Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: 0On2oJ4LAQxgmmX/4xwIGXhFjZpufH3p2oL6A4jqiGI=
Subject key identifier: 20:65:8B:EC:62:9E:53:87:55:31:6B:D7:DD:95:DD:E0:E8:C2:64:34
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019CAB6AC8EF2473065E3C59216369F40CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 07E2
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: q39cQRU4PilbTat1Vd2bm7v3XvCOrNHr2hoAt0FtnCc=)
3: wDaukqq7DBMLY3tz0NlY1IroUx0.roa (hash: 3J9MoAyfecCeK4hgjY1lICytZk6haCoZrI0pumvGF1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c8:ef:24:73:06:5e:3c:59:21:63:69:f4:0c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=20658bec629e538755316bd7dd95dde0e8c26434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:d0:4a:e9:e2:01:c4:f2:ee:c7:f8:12:64:
c0:be:28:56:29:49:27:74:eb:0e:24:dc:fb:db:35:
ed:26:a6:79:39:69:4b:4a:9a:17:59:72:c3:52:e1:
4f:3e:97:ec:39:ec:7b:70:2b:13:0e:e8:26:e9:05:
5e:30:ed:2e:5c:77:ce:d1:0d:a5:89:67:b5:7f:af:
34:20:5a:fa:b6:2b:21:f5:3e:55:35:f7:d6:7d:e3:
fe:c0:24:aa:b3:d9:05:37:c2:78:2d:a9:78:ee:53:
45:1d:43:06:e3:9f:ea:be:ff:cc:f3:42:6f:97:29:
b8:51:0b:9a:3b:8c:5d:f3:d5:24:b5:8d:90:05:ae:
f1:eb:f0:70:20:9a:cf:c3:3e:60:b5:f0:2e:a0:98:
ca:ae:54:85:5b:0d:cd:c3:ea:4c:f7:bc:a3:01:d5:
1d:84:3e:24:9a:52:d4:e6:a0:41:28:5c:9a:0b:e9:
86:aa:ae:60:88:f5:a3:71:80:c8:82:64:a6:59:ab:
55:de:50:0c:a6:9d:56:66:62:5b:ce:1f:e2:0b:4d:
6d:95:3a:04:3b:55:29:40:f1:69:7e:01:eb:e8:af:
21:e4:90:96:83:b4:79:2e:4f:cf:51:a1:8d:80:b7:
f5:71:11:ac:6b:f7:5a:e8:49:0d:e6:1d:0a:3f:02:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:8B:EC:62:9E:53:87:55:31:6B:D7:DD:95:DD:E0:E8:C2:64:34
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e9:40:81:10:0f:bc:1d:76:e7:2e:af:3e:4e:a5:80:7c:d6:
8a:66:7c:39:a7:93:81:ad:2e:b7:d2:67:02:96:c9:09:5c:ba:
b0:6d:01:5f:49:0b:95:1e:19:5f:33:4f:79:32:ec:7e:be:79:
11:1b:dd:79:48:5e:8a:71:86:26:8d:ca:83:32:2e:32:76:d1:
8b:9a:7b:2c:27:be:55:55:c6:4e:42:4f:28:2b:ff:fe:c7:a6:
bb:d8:87:59:76:44:68:f4:4e:f6:c8:e8:7e:12:7d:75:67:05:
c2:6b:17:a3:7d:83:55:a4:d4:ce:ea:ff:3b:68:a0:24:f7:23:
35:71:9e:6f:91:11:e8:6d:38:b0:83:1d:13:30:7e:fb:2d:66:
98:49:28:fb:5c:67:8d:28:12:13:b7:8d:3e:5d:38:fd:d8:b9:
2d:3a:5a:ea:28:29:61:1a:a8:c0:84:44:01:67:42:9d:6b:20:
99:6f:ec:75:00:50:1f:9a:99:d4:11:8b:e4:6b:fe:07:8c:f9:
78:97:e8:0c:e1:c9:30:ee:eb:ba:6c:ba:a1:81:55:11:c8:2a:
b1:c7:1d:d7:42:b6:10:ac:2f:1f:53:1b:ff:e6:bb:fe:21:0b:
1f:22:a7:08:f3:ae:68:69:02:e9:5b:5a:2a:f0:79:ef:09:ee:
8d:b5:3c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrasjvJHMGXjxZIWNp9AzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjYwMzAxMjIwMDI3WhcNMjYwMzAyMjIwMDI3WjAzMTEwLwYDVQQD
EygyMDY1OGJlYzYyOWU1Mzg3NTUzMTZiZDdkZDk1ZGRlMGU4YzI2NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkvQSuniAcTy7sf4EmTAvihWKUkn
dOsOJNz72zXtJqZ5OWlLSpoXWXLDUuFPPpfsOex7cCsTDugm6QVeMO0uXHfO0Q2l
iWe1f680IFr6tish9T5VNffWfeP+wCSqs9kFN8J4Lal47lNFHUMG45/qvv/M80Jv
lym4UQuaO4xd89UktY2QBa7x6/BwIJrPwz5gtfAuoJjKrlSFWw3Nw+pM97yjAdUd
hD4kmlLU5qBBKFyaC+mGqq5giPWjcYDIgmSmWatV3lAMpp1WZmJbzh/iC01tlToE
O1UpQPFpfgHr6K8h5JCWg7R5Lk/PUaGNgLf1cRGsa/da6EkN5h0KPwLPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBli+xinlOHVTFr192V3eDowmQ0MB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+lAgRAP
vB125y6vPk6lgHzWimZ8OaeTga0ut9JnApbJCVy6sG0BX0kLlR4ZXzNPeTLsfr55
ERvdeUheinGGJo3KgzIuMnbRi5p7LCe+VVXGTkJPKCv//semu9iHWXZEaPRO9sjo
fhJ9dWcFwmsXo32DVaTUzur/O2igJPcjNXGeb5ER6G04sIMdEzB++y1mmEko+1xn
jSgSE7eNPl04/di5LTpa6igpYRqowIREAWdCnWsgmW/sdQBQH5qZ1BGL5Gv+B4z5
eJfoDOHJMO7rumy6oYFVEcgqsccd10K2EKwvH1Mb/+a7/iELHyKnCPOuaGkC6Vta
KvB57wnujbU8Uw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:01 2026 by rpki-client