4:
ed:b4:22:89:54:b9:87:33:b1:b9:06:af:6b:b7:d3:
4b:e5:7b:f4:50:0c:6e:92:e7:67:da:38:e6:0e:a6:
0a:92:de:90:5c:47:a2:cd:e7:5e:49:e3:40:2a:66:
04:00:a6:9c:60:19:a8:e7:1b:e3:e7:71:5a:61:70:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:D9:8D:2D:E6:BA:FB:55:72:16:F3:1C:62:77:F0:14:D7:B6:D2
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:82:2f:bc:bb:62:c2:0c:ec:7c:83:01:a3:1e:58:43:6a:f5:
9f:68:49:9f:df:2d:b6:de:0e:92:68:4b:0b:a9:c4:53:8c:fe:
96:9c:d9:52:32:ee:32:c4:44:e1:e4:e8:cc:68:cc:e2:67:51:
b0:7c:81:87:44:0d:37:6e:e3:6e:c5:ae:74:26:5c:e8:6f:f8:
1b:95:8a:4a:b9:4c:0f:2c:d6:f2:66:fb:cf:20:a9:25:f7:52:
57:8f:e2:7e:e8:bb:72:47:fa:b6:7f:07:58:f9:b6:2c:be:72:
d2:47:15:b7:f2:fa:3e:8b:4f:a0:92:42:3e:bb:41:d3:6c:e7:
55:4a:eb:56:5b:08:81:68:99:8f:4c:b8:fd:9f:d0:f4:12:41:
47:bb:df:bc:62:ca:5e:f6:e1:e3:12:7c:79:9b:89:11:e7:c1:
90:a2:f4:4f:c2:5a:2c:52:14:30:11:1c:e4:fc:49:20:91:3c:
19:f6:c5:fd:c3:76:3e:77:6e:cb:c0:4d:b2:68:07:3b:08:df:
e5:f4:85:bc:d8:72:68:ea:67:cd:2d:ec:50:d3:49:10:18:0a:
30:64:7c:e7:ff:51:58:a7:cf:3d:21:6f:f3:f9:b6:65:3a:5a:
10:f0:cc:3e:fb:5b:84:64:ac:08:94:7a:6c:8d:b8:6f:d6:94:
9d:95:b1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:00 2026 by rpki-client