Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
File: DEIZ0r8JtphczV1I_ZTSshuATsY.mft (raw, json)
Hash identifier: qR7zBPrzhrA8OAKluh7webfcJQ56jj5yHWPYP8Cz3NY=
Subject key identifier: 95:39:2F:B7:37:AC:07:F5:EE:AD:FE:AF:17:13:FC:AF:D3:2D:9E:AA
Authority key identifier: 0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
Certificate issuer: /CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Certificate serial: 019CAE6C419EDD64F1B0C12D5FF0141CE11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
Manifest number: 4D
Signing time: Mon 02 Mar 2026 12:00:56 +0000
Manifest this update: Mon 02 Mar 2026 12:00:56 +0000
Manifest next update: Tue 03 Mar 2026 12:00:56 +0000
Files and hashes: 1: DEIZ0r8JtphczV1I_ZTSshuATsY.crl (hash: zFdQ0IUMH1lrjGGRP28o0/vM9n5BOin7LYIIC+ifrZo=)
2: GViLUpBKhpnABkhMhuMdD2J_oqw.roa (hash: 7Bdn6jISx+wiSsw/Erals+/gDIwz2wOl6w9gjca7wOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:41:9e:dd:64:f1:b0:c1:2d:5f:f0:14:1c:e1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Validity
Not Before: Mar 2 12:00:56 2026 GMT
Not After : Mar 3 12:00:56 2026 GMT
Subject: CN=95392fb737ac07f5eeadfeaf1713fcafd32d9eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:3c:5b:1b:5b:f9:f8:82:52:61:3a:10:d8:
46:e4:bc:33:1f:dd:35:e8:f6:a4:6e:3b:18:b0:39:
46:60:3c:30:60:37:ee:3d:25:3b:5c:6e:60:87:86:
99:28:ad:5c:fe:48:e9:9c:e4:a0:29:a6:bf:bc:71:
54:de:d7:44:f2:71:eb:79:85:51:a8:13:3b:65:44:
96:1d:33:7c:ed:65:c5:9f:51:f5:6e:28:7c:f8:bc:
ec:b8:5b:67:7d:cf:a1:72:21:ea:a1:d2:82:7a:0b:
92:b3:21:a8:df:c0:19:38:bb:2b:5c:4f:05:03:00:
2a:5a:8e:c7:0d:2f:1d:5d:ac:74:55:a7:c4:a9:2d:
5b:68:48:20:5b:0f:67:7b:68:4d:29:16:1c:e3:31:
c9:d0:23:8b:5e:7a:9d:cd:81:ca:3a:e3:d3:24:93:
01:78:0f:b6:54:1b:65:d6:9a:0b:6d:9f:6c:8e:bf:
79:7c:a4:73:79:ae:e0:b0:ce:d7:02:d0:bc:b3:5f:
f6:f8:eb:77:65:42:eb:f9:7c:7a:e1:db:2d:d7:27:
57:22:6e:a9:67:a7:7b:be:d6:93:71:fc:ef:95:c0:
0f:80:90:f0:56:21:99:e9:61:e8:20:79:e4:66:b5:
56:79:61:70:d1:8d:79:a2:4f:8b:dc:ef:00:10:ba:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:2F:B7:37:AC:07:F5:EE:AD:FE:AF:17:13:FC:AF:D3:2D:9E:AA
X509v3 Authority Key Identifier:
keyid:0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2f:9e:e8:c6:11:02:93:5e:69:22:aa:a3:b4:9f:04:2e:e7:
40:09:a4:20:6f:b3:02:79:c4:d8:8f:c3:28:84:32:90:9d:e0:
75:e4:c5:d6:94:5f:cc:74:84:54:87:fd:c2:ae:90:e6:11:52:
34:38:fe:db:3a:35:c0:b3:08:eb:b3:4b:c9:21:ea:45:2b:a1:
38:9d:e7:2a:45:d2:53:31:1f:62:71:c7:a6:e2:44:d8:7d:cd:
51:89:2b:1e:2b:f9:1f:ce:49:75:08:0c:86:a5:a4:1f:87:16:
bc:08:f0:1d:3a:6e:6a:d8:21:e5:63:e9:66:d4:a5:5d:c7:e0:
a1:fa:7e:7c:b7:35:ea:71:3b:79:26:08:7a:da:7c:9d:18:a9:
fd:63:d5:80:9b:83:44:d7:9b:d8:f8:4d:1e:8e:87:16:40:e4:
b5:78:c7:b8:eb:54:c1:c0:7b:77:7e:37:5a:24:08:47:39:15:
b2:0c:61:31:c6:82:ea:5c:41:bf:23:a0:23:b3:d2:a8:5b:d9:
a0:c0:bf:22:68:71:a9:b7:47:40:80:05:74:a8:0b:b3:bc:04:
f0:79:7b:be:f9:b8:72:a0:dd:da:2e:14:6f:f1:5a:d6:e1:9b:
d4:b1:75:20:71:d9:5e:5a:86:a9:d9:ab:17:7f:4e:86:db:79:
ce:84:96:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubEGe3WTxsMEtX/AUHOEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDIxOWQyYmYwOWI2OTg1Y2NkNWQ0OGZkOTRkMmIyMWI4
MDRlYzYwHhcNMjYwMzAyMTIwMDU2WhcNMjYwMzAzMTIwMDU2WjAzMTEwLwYDVQQD
Eyg5NTM5MmZiNzM3YWMwN2Y1ZWVhZGZlYWYxNzEzZmNhZmQzMmQ5ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOA8Wxtb+fiCUmE6ENhG5LwzH901
6PakbjsYsDlGYDwwYDfuPSU7XG5gh4aZKK1c/kjpnOSgKaa/vHFU3tdE8nHreYVR
qBM7ZUSWHTN87WXFn1H1bih8+LzsuFtnfc+hciHqodKCeguSsyGo38AZOLsrXE8F
AwAqWo7HDS8dXax0VafEqS1baEggWw9ne2hNKRYc4zHJ0COLXnqdzYHKOuPTJJMB
eA+2VBtl1poLbZ9sjr95fKRzea7gsM7XAtC8s1/2+Ot3ZULr+Xx64dst1ydXIm6p
Z6d7vtaTcfzvlcAPgJDwViGZ6WHoIHnkZrVWeWFw0Y15ok+L3O8AELqxSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU5L7c3rAf17q3+rxcT/K/TLZ6qMB8GA1UdIwQY
MBaAFAxCGdK/CbaYXM1dSP2U0rIbgE7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVJWjByOEp0cGhjelYxSV9aVFNzaHVBVHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNzBiODYtNWMwNy00MzM0LWFjNjkt
ZDEyNTdlMzc1OWM2LzEvREVJWjByOEp0cGhjelYxSV9aVFNzaHVBVHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNzBiODYtNWMwNy00MzM0LWFjNjktZDEyNTdlMzc1OWM2
LzEvREVJWjByOEp0cGhjelYxSV9aVFNzaHVBVHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC+e6MYR
ApNeaSKqo7SfBC7nQAmkIG+zAnnE2I/DKIQykJ3gdeTF1pRfzHSEVIf9wq6Q5hFS
NDj+2zo1wLMI67NLySHqRSuhOJ3nKkXSUzEfYnHHpuJE2H3NUYkrHiv5H85JdQgM
hqWkH4cWvAjwHTpuatgh5WPpZtSlXcfgofp+fLc16nE7eSYIetp8nRip/WPVgJuD
RNeb2PhNHo6HFkDktXjHuOtUwcB7d343WiQIRzkVsgxhMcaC6lxBvyOgI7PSqFvZ
oMC/ImhxqbdHQIAFdKgLs7wE8Hl7vvm4cqDd2i4Ub/Fa1uGb1LF1IHHZXlqGqdmr
F39Ohtt5zoSW+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:55 2026 by rpki-client