Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: 5uxX9NEFYLPQoPKEG1cuFm4s4Fp1RHY0C7/Gf4PFNXw=
Subject key identifier: 12:DE:08:3A:DE:58:67:29:14:AB:29:E2:D4:64:CB:03:8B:A9:17:0C
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019CAAC6740DBBCF72FF2AC9A691488CC465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 12FC
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: 1HyURID/ntmavo6p1dBpJpcnL7OCVWw7sLoJHqNNihI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:74:0d:bb:cf:72:ff:2a:c9:a6:91:48:8c:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=12de083ade58672914ab29e2d464cb038ba9170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:5c:32:09:87:67:38:4d:e1:4a:f5:76:58:
e0:a6:90:91:5e:d1:1d:02:0f:23:bc:32:9b:41:a1:
18:ce:20:fd:05:9b:69:e3:d6:c1:af:24:81:2d:e1:
6a:23:4e:37:49:d0:ad:ec:58:57:00:90:7c:e1:a2:
0f:8b:93:2d:06:55:c6:fe:20:2e:f2:97:2d:30:d8:
8a:f8:99:0d:14:7a:b5:41:d1:5f:33:29:52:b1:05:
16:22:99:75:50:ac:5c:c6:f4:4f:b4:d4:88:05:36:
98:fb:6b:68:79:90:01:d6:a0:d7:bd:e5:73:ee:13:
72:bc:2e:8e:f0:3e:7e:bb:57:f9:31:84:d9:95:02:
66:a5:5b:01:ac:74:6b:42:32:bf:4d:f0:ec:50:58:
3c:f8:f7:50:4b:92:14:2d:d6:64:90:b3:87:5e:93:
f5:c6:92:d6:e8:7d:d0:40:0d:ac:2b:8a:39:a0:c8:
f7:a0:90:06:3f:1b:2d:dd:a3:4e:92:ef:b7:1f:df:
c3:10:c5:51:bf:8e:e5:6c:df:af:fb:e3:0a:88:50:
91:0e:4c:fa:38:78:bb:ac:8d:62:f2:98:64:df:f9:
72:b2:4a:df:9b:9e:75:85:9a:94:29:0c:55:69:57:
49:45:6c:bc:a4:fc:07:7a:ea:28:8b:d6:e3:d7:1e:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:08:3A:DE:58:67:29:14:AB:29:E2:D4:64:CB:03:8B:A9:17:0C
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b6:68:18:29:9b:03:2b:94:2b:be:36:e1:27:8c:ae:83:6f:
d1:c0:60:95:c8:b4:9f:a6:57:a1:c3:c2:05:5c:df:87:c7:b0:
a5:a8:94:6a:1f:09:05:33:55:5d:71:82:d4:e9:c6:34:2e:3d:
9b:53:65:72:d6:1e:9e:96:e2:d5:42:2a:04:0c:40:37:90:40:
30:59:ca:fe:4b:f6:62:28:c8:84:45:c1:c5:cb:c6:84:23:1a:
7e:cd:b7:3e:7c:77:b1:75:f0:8e:09:0c:c3:27:12:d4:73:f1:
ed:3c:a5:5d:bc:8f:be:2e:ca:43:cb:e3:b2:57:92:a4:44:7b:
39:dd:47:d5:10:06:06:89:d1:54:5d:2e:c0:b8:6f:2d:6c:bb:
58:1a:ff:65:08:32:49:d7:39:fc:f7:aa:7c:a4:13:93:a6:fd:
e5:1a:42:c2:55:40:e7:cd:b4:1b:ca:ba:2d:91:49:e2:a9:ca:
e7:18:ab:a2:59:90:42:d6:b1:0d:b1:d7:c9:81:c5:c9:4c:db:
f9:32:3e:e5:71:52:15:43:b8:5f:bb:7a:d5:50:bf:aa:12:70:
92:d2:ea:40:90:f1:cd:4f:f5:4b:80:70:29:a5:d0:58:c6:86:
d3:55:84:8b:ee:13:7e:f8:0d:0d:c6:c0:52:47:76:ea:44:92:
71:ee:a3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxnQNu89y/yrJppFIjMRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWE1MzU5MzVhNGJjNzg2YzFkZDc1YjdmMTA4N2YxM2Yz
ZTA4NzQwHhcNMjYwMzAxMTkwMDU4WhcNMjYwMzAyMTkwMDU4WjAzMTEwLwYDVQQD
EygxMmRlMDgzYWRlNTg2NzI5MTRhYjI5ZTJkNDY0Y2IwMzhiYTkxNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc5cMgmHZzhN4Ur1dljgppCRXtEd
Ag8jvDKbQaEYziD9BZtp49bBrySBLeFqI043SdCt7FhXAJB84aIPi5MtBlXG/iAu
8pctMNiK+JkNFHq1QdFfMylSsQUWIpl1UKxcxvRPtNSIBTaY+2toeZAB1qDXveVz
7hNyvC6O8D5+u1f5MYTZlQJmpVsBrHRrQjK/TfDsUFg8+PdQS5IULdZkkLOHXpP1
xpLW6H3QQA2sK4o5oMj3oJAGPxst3aNOku+3H9/DEMVRv47lbN+v++MKiFCRDkz6
OHi7rI1i8phk3/lyskrfm551hZqUKQxVaVdJRWy8pPwHeuooi9bj1x4IOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLeCDreWGcpFKsp4tRkywOLqRcMMB8GA1UdIwQY
MBaAFM1aU1k1pLx4bB3XW38Qh/E/Pgh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUt
MDVjMTNmODkwYjljLzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUtMDVjMTNmODkwYjlj
LzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLZoGCmb
AyuUK7424SeMroNv0cBglci0n6ZXocPCBVzfh8ewpaiUah8JBTNVXXGC1OnGNC49
m1NlctYenpbi1UIqBAxAN5BAMFnK/kv2YijIhEXBxcvGhCMafs23Pnx3sXXwjgkM
wycS1HPx7TylXbyPvi7KQ8vjsleSpER7Od1H1RAGBonRVF0uwLhvLWy7WBr/ZQgy
Sdc5/PeqfKQTk6b95RpCwlVA5820G8q6LZFJ4qnK5xirolmQQtaxDbHXyYHFyUzb
+TI+5XFSFUO4X7t61VC/qhJwktLqQJDxzU/1S4BwKaXQWMaG01WEi+4TfvgNDcbA
Ukd26kSSce6jvA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:53 2026 by rpki-client