Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: Kl9E5N+SM3HAt0rOUZOYvMSMXJ5wDpWByZjdcUHrFPo=
Subject key identifier: 7E:F0:03:D2:B2:4B:95:9F:C0:35:DB:EF:8F:13:C5:6B:CE:E7:AF:AB
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 019CABD9C40D07E20A8BBE064338BD6CDA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 0810
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: rVO37CdUQiDsPnPUBWkJWEN8yHU.roa (hash: zSEofIQOLxbgh2NSVkGuDXmZbljjzQDcpH66ByIJTs4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: lj8R1tbqbAuYzWgiTbnli1P1CXtMzxRI9y7fD1OWD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c4:0d:07:e2:0a:8b:be:06:43:38:bd:6c:da:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=7ef003d2b24b959fc035dbef8f13c56bcee7afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:cb:eb:d9:a5:34:6e:eb:55:49:93:b3:cd:
10:ee:19:31:8c:ca:23:dc:be:18:c0:da:fd:6d:82:
53:a3:20:c3:09:79:1f:9b:fd:cd:b2:c0:5f:fb:bf:
89:e7:0e:e4:18:88:d2:76:db:0b:6c:68:b9:8c:00:
44:1d:d1:9b:aa:03:16:ae:e5:ff:69:e1:b7:f0:58:
f4:f6:46:b3:93:ec:e9:f8:e8:03:a6:23:29:1e:db:
3e:54:88:13:80:85:6c:12:01:59:31:e7:9b:9f:11:
26:60:32:fb:15:12:fc:31:84:ae:83:b7:a2:97:61:
06:90:f4:10:db:a1:8c:d4:50:31:a9:3d:94:98:11:
e2:10:65:4c:e3:ee:b1:35:63:c0:9e:1c:06:a3:82:
9c:7a:75:c5:97:f7:e1:88:14:63:7e:15:ef:fe:25:
c7:5e:db:eb:3f:01:c8:53:b3:13:8b:46:7f:01:39:
07:14:42:e1:cf:c8:9f:d9:71:bc:3f:dd:09:4f:9f:
d7:54:6a:ca:23:04:d6:f0:94:6d:67:7c:7f:e8:f0:
26:80:cc:5f:d2:90:e6:e8:7e:11:85:46:58:27:cc:
36:4c:c8:10:2d:57:e3:fa:44:85:8e:58:88:3b:02:
a3:98:79:b9:c5:dc:68:1f:c7:0d:80:7f:f4:f5:89:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F0:03:D2:B2:4B:95:9F:C0:35:DB:EF:8F:13:C5:6B:CE:E7:AF:AB
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:69:66:73:25:bc:a5:2b:fb:84:5b:7f:7a:05:06:c6:1f:93:
b5:1d:88:55:9e:45:65:07:7b:99:34:9f:4b:44:38:34:e7:33:
93:11:96:97:32:6d:84:be:bc:61:57:7f:f8:cb:39:c5:cc:93:
49:39:9e:d5:54:b5:97:1b:88:1a:3a:1c:04:4a:08:31:44:08:
e4:fd:34:4a:64:c5:f9:49:fb:c1:49:8a:69:a3:02:bf:fb:ba:
d7:88:ea:79:9e:ad:e9:a7:f8:05:20:6d:4a:7e:bf:69:d0:37:
07:a7:b7:4d:82:0c:e1:59:e7:60:94:37:71:3b:92:7d:71:fa:
07:ac:4c:66:ab:ce:0d:a9:c3:c9:cf:e2:2c:1a:9f:e6:ca:02:
18:eb:d4:1d:0b:29:94:0f:0f:14:de:4b:32:f5:c1:77:35:64:
a5:63:c6:17:86:f9:80:b6:b5:01:dd:84:85:83:4d:ea:06:32:
e7:0a:7c:51:dd:09:bd:3c:d1:ed:64:e2:ba:34:7c:bd:39:5f:
5c:7b:f5:88:d7:f0:19:4e:c9:50:cb:72:fc:c7:2b:6c:17:08:
68:ac:3d:06:47:63:a4:d2:7f:f9:d0:4b:86:65:b7:f3:27:c7:
fb:5d:04:05:e2:90:0c:8f:c4:c7:0b:42:91:d5:40:cf:3a:87:
67:aa:fa:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cQNB+IKi74GQzi9bNoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5
ZTkxMTkwHhcNMjYwMzAyMDAwMTQxWhcNMjYwMzAzMDAwMTQxWjAzMTEwLwYDVQQD
Eyg3ZWYwMDNkMmIyNGI5NTlmYzAzNWRiZWY4ZjEzYzU2YmNlZTdhZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XPL69mlNG7rVUmTs80Q7hkxjMoj
3L4YwNr9bYJToyDDCXkfm/3NssBf+7+J5w7kGIjSdtsLbGi5jABEHdGbqgMWruX/
aeG38Fj09kazk+zp+OgDpiMpHts+VIgTgIVsEgFZMeebnxEmYDL7FRL8MYSug7ei
l2EGkPQQ26GM1FAxqT2UmBHiEGVM4+6xNWPAnhwGo4KcenXFl/fhiBRjfhXv/iXH
XtvrPwHIU7MTi0Z/ATkHFELhz8if2XG8P90JT5/XVGrKIwTW8JRtZ3x/6PAmgMxf
0pDm6H4RhUZYJ8w2TMgQLVfj+kSFjliIOwKjmHm5xdxoH8cNgH/09YmeHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7wA9KyS5WfwDXb748TxWvO56+rMB8GA1UdIwQY
MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt
ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2
LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGlmcyW8
pSv7hFt/egUGxh+TtR2IVZ5FZQd7mTSfS0Q4NOczkxGWlzJthL68YVd/+Ms5xcyT
STme1VS1lxuIGjocBEoIMUQI5P00SmTF+Un7wUmKaaMCv/u614jqeZ6t6af4BSBt
Sn6/adA3B6e3TYIM4VnnYJQ3cTuSfXH6B6xMZqvODanDyc/iLBqf5soCGOvUHQsp
lA8PFN5LMvXBdzVkpWPGF4b5gLa1Ad2EhYNN6gYy5wp8Ud0JvTzR7WTiujR8vTlf
XHv1iNfwGU7JUMty/McrbBcIaKw9BkdjpNJ/+dBLhmW38yfH+10EBeKQDI/ExwtC
kdVAzzqHZ6r6Pg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:45 2026 by rpki-client