Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: lHIp5dKJkDqLo1JEesgwOYPusUo4vo26ekfoUFOQV+I=
Subject key identifier: D2:69:A0:67:37:D4:8F:A9:FB:B5:41:2A:74:1A:0A:32:2E:38:2E:C2
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019CABD90B8D245729FAAB1CEEC3DBFD6DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 119A
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: acW+mzqsntUopOZlkCEp1gp+kwTsH3i1T2XEiqJsZpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0b:8d:24:57:29:fa:ab:1c:ee:c3:db:fd:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=d269a06737d48fa9fbb5412a741a0a322e382ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:89:21:73:c2:b8:a3:f9:f2:fc:b1:61:cc:
2c:4b:41:47:23:f6:02:2f:d0:6b:0c:4c:de:62:9c:
1c:86:d9:db:72:e4:53:16:5c:98:e1:13:c4:8d:81:
e9:62:6b:13:74:ce:9e:3a:82:9c:19:32:45:bc:82:
60:60:dc:e4:9d:fe:54:f2:47:5a:5d:c0:12:f9:7a:
dd:ff:00:6a:71:1b:b9:0b:13:22:30:61:78:70:ea:
1b:3a:ec:3f:ff:f9:59:68:44:97:63:6a:9b:45:00:
ec:31:91:89:fb:69:0f:37:d0:36:78:41:ae:78:39:
bf:1d:98:82:ce:94:c4:bf:47:7f:c4:c2:35:9d:9b:
77:92:2b:67:78:7b:ec:b3:c9:be:15:82:13:81:e2:
fe:8f:05:f8:d4:ac:6a:89:39:b3:f7:fd:41:1b:0a:
1f:8b:fb:01:86:39:5f:b6:7f:6c:12:08:f2:fa:59:
fc:47:52:e5:dd:97:18:1e:d1:6c:24:fc:1d:c3:ce:
d9:81:49:e1:49:f1:ee:05:37:80:fc:ef:7d:da:4f:
59:14:4c:99:9b:a9:55:4b:d2:e2:fc:bd:29:26:5b:
f4:d6:a4:35:ec:b2:11:59:cd:70:bb:82:be:ef:37:
87:ed:32:9d:37:8d:a6:61:48:7d:2a:a3:9f:2d:22:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:69:A0:67:37:D4:8F:A9:FB:B5:41:2A:74:1A:0A:32:2E:38:2E:C2
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:37:76:21:69:86:00:01:04:c9:ba:da:0b:23:dd:7e:40:45:
63:53:9f:32:71:17:00:dd:c0:6e:ad:0a:d3:ae:7c:d9:26:e6:
df:9f:f0:55:32:fa:8b:41:94:56:93:a0:a8:33:2a:33:83:d4:
ef:e3:8a:c9:58:78:cf:50:b8:0b:d6:a9:56:c8:4a:6e:c6:12:
67:0a:df:62:92:1e:a7:a6:a4:73:0b:82:45:84:49:dc:ca:29:
b4:cd:a7:59:e5:a7:a0:e1:1d:2d:13:3e:be:2c:db:56:b4:70:
e0:eb:91:d9:3f:8b:da:3e:73:f7:0a:86:90:df:9e:b2:91:75:
9f:fe:ff:b5:a7:3d:f0:65:83:70:02:c5:50:02:d4:67:fe:bd:
43:f7:6b:96:44:aa:16:c4:bb:ff:31:17:78:27:2d:dd:2d:0f:
d1:44:84:5d:92:6d:64:47:a7:e8:68:db:82:1e:8b:9e:f1:45:
a5:6c:6e:b6:2a:23:1f:81:38:fa:96:f1:64:0c:27:20:e8:52:
b1:a9:e2:71:c9:a1:88:4f:4e:fd:a8:bf:64:21:c5:08:f6:a0:
09:3a:99:4d:ea:92:5c:61:4f:b0:ee:b7:d5:dd:07:22:63:68:
dc:5d:4f:84:9f:d2:bf:1a:a3:c5:67:85:b5:4b:a4:8f:e5:41:
6d:1a:e5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2QuNJFcp+qsc7sPb/W35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk
N2EzYjEwHhcNMjYwMzAyMDAwMDU0WhcNMjYwMzAzMDAwMDU0WjAzMTEwLwYDVQQD
EyhkMjY5YTA2NzM3ZDQ4ZmE5ZmJiNTQxMmE3NDFhMGEzMjJlMzgyZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOyJIXPCuKP58vyxYcwsS0FHI/YC
L9BrDEzeYpwchtnbcuRTFlyY4RPEjYHpYmsTdM6eOoKcGTJFvIJgYNzknf5U8kda
XcAS+Xrd/wBqcRu5CxMiMGF4cOobOuw///lZaESXY2qbRQDsMZGJ+2kPN9A2eEGu
eDm/HZiCzpTEv0d/xMI1nZt3kitneHvss8m+FYITgeL+jwX41KxqiTmz9/1BGwof
i/sBhjlftn9sEgjy+ln8R1Ll3ZcYHtFsJPwdw87ZgUnhSfHuBTeA/O992k9ZFEyZ
m6lVS9Li/L0pJlv01qQ17LIRWc1wu4K+7zeH7TKdN42mYUh9KqOfLSL9MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJpoGc31I+p+7VBKnQaCjIuOC7CMB8GA1UdIwQY
MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt
OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz
LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTd2IWmG
AAEEybraCyPdfkBFY1OfMnEXAN3Abq0K06582Sbm35/wVTL6i0GUVpOgqDMqM4PU
7+OKyVh4z1C4C9apVshKbsYSZwrfYpIep6akcwuCRYRJ3MoptM2nWeWnoOEdLRM+
vizbVrRw4OuR2T+L2j5z9wqGkN+espF1n/7/tac98GWDcALFUALUZ/69Q/drlkSq
FsS7/zEXeCct3S0P0USEXZJtZEen6Gjbgh6LnvFFpWxutiojH4E4+pbxZAwnIOhS
saniccmhiE9O/ai/ZCHFCPagCTqZTeqSXGFPsO631d0HImNo3F1PhJ/SvxqjxWeF
tUukj+VBbRrl5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:16 2026 by rpki-client