Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: kYrY9OBR4pMuBIIrEV2n/1M82G+KElnTiwtyHufzk8s=
Subject key identifier: F1:93:EB:B0:5C:BB:82:FE:0F:13:63:D0:B3:E4:BD:C4:60:41:4C:EA
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 019CABD95EC8ADF87C94C80DF3BC5AD54117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 1589
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: ldB1ccba1eVWxNgUlrtHodR40IY.roa (hash: /jl6IvaIt6KPatpRGzV51YKDjVrmO0TQhFPcR45WfF4=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: sUy6Gw88m/sH9KTp7qG5Ko+TNA0JUHPqIaHQOEZUIv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5e:c8:ad:f8:7c:94:c8:0d:f3:bc:5a:d5:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=f193ebb05cbb82fe0f1363d0b3e4bdc460414cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:62:df:85:93:d2:49:44:2b:2f:24:77:02:
4b:e6:9a:96:9d:3f:ab:17:a7:4e:de:97:f3:cc:dc:
26:5e:09:ad:aa:e1:44:fa:1f:ed:cd:ad:ae:00:87:
36:a6:f6:93:66:80:ce:66:bc:47:e9:0e:3f:e1:f1:
d9:42:17:79:4a:25:f1:c2:9c:3c:96:d6:29:43:ad:
f9:b7:3f:64:e2:78:2d:88:e4:da:0e:78:c2:82:d5:
de:68:cb:ce:c5:14:4d:53:6f:70:aa:f6:16:3b:95:
56:e7:f4:ce:d6:6f:1d:39:cb:05:2d:79:64:86:2a:
06:b7:86:e8:a6:fa:f4:33:37:5d:e1:06:ea:3a:df:
9d:e0:96:2c:aa:56:19:f6:66:51:89:22:be:ed:3f:
1f:13:96:74:53:39:0d:63:e7:6a:47:2e:3b:1d:d6:
73:a4:16:55:15:7b:2f:a4:40:9e:4d:22:48:6c:e9:
fa:2d:ff:32:90:7b:f5:a3:8f:a9:50:43:a7:bb:fa:
69:39:87:12:5b:e4:83:bd:fb:88:d5:32:01:39:f5:
0c:ea:21:fe:d0:06:a9:32:3a:65:ca:c3:bf:18:10:
76:24:2c:e4:cc:cf:67:63:94:11:c1:18:0a:6c:06:
bf:31:46:c6:73:9e:7b:fa:5a:9b:bb:81:bb:51:08:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:EB:B0:5C:BB:82:FE:0F:13:63:D0:B3:E4:BD:C4:60:41:4C:EA
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:df:5c:d8:85:4b:63:3f:a8:30:ae:54:d0:f2:72:14:69:88:
ab:2e:db:6c:4e:cd:9c:66:18:e7:db:74:84:8b:b0:04:d9:e8:
db:d3:5f:bb:49:3e:8d:c8:29:a7:77:bc:3e:7a:80:6a:d3:f6:
2a:2f:3d:31:39:cf:8b:b4:ab:ec:25:54:fe:2d:70:e1:15:95:
c2:8e:37:15:64:af:00:e5:f8:19:4d:f0:fc:23:c8:b0:3d:0b:
49:63:e2:00:85:54:a6:81:6e:7d:47:f3:5f:3d:42:98:0d:cd:
92:62:3d:07:7d:a7:fd:92:7e:48:0c:f9:7c:52:f4:e4:e5:3c:
f6:e2:87:ca:bb:ca:2e:56:d6:43:dd:11:a3:33:af:49:41:20:
ee:06:4a:ae:28:46:ac:28:f0:dd:b6:98:a1:80:b1:0e:ec:b5:
41:0d:78:8c:ec:47:a6:0f:31:c0:3f:de:e9:ed:8e:d2:0d:e6:
7b:ab:10:d0:3e:fa:92:e9:2f:0a:11:b8:9c:c0:fe:a0:e1:04:
d3:2e:94:b9:fc:ab:d6:cc:05:40:9d:de:d0:a3:58:06:7c:d7:
cb:85:f3:cd:cb:de:69:fa:a4:db:8e:d0:a6:82:b3:5c:7c:de:
53:a9:01:65:fa:63:10:05:47:94:3a:17:3f:31:9f:d4:89:4e:
89:04:8d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2V7Irfh8lMgN87xa1UEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi
YjhjMjUwHhcNMjYwMzAyMDAwMTE1WhcNMjYwMzAzMDAwMTE1WjAzMTEwLwYDVQQD
EyhmMTkzZWJiMDVjYmI4MmZlMGYxMzYzZDBiM2U0YmRjNDYwNDE0Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfli34WT0klEKy8kdwJL5pqWnT+r
F6dO3pfzzNwmXgmtquFE+h/tza2uAIc2pvaTZoDOZrxH6Q4/4fHZQhd5SiXxwpw8
ltYpQ635tz9k4ngtiOTaDnjCgtXeaMvOxRRNU29wqvYWO5VW5/TO1m8dOcsFLXlk
hioGt4bopvr0Mzdd4QbqOt+d4JYsqlYZ9mZRiSK+7T8fE5Z0UzkNY+dqRy47HdZz
pBZVFXsvpECeTSJIbOn6Lf8ykHv1o4+pUEOnu/ppOYcSW+SDvfuI1TIBOfUM6iH+
0AapMjplysO/GBB2JCzkzM9nY5QRwRgKbAa/MUbGc557+lqbu4G7UQhnTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGT67Bcu4L+DxNj0LPkvcRgQUzqMB8GA1UdIwQY
MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt
Nzk0OTdlZTI1OTg0LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0
LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ99c2IVL
Yz+oMK5U0PJyFGmIqy7bbE7NnGYY59t0hIuwBNno29Nfu0k+jcgpp3e8PnqAatP2
Ki89MTnPi7Sr7CVU/i1w4RWVwo43FWSvAOX4GU3w/CPIsD0LSWPiAIVUpoFufUfz
Xz1CmA3NkmI9B32n/ZJ+SAz5fFL05OU89uKHyrvKLlbWQ90RozOvSUEg7gZKrihG
rCjw3baYoYCxDuy1QQ14jOxHpg8xwD/e6e2O0g3me6sQ0D76kukvChG4nMD+oOEE
0y6Uufyr1swFQJ3e0KNYBnzXy4Xzzcveafqk247QpoKzXHzeU6kBZfpjEAVHlDoX
PzGf1IlOiQSNrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:52 2026 by rpki-client