Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: TEHnJjFYf7Glbyjey1o4q3WmPSj3AQ1RDqhg22x9J7g=
Subject key identifier: D9:F3:AD:FF:F3:DF:67:02:27:13:D3:E8:09:99:06:9A:9F:38:D0:65
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 019CAB6BB12CA4B0A038F3BB3ED94DCF227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0DF9
Signing time: Sun 01 Mar 2026 22:01:27 +0000
Manifest this update: Sun 01 Mar 2026 22:01:27 +0000
Manifest next update: Mon 02 Mar 2026 22:01:27 +0000
Files and hashes: 1: fskjKgPj5L9YOuWuL2aoh4G8vqU.roa (hash: 31yKilxbLobmkxS1Ne8oNBBHC8xU0xlQdNH3udg5Os4=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: FzcXbvbHxqlIzeW7hpmY0si1IEby0Op1F5yvb2kCLxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b1:2c:a4:b0:a0:38:f3:bb:3e:d9:4d:cf:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Mar 1 22:01:27 2026 GMT
Not After : Mar 2 22:01:27 2026 GMT
Subject: CN=d9f3adfff3df67022713d3e80999069a9f38d065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:07:f3:84:6a:01:aa:0a:df:ad:f9:38:9d:
89:31:5e:9d:60:f0:a5:45:92:88:02:ce:8e:e1:de:
2c:a0:9d:78:b5:70:87:2a:0b:10:38:44:8f:ab:7b:
aa:74:7b:39:2c:5b:74:0c:03:ab:76:36:8a:8c:da:
3c:88:b7:00:59:37:46:bb:25:f3:52:5a:91:9a:a3:
4c:69:a7:d8:e1:f2:af:0e:35:6d:d8:c3:34:25:6d:
8c:2e:2e:ec:c4:89:b2:a8:26:df:48:77:d6:0c:a8:
d6:db:fe:b2:e6:80:08:ee:63:82:75:d2:bd:b3:e9:
10:41:9c:e8:54:41:55:14:bc:7b:c8:b1:50:04:54:
bf:de:3e:23:36:a9:f3:ea:2b:ba:a8:43:29:67:3f:
05:c8:69:ea:55:ad:55:53:f6:ff:ec:c1:fc:da:82:
9f:7d:d1:11:45:a3:37:68:06:85:67:a2:03:d8:8a:
e2:f8:6a:89:84:f2:48:6e:61:b4:46:98:e0:0a:7f:
be:f4:c1:76:e9:72:a0:bc:1c:90:1f:26:c8:e6:a6:
3c:73:61:0b:6c:0c:76:6a:31:7e:47:5f:9a:d4:1e:
82:b2:00:39:ca:06:40:77:cc:f1:e1:98:f6:56:69:
2a:e8:d1:9a:e8:c7:84:95:fa:6b:a3:b0:b8:31:f8:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:AD:FF:F3:DF:67:02:27:13:D3:E8:09:99:06:9A:9F:38:D0:65
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:e4:ce:e9:46:54:9e:e2:06:09:12:6e:56:7c:ea:bc:2d:
ac:ca:e1:11:1e:d8:1a:f3:04:a7:5c:87:a2:9a:0d:fb:c7:20:
7b:4f:dc:42:1b:3c:f8:5b:ea:81:e9:f8:bf:44:05:88:c4:a0:
48:00:01:b7:53:f1:df:06:5f:f7:37:39:93:97:0b:ee:5c:c5:
6c:f2:ed:78:92:81:f8:ad:3a:16:1e:cc:8a:59:9c:2d:51:04:
6e:f5:4b:0a:6d:c4:0b:d8:8a:46:6e:fc:92:c1:43:f4:ea:05:
ef:60:e9:53:a2:cc:b0:36:c7:94:ca:40:80:07:5d:7a:04:d6:
22:f0:67:a9:03:c7:1f:3b:a7:7c:ac:55:29:1f:d2:cd:5d:4b:
1f:95:a5:51:38:51:df:8b:68:b1:c4:99:27:54:7f:5b:3a:bc:
7d:99:81:9e:4a:f1:d2:eb:14:a4:12:d0:c3:88:2a:31:7a:44:
65:4f:aa:b4:c2:0d:68:24:6b:81:1a:eb:8f:8e:e2:e0:74:7c:
4e:0f:51:2d:c9:29:98:95:d3:2d:d9:e3:9c:23:9c:9d:10:4d:
c7:64:23:7a:f5:89:42:a5:3c:ad:98:0c:c2:d0:af:d7:94:ad:
c4:0b:ca:cc:9c:de:3c:9b:6d:5c:94:97:a2:6f:32:98:92:c3:
46:69:0e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra7EspLCgOPO7PtlNzyJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOGU4ZWJkODBmY2Y4ODQ5NzVlNDJiNDZiZjRlNTQ4Nzkz
ZjI5Y2IwHhcNMjYwMzAxMjIwMTI3WhcNMjYwMzAyMjIwMTI3WjAzMTEwLwYDVQQD
EyhkOWYzYWRmZmYzZGY2NzAyMjcxM2QzZTgwOTk5MDY5YTlmMzhkMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q4H84RqAaoK3635OJ2JMV6dYPCl
RZKIAs6O4d4soJ14tXCHKgsQOESPq3uqdHs5LFt0DAOrdjaKjNo8iLcAWTdGuyXz
UlqRmqNMaafY4fKvDjVt2MM0JW2MLi7sxImyqCbfSHfWDKjW2/6y5oAI7mOCddK9
s+kQQZzoVEFVFLx7yLFQBFS/3j4jNqnz6iu6qEMpZz8FyGnqVa1VU/b/7MH82oKf
fdERRaM3aAaFZ6ID2Iri+GqJhPJIbmG0RpjgCn++9MF26XKgvByQHybI5qY8c2EL
bAx2ajF+R1+a1B6CsgA5ygZAd8zx4Zj2Vmkq6NGa6MeElfpro7C4MfjnSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnzrf/z32cCJxPT6AmZBpqfONBlMB8GA1UdIwQY
MBaAFM2Ojr2A/PiEl15CtGv05Uh5PynLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgt
Mjg2YTVlZTZlMDQzLzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgtMjg2YTVlZTZlMDQz
LzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9fkzulG
VJ7iBgkSblZ86rwtrMrhER7YGvMEp1yHopoN+8cge0/cQhs8+Fvqgen4v0QFiMSg
SAABt1Px3wZf9zc5k5cL7lzFbPLteJKB+K06Fh7MilmcLVEEbvVLCm3EC9iKRm78
ksFD9OoF72DpU6LMsDbHlMpAgAddegTWIvBnqQPHHzunfKxVKR/SzV1LH5WlUThR
34toscSZJ1R/Wzq8fZmBnkrx0usUpBLQw4gqMXpEZU+qtMINaCRrgRrrj47i4HR8
Tg9RLckpmJXTLdnjnCOcnRBNx2QjevWJQqU8rZgMwtCv15StxAvKzJzePJttXJSX
om8ymJLDRmkOFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:47 2026 by rpki-client