Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: GY3eBALnddc4sROe+BrkJ6idKtgRc22+KYgf8h4sVVY=
Subject key identifier: AB:25:87:B5:4C:43:D0:6E:D8:9F:AF:AE:EF:44:28:41:57:E6:8C:43
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019CAD22E3169D3C0EB7BCC4BEC6F8426131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 023F
Signing time: Mon 02 Mar 2026 06:01:10 +0000
Manifest this update: Mon 02 Mar 2026 06:01:10 +0000
Manifest next update: Tue 03 Mar 2026 06:01:10 +0000
Files and hashes: 1: 5Po2qtadpqTNf7p3MMLaT46C8vE.roa (hash: nFjym/eYekZGGRObI9fvHB7nvqlWQEguTM24IpDntwA=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: 9j8P5DNrHTKWNFwFTfipWXNqBCDYvqePqPUEJAy7e80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e3:16:9d:3c:0e:b7:bc:c4:be:c6:f8:42:61:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Mar 2 06:01:10 2026 GMT
Not After : Mar 3 06:01:10 2026 GMT
Subject: CN=ab2587b54c43d06ed89fafaeef44284157e68c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:d3:94:ff:8f:bb:81:3c:cc:91:ff:d7:15:
82:8f:98:77:44:e8:9f:db:81:a5:82:e4:eb:d4:e7:
5d:ff:38:32:20:0c:0f:37:6e:cb:1c:dd:78:d2:c0:
b8:8c:9a:b6:49:e1:c9:0a:90:51:4d:a4:8f:8a:f8:
78:06:ac:ba:7f:b3:bb:de:63:16:9f:cf:7c:0d:2b:
14:1c:b3:6e:00:24:e4:97:e1:29:a7:ef:fd:2e:e6:
04:9b:85:07:58:ea:ec:51:e4:d6:11:75:a8:44:3a:
00:7c:86:d4:3c:14:b3:c7:a2:81:88:aa:9e:91:ec:
37:4e:d1:65:e8:64:cf:32:72:36:b9:d0:a3:c0:a3:
95:ea:83:02:23:ab:fa:38:2d:de:cc:bb:e4:11:df:
7c:77:a2:46:ae:e2:68:cb:ad:cf:2b:9d:ee:95:ee:
13:fc:13:31:05:22:6e:9d:6a:2b:4b:cf:69:be:08:
c4:70:7b:b2:ca:6c:a6:e1:f3:ac:30:66:0e:3f:1b:
f7:c6:ff:e3:60:53:59:af:a7:c7:86:74:4a:18:4c:
a5:ec:6c:0d:79:91:ed:f3:4c:9b:72:4b:3f:94:54:
0f:59:43:c3:38:b5:63:34:fe:79:b9:57:26:dc:c1:
9d:87:75:38:07:9e:63:ff:eb:33:2e:ad:8b:fd:e6:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:87:B5:4C:43:D0:6E:D8:9F:AF:AE:EF:44:28:41:57:E6:8C:43
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:92:9d:04:b1:23:c8:25:3e:bc:95:24:40:e1:05:89:74:dd:
14:27:65:78:5c:ab:ac:69:6c:2a:ee:1a:48:98:79:73:b4:6b:
f9:ba:7e:14:46:33:27:6e:41:72:ae:e4:af:fd:41:0b:71:90:
08:f4:d1:8f:6a:6e:a9:75:6e:7f:69:19:a4:95:b7:65:93:df:
c0:dc:e4:46:79:b1:5b:58:a4:9a:bf:b0:f3:96:c0:24:d7:37:
6d:56:0d:1f:dd:bc:f9:25:b3:62:67:b4:3e:0d:c1:85:f4:38:
a3:91:9a:83:e1:d2:70:b8:cb:99:af:40:22:8c:4d:28:d0:dd:
96:e2:4c:dd:27:41:f7:be:5e:51:48:e5:fe:b0:c8:3b:2d:97:
33:a0:4d:c6:d4:31:b9:28:0d:dc:71:37:5f:f3:e8:94:0d:70:
a9:e3:97:ba:d7:30:9b:b3:e9:b7:58:d2:17:99:ee:6a:b9:9e:
57:4e:7a:4b:18:60:e4:91:e8:0b:5d:88:2f:f2:e0:26:f2:5e:
5f:34:ff:99:a5:ba:0e:d8:f9:da:2a:36:1f:cb:6f:da:2d:48:
f0:b0:b5:35:db:18:1b:31:e6:40:b5:16:5e:30:89:f7:c1:ca:
52:53:de:f2:21:8c:65:3a:57:d3:a3:b0:50:fb:b0:89:86:f8:
a2:1c:a4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIuMWnTwOt7zEvsb4QmExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi
OTVmMzEwHhcNMjYwMzAyMDYwMTEwWhcNMjYwMzAzMDYwMTEwWjAzMTEwLwYDVQQD
EyhhYjI1ODdiNTRjNDNkMDZlZDg5ZmFmYWVlZjQ0Mjg0MTU3ZTY4YzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu67TlP+Pu4E8zJH/1xWCj5h3ROif
24GlguTr1Odd/zgyIAwPN27LHN140sC4jJq2SeHJCpBRTaSPivh4Bqy6f7O73mMW
n898DSsUHLNuACTkl+Epp+/9LuYEm4UHWOrsUeTWEXWoRDoAfIbUPBSzx6KBiKqe
kew3TtFl6GTPMnI2udCjwKOV6oMCI6v6OC3ezLvkEd98d6JGruJoy63PK53ule4T
/BMxBSJunWorS89pvgjEcHuyymym4fOsMGYOPxv3xv/jYFNZr6fHhnRKGEyl7GwN
eZHt80ybcks/lFQPWUPDOLVjNP55uVcm3MGdh3U4B55j/+szLq2L/eZOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKslh7VMQ9Bu2J+vru9EKEFX5oxDMB8GA1UdIwQY
MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt
ZTExMWYzMjI2MzZhLzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh
LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJKdBLEj
yCU+vJUkQOEFiXTdFCdleFyrrGlsKu4aSJh5c7Rr+bp+FEYzJ25Bcq7kr/1BC3GQ
CPTRj2puqXVuf2kZpJW3ZZPfwNzkRnmxW1ikmr+w85bAJNc3bVYNH928+SWzYme0
Pg3BhfQ4o5Gag+HScLjLma9AIoxNKNDdluJM3SdB975eUUjl/rDIOy2XM6BNxtQx
uSgN3HE3X/PolA1wqeOXutcwm7Ppt1jSF5nuarmeV056Sxhg5JHoC12IL/LgJvJe
XzT/maW6Dtj52io2H8tv2i1I8LC1NdsYGzHmQLUWXjCJ98HKUlPe8iGMZTpX06Ow
UPuwiYb4ohykIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:49 2026 by rpki-client