Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: jqJJGIYzCNOyAloYVa+kXkvkKJpR28EAIJJb5XpyMwE=
Subject key identifier: 69:37:A1:DB:B0:43:D4:9A:4D:3E:54:E5:51:31:5A:4D:F9:FB:3E:B2
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 019CABD91F18F486B40246F33441FDB761C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 09F8
Signing time: Mon 02 Mar 2026 00:00:58 +0000
Manifest this update: Mon 02 Mar 2026 00:00:58 +0000
Manifest next update: Tue 03 Mar 2026 00:00:58 +0000
Files and hashes: 1: COE1l5AcJpUIj8VESfwwNIX_aqE.roa (hash: Xk4fQMZM2kqvaeEiNYmxxopzI51Y0bhYgcMl+wQt2Ak=)
2: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: rHUlfEvd9RIZSzuMmLpuqlLMYJevC1H6dYcgwv4E9os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1f:18:f4:86:b4:02:46:f3:34:41:fd:b7:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Mar 2 00:00:58 2026 GMT
Not After : Mar 3 00:00:58 2026 GMT
Subject: CN=6937a1dbb043d49a4d3e54e551315a4df9fb3eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:43:4a:dc:2a:4a:d3:49:e7:b4:7b:b0:0f:
b4:c9:a5:b9:34:cb:89:40:b3:6b:2a:87:81:b4:b0:
69:57:eb:c7:39:f5:8f:2c:50:d6:06:e7:4d:cd:09:
26:b3:7f:d3:23:ee:1d:c5:03:74:7b:6c:55:db:22:
86:46:f8:32:19:0d:27:d2:63:13:60:a0:71:bc:b1:
3e:47:cb:04:0c:8f:3a:42:ca:8d:40:a7:37:c9:17:
0e:e4:2f:32:8a:b7:dd:da:ac:a8:28:26:7d:66:71:
95:c3:6c:ac:26:52:bb:65:e2:fa:ef:d0:65:68:06:
5a:c6:65:84:f6:e2:93:30:54:2f:f4:b2:3c:d3:e0:
90:81:8e:d1:1a:6e:2d:f0:8b:a1:9f:a2:82:19:6d:
24:b3:d3:17:be:49:65:c0:28:e2:8b:0e:13:2c:06:
30:f5:3a:c2:82:14:06:ab:ab:6f:00:f6:14:dd:a7:
49:b1:32:e0:c0:87:81:54:6b:da:a4:c4:25:e1:c8:
e6:1c:0c:46:37:ad:e4:13:7d:15:f7:2a:dd:77:24:
f8:69:8d:99:5b:df:aa:07:ae:75:37:34:ab:ac:e0:
35:73:4a:d1:0b:26:6e:8d:ef:e0:06:56:50:f0:b6:
50:bc:68:1e:58:11:05:b9:dd:b8:74:5a:6a:a6:cc:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:A1:DB:B0:43:D4:9A:4D:3E:54:E5:51:31:5A:4D:F9:FB:3E:B2
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:77:7a:0a:e4:69:84:3b:70:00:e6:6f:66:e7:de:17:15:d6:
2e:7b:e3:45:1f:14:9e:54:d3:c2:53:b5:00:3e:7b:38:a7:e5:
08:be:4f:a4:5e:20:02:63:10:d5:6d:c2:3f:6b:12:5f:36:58:
db:83:61:e9:8f:91:04:cc:2d:78:c2:5c:27:39:8d:c7:b2:7e:
ea:0e:4c:99:ae:e6:03:df:95:47:24:47:bf:ce:e9:29:23:f2:
1d:05:ec:5a:c8:85:eb:e6:49:57:db:ae:2e:87:18:01:95:12:
da:5a:2d:31:ed:66:65:7a:e3:a4:74:74:c9:bf:74:70:92:59:
1a:fb:ed:69:af:c0:2b:39:0a:a3:24:11:9c:7c:9d:23:df:bd:
dd:4d:bb:f3:31:1e:e7:e8:ec:30:25:8d:b0:1f:96:f2:cd:cb:
b3:de:0b:c4:53:ef:6d:96:3e:0f:52:23:d1:36:6c:3c:25:e5:
cf:93:61:80:1b:65:c7:dc:19:0b:d4:30:f3:0b:c8:b0:63:8f:
e7:2f:76:59:c2:51:fb:14:0f:a7:06:91:3c:18:b5:7c:7d:2d:
03:d5:d3:b0:14:87:40:0e:6c:13:5a:00:2b:8b:91:83:df:16:
47:50:a6:05:91:d8:46:66:00:fd:21:37:e4:af:a7:6c:07:c4:
9a:8a:ed:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2R8Y9Ia0AkbzNEH9t2HAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOGRiOTY0Mzg5NDQ2Y2FiY2FmNzk0MWNkMTk4MzQyYzIz
MzZkZDAwHhcNMjYwMzAyMDAwMDU4WhcNMjYwMzAzMDAwMDU4WjAzMTEwLwYDVQQD
Eyg2OTM3YTFkYmIwNDNkNDlhNGQzZTU0ZTU1MTMxNWE0ZGY5ZmIzZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+1DStwqStNJ57R7sA+0yaW5NMuJ
QLNrKoeBtLBpV+vHOfWPLFDWBudNzQkms3/TI+4dxQN0e2xV2yKGRvgyGQ0n0mMT
YKBxvLE+R8sEDI86QsqNQKc3yRcO5C8yirfd2qyoKCZ9ZnGVw2ysJlK7ZeL679Bl
aAZaxmWE9uKTMFQv9LI80+CQgY7RGm4t8Iuhn6KCGW0ks9MXvkllwCjiiw4TLAYw
9TrCghQGq6tvAPYU3adJsTLgwIeBVGvapMQl4cjmHAxGN63kE30V9yrddyT4aY2Z
W9+qB651NzSrrOA1c0rRCyZuje/gBlZQ8LZQvGgeWBEFud24dFpqpsz8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk3oduwQ9SaTT5U5VExWk35+z6yMB8GA1UdIwQY
MBaAFE6NuWQ4lEbKvK95Qc0Zg0LCM23QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUt
OTU0NjliZjA5MzQwLzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iMzk2MWMtM2Y2OC00NWMxLWEwNGUtOTU0NjliZjA5MzQw
LzEvVG8yNVpEaVVSc3E4cjNsQnpSbURRc0l6YmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInd6CuRp
hDtwAOZvZufeFxXWLnvjRR8UnlTTwlO1AD57OKflCL5PpF4gAmMQ1W3CP2sSXzZY
24Nh6Y+RBMwteMJcJzmNx7J+6g5Mma7mA9+VRyRHv87pKSPyHQXsWsiF6+ZJV9uu
LocYAZUS2lotMe1mZXrjpHR0yb90cJJZGvvtaa/AKzkKoyQRnHydI9+93U278zEe
5+jsMCWNsB+W8s3Ls94LxFPvbZY+D1Ij0TZsPCXlz5NhgBtlx9wZC9Qw8wvIsGOP
5y92WcJR+xQPpwaRPBi1fH0tA9XTsBSHQA5sE1oAK4uRg98WR1CmBZHYRmYA/SE3
5K+nbAfEmort6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:11 2026 by rpki-client