Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: gFq093xSJukCA/N/Raz2vZQTqwgL24SKBeIMilgEYzk=
Subject key identifier: 6A:28:24:7F:68:5B:38:EC:3D:3F:E7:E0:1A:33:98:64:CB:54:69:30
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 019CAC7E164CF095B4112EEBD04534FE3920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 0B09
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: PxaSCnPuyNOWBR9p3lQguwISyUoz69Sftc9F93XtJcE=)
2: YAsr4AMd-DQg17IKnmJqPsKycSA.roa (hash: g07FXjeIHQJ20whOb8MTucqM4PupENC/MFjlVryEQbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:16:4c:f0:95:b4:11:2e:eb:d0:45:34:fe:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=6a28247f685b38ec3d3fe7e01a339864cb546930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:01:c0:7a:8d:11:b8:da:04:b6:89:13:d0:
f9:d0:aa:0c:df:b8:77:a9:af:d2:ab:0d:92:1d:ef:
1a:9b:27:55:61:3a:8c:10:9f:0c:6f:d4:11:55:bd:
ca:c2:c6:0c:60:58:25:c8:69:42:b0:04:dd:f9:26:
59:5c:9c:90:7a:94:cb:e4:00:95:60:a5:56:f7:73:
80:f9:4f:a4:20:14:26:39:0e:31:de:66:c1:67:f7:
27:dc:ad:4c:74:78:42:c7:37:bf:2b:bb:4f:d1:99:
25:02:04:33:05:a2:b6:e4:45:bf:49:db:22:00:a7:
01:7d:86:f3:56:0d:06:a1:36:ea:98:c4:f3:1e:a0:
b0:ca:49:de:b9:77:68:b4:4a:b3:14:3c:f4:09:cb:
1c:bd:a7:78:bd:09:a0:bf:a8:1a:c5:4c:6a:0b:e4:
90:91:0b:12:18:fb:7c:61:00:52:db:a9:e8:3a:b1:
4b:10:80:85:73:04:75:8d:25:dc:bd:19:82:30:33:
56:61:e7:a9:18:5b:91:86:e8:43:67:3f:13:cb:2a:
76:cc:93:5b:ef:12:a2:7a:fa:0e:ac:f3:af:1a:51:
bf:6b:0b:40:6d:ed:b6:e7:1d:80:63:6f:9c:3b:0c:
ba:45:0a:7f:83:48:b3:42:54:dc:9f:64:1a:1c:35:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:24:7F:68:5B:38:EC:3D:3F:E7:E0:1A:33:98:64:CB:54:69:30
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b1:87:6e:92:d0:86:f5:49:06:c0:ac:f8:fe:d1:08:4b:85:
87:dc:0b:95:d3:84:cc:28:ad:1a:ce:b2:c4:24:8b:37:46:99:
ca:75:9c:5b:fd:c7:5c:7f:6d:9d:f0:7c:1c:25:66:37:6c:a3:
a1:4a:8a:12:51:c2:0f:b1:04:b2:39:3f:7c:d2:0e:04:13:01:
13:76:ad:3e:e6:c9:02:da:9f:9c:8c:73:1b:df:6f:b7:c8:41:
36:6f:71:70:5f:1d:63:5a:6a:0d:0e:90:cd:db:6b:4d:e4:ba:
ec:8f:e0:65:8b:67:1e:fc:57:40:0f:62:ac:48:52:d9:5a:d1:
ad:d3:28:da:29:d6:0d:f5:ef:e6:4e:09:9a:2b:e3:58:75:d0:
9d:37:5f:a4:1e:c8:05:8b:04:3b:b3:32:3f:d0:a4:ce:19:0c:
45:d2:3b:6b:df:2d:00:2e:e5:3f:81:47:17:1a:90:b6:26:04:
f9:17:63:f5:61:8d:90:72:69:e8:2a:5f:b8:16:fb:b6:47:16:
94:56:95:f3:e2:6a:a9:a4:e3:2a:13:42:72:f2:9a:7c:c2:25:
21:74:f2:e0:45:b2:c9:5e:35:37:ba:71:5d:e3:f6:c4:53:96:
10:4a:c2:c9:9b:81:cd:d6:61:9b:46:e5:19:29:75:f5:44:7f:
da:4a:24:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfhZM8JW0ES7r0EU0/jkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1
MGVmMGYwHhcNMjYwMzAyMDMwMTEwWhcNMjYwMzAzMDMwMTEwWjAzMTEwLwYDVQQD
Eyg2YTI4MjQ3ZjY4NWIzOGVjM2QzZmU3ZTAxYTMzOTg2NGNiNTQ2OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvABwHqNEbjaBLaJE9D50KoM37h3
qa/Sqw2SHe8amydVYTqMEJ8Mb9QRVb3KwsYMYFglyGlCsATd+SZZXJyQepTL5ACV
YKVW93OA+U+kIBQmOQ4x3mbBZ/cn3K1MdHhCxze/K7tP0ZklAgQzBaK25EW/Sdsi
AKcBfYbzVg0GoTbqmMTzHqCwykneuXdotEqzFDz0Ccscvad4vQmgv6gaxUxqC+SQ
kQsSGPt8YQBS26noOrFLEICFcwR1jSXcvRmCMDNWYeepGFuRhuhDZz8Tyyp2zJNb
7xKievoOrPOvGlG/awtAbe225x2AY2+cOwy6RQp/g0izQlTcn2QaHDU/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGooJH9oWzjsPT/n4BozmGTLVGkwMB8GA1UdIwQY
MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt
MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj
LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrGHbpLQ
hvVJBsCs+P7RCEuFh9wLldOEzCitGs6yxCSLN0aZynWcW/3HXH9tnfB8HCVmN2yj
oUqKElHCD7EEsjk/fNIOBBMBE3atPubJAtqfnIxzG99vt8hBNm9xcF8dY1pqDQ6Q
zdtrTeS67I/gZYtnHvxXQA9irEhS2VrRrdMo2inWDfXv5k4JmivjWHXQnTdfpB7I
BYsEO7MyP9CkzhkMRdI7a98tAC7lP4FHFxqQtiYE+Rdj9WGNkHJp6CpfuBb7tkcW
lFaV8+JqqaTjKhNCcvKafMIlIXTy4EWyyV41N7pxXeP2xFOWEErCyZuBzdZhm0bl
GSl19UR/2kokTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:27 2026 by rpki-client