Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier: ieoGvefT2a40FRYsot0QNXnGH2N90vr7K/aSHHIk+Jo=
Subject key identifier: E4:C6:58:F2:AC:8A:E6:EF:18:37:F3:F5:3F:04:AE:A0:58:3D:03:EE
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 019CA9B39411617D846F463227041973EDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number: 0CC2
Signing time: Sun 01 Mar 2026 14:00:43 +0000
Manifest this update: Sun 01 Mar 2026 14:00:43 +0000
Manifest next update: Mon 02 Mar 2026 14:00:43 +0000
Files and hashes: 1: q0Y1p5XaMB9ViOtAFAUBAb62WEo.roa (hash: Y0brd6EFMahPzlPl3xKPC6MzSQAtYq85BSXJQ3hFrzY=)
2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: MjL6y17uNqzu6zCyNW3PbvjTxWIJVcoRs5B9+dXfaas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:94:11:61:7d:84:6f:46:32:27:04:19:73:ed:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: Mar 1 14:00:43 2026 GMT
Not After : Mar 2 14:00:43 2026 GMT
Subject: CN=e4c658f2ac8ae6ef1837f3f53f04aea0583d03ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:a8:65:c8:c7:06:6c:52:35:dc:8e:4b:7e:
c9:6b:6e:ba:fc:2c:f6:89:0a:2e:08:76:8a:92:f0:
7a:87:05:c9:6f:d2:30:da:9b:b1:ac:e0:a1:fb:8d:
28:17:44:92:e5:13:26:01:18:2d:6d:02:eb:51:29:
6b:36:a9:3c:54:ec:f6:aa:b9:76:6b:ef:6e:de:11:
1e:09:17:06:b4:86:57:fc:1e:66:11:33:d7:ee:af:
df:3a:95:b5:49:f4:cf:7e:1c:93:7b:80:b3:80:84:
dd:07:15:8d:16:ff:83:ee:3f:d6:bc:43:76:1e:b6:
3d:ca:27:9f:70:95:cc:2f:7e:3a:f4:dc:3f:18:76:
29:4b:d6:9c:e8:6f:01:dc:b7:a4:ca:47:00:be:08:
8a:26:0d:9d:cb:c6:bd:85:89:77:e9:18:a8:9f:85:
54:fc:91:13:7d:85:50:9b:c9:3e:d4:50:ab:65:1b:
34:5d:63:06:ca:f3:e8:70:31:9c:99:65:39:8a:30:
35:78:a6:21:80:1d:2b:25:b0:2b:d2:eb:42:0a:50:
41:8e:99:39:e2:31:a3:31:62:76:47:31:0d:33:12:
59:91:3c:22:61:08:34:12:4a:56:91:bb:51:c8:08:
ac:14:4d:cf:27:3d:b0:6b:08:ae:74:a3:6d:80:ff:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:58:F2:AC:8A:E6:EF:18:37:F3:F5:3F:04:AE:A0:58:3D:03:EE
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:63:8c:cf:29:39:3a:b1:f0:82:57:5e:79:3d:44:e1:23:
2f:3e:99:97:51:c3:22:75:7a:ec:33:91:e3:da:b4:58:4a:92:
e5:7f:5e:9b:56:fe:48:b1:ac:fb:c0:11:66:45:f9:bf:3f:d6:
81:ea:6c:1a:78:57:c9:19:63:73:cf:c0:70:f0:09:c9:d4:7e:
b4:35:01:13:98:a2:c8:8a:40:9c:41:35:a5:81:13:79:c5:0d:
cb:f6:43:ff:82:1e:2f:5f:7a:d6:1e:48:2a:22:d6:b0:05:92:
e6:9e:a5:00:ee:04:db:b6:16:4c:9d:b2:09:f4:a5:bf:11:52:
96:ee:21:19:5a:2a:2a:c2:fb:d3:82:98:e8:f9:3c:ef:ce:77:
01:bb:89:3e:ec:ca:94:f7:3c:95:ec:28:de:5d:d0:fe:a9:94:
20:7f:74:e7:b6:84:e5:32:ad:9e:52:20:2e:e8:ad:f3:94:cf:
c9:ca:28:7d:33:a5:a7:80:b1:0f:4e:4d:d7:9e:2a:27:3e:24:
4d:e8:7e:d0:9f:62:86:b0:69:d1:08:0d:20:60:63:94:a3:08:
3f:45:b5:92:1e:1c:95:7b:b1:fa:be:30:a0:57:72:bb:e7:fd:
36:68:01:47:19:02:8a:4a:4e:85:94:88:36:33:68:0e:ce:f4:
74:08:c1:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps5QRYX2Eb0YyJwQZc+3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTU0OWQ2ODMwNWUyOWRmYjAwMDY5YTUyZDNkNGUxZjJj
NTYwNGMwHhcNMjYwMzAxMTQwMDQzWhcNMjYwMzAyMTQwMDQzWjAzMTEwLwYDVQQD
EyhlNGM2NThmMmFjOGFlNmVmMTgzN2YzZjUzZjA0YWVhMDU4M2QwM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QCoZcjHBmxSNdyOS37Ja266/Cz2
iQouCHaKkvB6hwXJb9Iw2puxrOCh+40oF0SS5RMmARgtbQLrUSlrNqk8VOz2qrl2
a+9u3hEeCRcGtIZX/B5mETPX7q/fOpW1SfTPfhyTe4CzgITdBxWNFv+D7j/WvEN2
HrY9yiefcJXML3469Nw/GHYpS9ac6G8B3LekykcAvgiKJg2dy8a9hYl36Rion4VU
/JETfYVQm8k+1FCrZRs0XWMGyvPocDGcmWU5ijA1eKYhgB0rJbAr0utCClBBjpk5
4jGjMWJ2RzENMxJZkTwiYQg0EkpWkbtRyAisFE3PJz2wawiudKNtgP9aqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTGWPKsiubvGDfz9T8ErqBYPQPuMB8GA1UdIwQY
MBaAFLGVSdaDBeKd+wAGmlLT1OHyxWBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEt
YTI4M2M5MDQ4ZjBmLzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEtYTI4M2M5MDQ4ZjBm
LzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmFjjM8p
OTqx8IJXXnk9ROEjLz6Zl1HDInV67DOR49q0WEqS5X9em1b+SLGs+8ARZkX5vz/W
gepsGnhXyRljc8/AcPAJydR+tDUBE5iiyIpAnEE1pYETecUNy/ZD/4IeL1961h5I
KiLWsAWS5p6lAO4E27YWTJ2yCfSlvxFSlu4hGVoqKsL704KY6Pk87853AbuJPuzK
lPc8lewo3l3Q/qmUIH9057aE5TKtnlIgLuit85TPycoofTOlp4CxD05N154qJz4k
Teh+0J9ihrBp0QgNIGBjlKMIP0W1kh4clXux+r4woFdyu+f9NmgBRxkCikpOhZSI
NjNoDs70dAjBJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client