Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: SSOGuD/Zy9IfVSqoxRofsHTmaqqeYWqHIBSc+fDpSYc=
Subject key identifier: 8F:97:8E:ED:E3:15:AA:32:46:85:03:9A:3F:16:7B:4A:63:5D:EE:A2
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 019CADC857DF4ADA53F3A7DB3D3AF715515B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 1800
Signing time: Mon 02 Mar 2026 09:01:53 +0000
Manifest this update: Mon 02 Mar 2026 09:01:53 +0000
Manifest next update: Tue 03 Mar 2026 09:01:53 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: B0XC8b3KjlKz4EIZ4kK4c9qkJgAkT8fLIWqLE432Fdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:57:df:4a:da:53:f3:a7:db:3d:3a:f7:15:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Mar 2 09:01:53 2026 GMT
Not After : Mar 3 09:01:53 2026 GMT
Subject: CN=8f978eede315aa324685039a3f167b4a635deea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:56:fd:f1:91:0d:a0:19:fc:7a:b5:09:4c:
33:7a:ab:c6:8f:3e:85:74:c6:1b:02:1c:99:c3:6c:
a5:a5:fc:08:56:e5:74:51:d2:17:3b:09:16:42:4b:
67:fc:68:4b:76:0e:08:cb:26:b4:72:83:ea:3e:8b:
b3:6a:c6:08:6e:34:c5:d5:75:f8:fc:1e:04:73:34:
b6:44:38:39:c0:85:d7:a5:aa:90:2f:30:09:f1:37:
68:1c:a8:cd:0c:79:5b:c6:8f:ce:78:69:11:ab:97:
71:c5:25:31:de:35:68:67:20:32:4c:89:79:ce:9a:
d9:d5:87:8a:52:25:32:69:6b:0d:11:b9:6c:cf:a9:
40:51:fc:64:e4:3b:61:af:09:ee:d9:9d:4e:a1:f5:
48:2b:c7:de:c0:58:93:cf:6a:2c:e5:57:69:62:a9:
67:c2:f0:72:c2:a5:21:f5:79:4c:36:80:18:90:94:
63:70:23:87:da:ae:a1:23:d5:d1:67:69:2a:b7:10:
cf:82:85:ee:51:ba:d5:66:1c:0a:d7:ae:6c:77:19:
79:d6:07:53:6a:f5:f5:40:79:87:02:ac:45:72:fa:
51:ce:b2:dd:79:bd:a3:84:ce:0d:99:df:13:9c:c8:
97:77:25:98:32:a2:84:ce:59:f7:0e:57:ee:9e:3e:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:8E:ED:E3:15:AA:32:46:85:03:9A:3F:16:7B:4A:63:5D:EE:A2
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6c:dc:f9:2d:6d:47:28:f7:cd:1d:1e:a1:45:f7:29:e5:99:
f7:39:7e:5f:14:e6:ee:33:6b:7b:11:b0:bf:eb:0d:12:70:2e:
44:f1:87:3f:8b:12:a6:39:c9:82:f8:13:d1:61:93:b6:64:23:
9d:ed:1b:cc:aa:da:44:99:0c:32:6b:01:5f:91:4d:fe:7b:5f:
49:d3:64:db:b5:b6:ea:38:23:39:cc:30:b5:a9:d5:96:6e:ca:
e8:57:9f:05:8a:44:66:6d:4a:cc:93:9b:4d:4f:40:bb:b5:6e:
6e:a4:e0:48:26:08:d0:23:3d:d2:5f:5c:9d:40:68:85:d4:41:
a2:4a:33:fd:3f:0d:91:a4:12:3a:60:bb:9e:26:0e:66:ae:ef:
2c:ed:8b:75:e8:16:23:ab:4c:1e:d3:ec:de:33:d4:ed:86:13:
54:42:65:b0:d5:77:4d:e1:3a:af:52:26:e1:d0:cc:98:19:93:
73:af:a5:ad:ba:c6:a3:14:8c:56:da:97:f2:95:a9:2d:b2:7c:
41:31:4c:64:d2:61:20:97:c4:08:14:95:44:9c:36:7f:4a:af:
1f:38:ef:53:b1:ae:6b:3a:20:88:29:6f:dc:f5:4b:38:b2:cf:
96:0a:0d:47:a8:5a:99:50:cd:32:75:83:a5:a3:e8:ee:1e:d9:
63:b6:a4:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyFffStpT86fbPTr3FVFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzdmOTU2YTRjZTk0ZWIxZWM2NGU3NjQ3YjQzY2RiY2I4
ZmM0NDkwHhcNMjYwMzAyMDkwMTUzWhcNMjYwMzAzMDkwMTUzWjAzMTEwLwYDVQQD
Eyg4Zjk3OGVlZGUzMTVhYTMyNDY4NTAzOWEzZjE2N2I0YTYzNWRlZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq5W/fGRDaAZ/Hq1CUwzeqvGjz6F
dMYbAhyZw2ylpfwIVuV0UdIXOwkWQktn/GhLdg4Iyya0coPqPouzasYIbjTF1XX4
/B4EczS2RDg5wIXXpaqQLzAJ8TdoHKjNDHlbxo/OeGkRq5dxxSUx3jVoZyAyTIl5
zprZ1YeKUiUyaWsNEblsz6lAUfxk5Dthrwnu2Z1OofVIK8fewFiTz2os5VdpYqln
wvBywqUh9XlMNoAYkJRjcCOH2q6hI9XRZ2kqtxDPgoXuUbrVZhwK165sdxl51gdT
avX1QHmHAqxFcvpRzrLdeb2jhM4Nmd8TnMiXdyWYMqKEzln3Dlfunj7QswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+Xju3jFaoyRoUDmj8We0pjXe6iMB8GA1UdIwQY
MBaAFM03+VakzpTrHsZOdke0PNvLj8RJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yOTQzYzEtMzZiNi00MzAzLWJjMjct
YmJlMTJiZDM4ZTA0LzEvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yOTQzYzEtMzZiNi00MzAzLWJjMjctYmJlMTJiZDM4ZTA0
LzEvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWzc+S1t
Ryj3zR0eoUX3KeWZ9zl+XxTm7jNrexGwv+sNEnAuRPGHP4sSpjnJgvgT0WGTtmQj
ne0bzKraRJkMMmsBX5FN/ntfSdNk27W26jgjOcwwtanVlm7K6FefBYpEZm1KzJOb
TU9Au7VubqTgSCYI0CM90l9cnUBohdRBokoz/T8NkaQSOmC7niYOZq7vLO2LdegW
I6tMHtPs3jPU7YYTVEJlsNV3TeE6r1Im4dDMmBmTc6+lrbrGoxSMVtqX8pWpLbJ8
QTFMZNJhIJfECBSVRJw2f0qvHzjvU7GuazogiClv3PVLOLLPlgoNR6hamVDNMnWD
paPo7h7ZY7akBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:52 2026 by rpki-client