Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: f9ADpKg13nBqLsCbZ1BKCv5jYETZdKIWIjiJuZMFv50=
Subject key identifier: 8D:CB:0D:B0:C5:A7:58:E3:E8:B2:2F:2A:21:30:E0:A2:5E:3F:9A:1D
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019CADFE82AE3B013FA41381F40FC86C1AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 1353
Signing time: Mon 02 Mar 2026 10:01:03 +0000
Manifest this update: Mon 02 Mar 2026 10:01:03 +0000
Manifest next update: Tue 03 Mar 2026 10:01:03 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: O3FPeoFwhDV9R9NZtJlRiC+36CBhxrvU52ZhH8yR1QY=)
2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:82:ae:3b:01:3f:a4:13:81:f4:0f:c8:6c:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Mar 2 10:01:03 2026 GMT
Not After : Mar 3 10:01:03 2026 GMT
Subject: CN=8dcb0db0c5a758e3e8b22f2a2130e0a25e3f9a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:42:6c:4b:a6:6f:fa:5f:87:ab:2f:95:1e:
13:3a:8b:35:28:7a:67:a8:4e:b2:87:be:51:aa:ee:
a8:c8:b5:25:76:05:3c:6f:d9:7a:59:a1:92:da:f3:
4d:ed:c9:39:d2:ef:da:70:d9:8d:2b:22:2a:04:a7:
d5:dc:5e:e0:f4:32:e2:d5:cb:99:a4:f3:93:c4:01:
33:1e:64:ad:ac:59:e9:3b:37:e5:a7:ff:0d:01:bb:
93:8e:df:ed:32:8d:b9:ce:48:18:e0:d7:4c:fc:9c:
2c:56:54:16:2b:1c:a6:90:cf:8f:da:bc:bf:bc:85:
e4:51:40:3c:1d:e3:70:0d:33:8b:4f:56:b3:13:e4:
ed:dd:2d:02:90:8c:21:dc:d1:45:1e:20:7b:77:a0:
8f:bb:e7:82:6f:c7:3c:65:80:c9:5a:9f:e5:39:d5:
3a:fe:d2:15:5a:aa:37:81:d6:4d:af:19:00:f4:1d:
97:3c:0c:c6:fc:f5:e1:e0:33:cf:78:88:f9:c9:0e:
1d:17:21:96:e1:8c:a1:bc:1e:f7:70:36:5b:d8:40:
69:8e:08:1f:2f:7c:d1:09:a2:73:11:63:07:e0:82:
a3:c6:11:f8:5a:47:12:75:a3:24:52:8c:9c:9c:b4:
9d:74:b7:ca:ee:3a:a8:31:83:a8:2b:0a:77:7f:e1:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:0D:B0:C5:A7:58:E3:E8:B2:2F:2A:21:30:E0:A2:5E:3F:9A:1D
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:a9:45:bc:84:aa:56:b3:46:3b:bf:09:78:44:c5:e2:19:
f4:39:d8:02:91:2f:35:93:4a:cd:01:a0:78:4c:7d:b5:5e:ae:
5e:76:e4:e7:cf:3a:c9:ee:73:c3:ca:27:ba:2e:e5:32:b3:95:
e4:3f:31:3a:fa:a2:1a:cb:f8:07:5f:4c:ef:2d:1c:58:20:43:
5e:78:64:fc:8d:eb:e0:84:dd:bc:9b:b2:c4:bc:b8:5d:2b:4c:
58:76:90:05:1a:a9:c2:34:39:d0:97:8c:e0:b6:be:ef:32:61:
c3:22:31:e7:99:ce:df:a6:7f:7b:3b:42:6f:b3:69:97:da:52:
63:e0:b6:4c:44:7f:5b:60:04:02:e3:e0:55:bb:25:9a:ee:52:
d7:da:cc:43:f8:71:20:f4:ea:cb:f1:3f:9f:96:65:c9:23:52:
5d:d1:2e:65:31:af:2e:3a:46:90:89:fc:8f:16:0a:b7:11:59:
83:be:d4:bf:4d:7d:66:a4:17:6a:1f:52:6f:2a:c1:7c:c9:b3:
27:76:03:f5:e5:6e:14:1c:69:62:e5:65:28:c2:86:57:d1:f7:
9b:62:db:d3:82:ce:d8:68:7c:4e:1e:e4:92:c7:e4:4d:e9:48:
df:13:92:f4:55:b2:a4:30:9b:99:ed:2e:5b:4c:d2:f6:e3:c9:
ea:bb:d2:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/oKuOwE/pBOB9A/IbBqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjYwMzAyMTAwMTAzWhcNMjYwMzAzMTAwMTAzWjAzMTEwLwYDVQQD
Eyg4ZGNiMGRiMGM1YTc1OGUzZThiMjJmMmEyMTMwZTBhMjVlM2Y5YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsFCbEumb/pfh6svlR4TOos1KHpn
qE6yh75Rqu6oyLUldgU8b9l6WaGS2vNN7ck50u/acNmNKyIqBKfV3F7g9DLi1cuZ
pPOTxAEzHmStrFnpOzflp/8NAbuTjt/tMo25zkgY4NdM/JwsVlQWKxymkM+P2ry/
vIXkUUA8HeNwDTOLT1azE+Tt3S0CkIwh3NFFHiB7d6CPu+eCb8c8ZYDJWp/lOdU6
/tIVWqo3gdZNrxkA9B2XPAzG/PXh4DPPeIj5yQ4dFyGW4YyhvB73cDZb2EBpjggf
L3zRCaJzEWMH4IKjxhH4WkcSdaMkUoycnLSddLfK7jqoMYOoKwp3f+E3rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3LDbDFp1jj6LIvKiEw4KJeP5odMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwapRbyE
qlazRju/CXhExeIZ9DnYApEvNZNKzQGgeEx9tV6uXnbk5886ye5zw8onui7lMrOV
5D8xOvqiGsv4B19M7y0cWCBDXnhk/I3r4ITdvJuyxLy4XStMWHaQBRqpwjQ50JeM
4La+7zJhwyIx55nO36Z/eztCb7Npl9pSY+C2TER/W2AEAuPgVbslmu5S19rMQ/hx
IPTqy/E/n5ZlySNSXdEuZTGvLjpGkIn8jxYKtxFZg77Uv019ZqQXah9SbyrBfMmz
J3YD9eVuFBxpYuVlKMKGV9H3m2Lb04LO2Gh8Th7kksfkTelI3xOS9FWypDCbme0u
W0zS9uPJ6rvSEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:02 2026 by rpki-client