Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: lQ8T6OHGulydpToSFBL/P1HLgAprpaXk6yTHCrldEZ8=
Subject key identifier: 21:E1:AC:5E:81:38:35:D3:E3:AD:AC:FB:8E:D1:ED:E9:06:44:AD:41
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 019CABA25848FA295DBE79FFBBB770F54F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: fyGNW3zA5rqMSnYToaLE7+JE+9JNK+aG7Ywn4QhPjeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:58:48:fa:29:5d:be:79:ff:bb:b7:70:f5:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=21e1ac5e813835d3e3adacfb8ed1ede90644ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:f6:51:2c:ec:c4:3c:f2:f4:9c:b0:2e:94:
1f:e7:6b:6e:07:63:0e:e8:78:59:32:42:b4:45:79:
4e:96:d7:0f:32:98:93:e7:f9:8e:9d:c2:28:c3:b5:
3d:a9:1c:5a:21:ef:e1:16:bf:f6:f0:9d:43:5a:eb:
f5:38:61:b9:99:cb:37:1c:bb:ae:69:a1:4e:78:36:
cf:80:75:39:b9:aa:9d:23:b9:51:c6:43:ae:0e:af:
02:11:73:ec:f8:10:02:9f:d3:de:d1:48:3e:49:4d:
ca:1d:de:15:44:a4:8b:79:85:f0:77:ca:d7:e3:a2:
78:8a:ad:9c:40:61:f8:3d:aa:45:eb:a7:e5:7d:91:
3b:be:d9:b6:0a:ff:b4:77:cc:50:0b:5e:71:5f:72:
1d:82:a0:f2:46:f2:c3:98:37:10:be:b6:46:bf:19:
81:09:7d:94:fa:e0:24:f8:20:ee:0c:4a:30:d8:0b:
c6:d2:64:cd:ad:25:df:b0:92:35:af:f2:61:e1:77:
0e:60:b4:9b:64:ed:ff:6b:cb:fa:a4:4d:fb:c6:a9:
05:c1:f2:7f:a9:74:34:85:bc:15:9e:2f:0f:b2:97:
19:cc:81:26:d5:ef:38:51:41:4f:59:3e:ed:d7:ba:
b4:e5:62:61:52:ba:da:f8:34:12:1f:9d:e3:38:9f:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:AC:5E:81:38:35:D3:E3:AD:AC:FB:8E:D1:ED:E9:06:44:AD:41
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:43:16:23:1f:bc:cb:e3:fd:22:b9:dd:c8:85:33:ca:e3:
5a:65:bd:ed:11:6c:38:87:90:2e:2f:a4:ca:d0:db:79:c8:39:
c4:df:45:49:b7:0c:c8:29:21:d7:6d:71:57:13:5c:17:aa:fb:
a5:48:a7:33:42:79:25:f1:53:5c:07:49:ad:62:78:1c:c9:da:
9d:b5:e6:85:d0:6c:be:9f:32:34:9c:79:69:1e:bb:e4:09:ad:
7c:70:6c:b2:f3:12:e8:0f:9d:8b:be:c9:da:f9:2c:61:cb:a2:
22:af:b6:45:59:35:08:a4:ce:63:63:f3:fd:88:85:bd:a3:6d:
0f:23:b3:98:7a:0b:69:81:ea:2d:9f:e6:23:c2:61:4e:ac:54:
1f:a1:df:0b:4b:7b:92:27:fd:a4:26:ea:1c:7b:6b:02:39:9c:
50:7b:b6:97:e9:84:fd:2b:ea:f6:e8:2f:eb:c9:fe:98:e9:b2:
11:fc:6a:51:08:cd:83:5d:23:89:f1:94:01:cb:27:1e:d2:de:
06:b1:a9:fd:0c:da:9e:fc:98:3f:8d:03:1d:e6:4a:23:14:fb:
33:87:66:9d:86:ea:4f:52:3d:ff:d7:b9:f3:e1:5e:04:d9:f4:
4c:c8:e1:e7:63:27:4b:c1:1e:12:04:e0:13:37:e0:7a:8e:59:
4d:53:d9:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolhI+ildvnn/u7dw9U9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw
MTI4MGUwHhcNMjYwMzAxMjMwMTA5WhcNMjYwMzAyMjMwMTA5WjAzMTEwLwYDVQQD
EygyMWUxYWM1ZTgxMzgzNWQzZTNhZGFjZmI4ZWQxZWRlOTA2NDRhZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gz2USzsxDzy9JywLpQf52tuB2MO
6HhZMkK0RXlOltcPMpiT5/mOncIow7U9qRxaIe/hFr/28J1DWuv1OGG5mcs3HLuu
aaFOeDbPgHU5uaqdI7lRxkOuDq8CEXPs+BACn9Pe0Ug+SU3KHd4VRKSLeYXwd8rX
46J4iq2cQGH4PapF66flfZE7vtm2Cv+0d8xQC15xX3IdgqDyRvLDmDcQvrZGvxmB
CX2U+uAk+CDuDEow2AvG0mTNrSXfsJI1r/Jh4XcOYLSbZO3/a8v6pE37xqkFwfJ/
qXQ0hbwVni8PspcZzIEm1e84UUFPWT7t17q05WJhUrra+DQSH53jOJ83WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHhrF6BODXT462s+47R7ekGRK1BMB8GA1UdIwQY
MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt
YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2
LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghtDFiMf
vMvj/SK53ciFM8rjWmW97RFsOIeQLi+kytDbecg5xN9FSbcMyCkh121xVxNcF6r7
pUinM0J5JfFTXAdJrWJ4HMnanbXmhdBsvp8yNJx5aR675AmtfHBssvMS6A+di77J
2vksYcuiIq+2RVk1CKTOY2Pz/YiFvaNtDyOzmHoLaYHqLZ/mI8JhTqxUH6HfC0t7
kif9pCbqHHtrAjmcUHu2l+mE/Svq9ugv68n+mOmyEfxqUQjNg10jifGUAcsnHtLe
BrGp/QzanvyYP40DHeZKIxT7M4dmnYbqT1I9/9e58+FeBNn0TMjh52MnS8EeEgTg
Ezfgeo5ZTVPZrQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:48:52 2026 by rpki-client