
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: llj0iPYwGHOvDVTwoZRrsNOaikMhn8dWcSCcok19+7w=
Subject key identifier: 86:56:B3:14:C5:C2:46:BF:F9:2A:CE:70:BB:46:67:04:63:BA:75:F7
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 019CAB349547FA608D96CB7F2F16F2E7B556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: 8HOqsxKCS56C5l2TYH5vJenn9Uc.roa (hash: r5GuTgTO8u43SvuFo8e3I9Qx7FDg9zvojI1lw4JUs+Y=)
2: EuTvpzj_rBg4p9cpcF0sTGEJSQg.roa (hash: 2ycyJUxPv2cATlhlJrwI3vU1U2HjLZsDnb7MjY9bKXM=)
3: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: VyN72+NU9/YNLwUMIoOTYF08vvtK0/8wkKJQ0hL5bVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:95:47:fa:60:8d:96:cb:7f:2f:16:f2:e7:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=8656b314c5c246bff92ace70bb46670463ba75f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:6a:6f:ce:a8:f7:01:c0:79:6c:36:c4:3c:
07:1c:75:64:81:47:7a:ce:de:df:a9:24:e1:7d:33:
f5:b6:a9:22:d8:39:d7:36:ec:65:43:65:9d:12:76:
3e:f7:1a:fa:71:5e:15:89:3e:c8:8b:eb:c8:63:6c:
bb:9c:63:14:b8:74:29:10:5e:4a:18:ae:9e:ee:f3:
dc:be:5d:1e:ed:75:88:86:c9:ab:b2:10:a5:e9:f3:
c9:e1:de:98:5f:85:b0:3b:3e:99:e9:ea:a6:3d:74:
38:67:cb:8b:45:4c:50:89:57:0f:4d:c1:3c:2c:d0:
56:67:6e:fb:f6:40:3a:2c:ed:9e:67:94:45:63:5b:
3f:49:7a:20:25:c8:76:a7:0d:9e:39:fc:be:32:2e:
e7:de:82:72:3f:bc:f5:76:d6:ec:da:3d:b3:dc:a6:
03:f8:cb:2b:01:35:97:ae:7e:66:a8:4d:ec:70:35:
26:a6:b8:f1:a5:8d:3c:53:b8:e7:5d:e5:bf:a6:23:
b7:1c:d8:ca:a3:e2:9f:20:82:00:3a:36:63:fd:cd:
a0:4b:dd:3a:7a:b2:1d:5b:b8:79:89:70:47:e1:e3:
3f:c8:8b:84:f9:2c:c6:3a:9e:55:fa:49:f0:c1:15:
8f:e0:30:21:89:af:bb:15:be:a2:66:5a:11:bd:e8:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:56:B3:14:C5:C2:46:BF:F9:2A:CE:70:BB:46:67:04:63:BA:75:F7
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:d0:aa:a2:79:de:60:99:30:38:aa:ac:77:a7:a7:1b:3a:
28:83:96:bc:1b:2f:5c:56:82:84:f9:f6:39:16:e8:e4:3d:81:
87:d6:8a:f0:45:08:c7:5e:d6:25:a2:ff:b3:1c:14:c7:de:aa:
bc:9e:1a:69:f5:ef:e4:a4:6a:74:31:74:f7:8f:47:95:32:12:
11:46:61:af:40:ce:21:1a:bb:77:23:a2:f7:53:14:11:ae:33:
65:3e:72:3e:54:06:4f:c4:9a:bb:fc:3f:5e:bb:a0:92:80:17:
55:6b:4f:ea:1c:e2:a5:86:dd:6c:85:ee:b5:77:7f:3f:aa:a4:
73:65:98:41:4a:1d:fb:fa:3a:36:58:e9:b8:06:18:69:21:4d:
8a:c6:e4:2f:d5:67:34:56:34:e8:3b:a5:0b:d1:5a:cf:35:d8:
a8:e9:b6:19:6a:90:1b:9a:ac:9b:3a:83:fb:a9:0c:74:53:bc:
34:f8:28:f2:89:5e:04:5b:a1:20:4b:c2:eb:51:cb:e1:fd:5e:
48:67:06:bc:9e:be:0c:cc:1c:c5:fb:ab:13:0b:fd:35:8f:90:
b4:c2:25:0f:45:8b:54:74:4d:fa:74:ea:ef:a9:83:44:9f:40:
bc:54:33:27:6a:b3:b3:7a:05:0f:16:39:75:8d:c5:2d:3a:de:
73:77:51:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJVH+mCNlst/Lxby57VWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOTIxYjZmZjFhYzQ0OWJhM2U3Zjg5MmNmMDgzMmQxY2Vi
N2Q0NjQwHhcNMjYwMzAxMjEwMTE1WhcNMjYwMzAyMjEwMTE1WjAzMTEwLwYDVQQD
Eyg4NjU2YjMxNGM1YzI0NmJmZjkyYWNlNzBiYjQ2NjcwNDYzYmE3NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aRqb86o9wHAeWw2xDwHHHVkgUd6
zt7fqSThfTP1tqki2DnXNuxlQ2WdEnY+9xr6cV4ViT7Ii+vIY2y7nGMUuHQpEF5K
GK6e7vPcvl0e7XWIhsmrshCl6fPJ4d6YX4WwOz6Z6eqmPXQ4Z8uLRUxQiVcPTcE8
LNBWZ2779kA6LO2eZ5RFY1s/SXogJch2pw2eOfy+Mi7n3oJyP7z1dtbs2j2z3KYD
+MsrATWXrn5mqE3scDUmprjxpY08U7jnXeW/piO3HNjKo+KfIIIAOjZj/c2gS906
erIdW7h5iXBH4eM/yIuE+SzGOp5V+knwwRWP4DAhia+7Fb6iZloRvejqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZWsxTFwka/+SrOcLtGZwRjunX3MB8GA1UdIwQY
MBaAFDGSG2/xrESbo+f4ks8IMtHOt9RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMt
OWQ3YTg4NzJiNDU0LzEvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMtOWQ3YTg4NzJiNDU0
LzEvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErvQqqJ5
3mCZMDiqrHenpxs6KIOWvBsvXFaChPn2ORbo5D2Bh9aK8EUIx17WJaL/sxwUx96q
vJ4aafXv5KRqdDF0949HlTISEUZhr0DOIRq7dyOi91MUEa4zZT5yPlQGT8Sau/w/
XrugkoAXVWtP6hzipYbdbIXutXd/P6qkc2WYQUod+/o6NljpuAYYaSFNisbkL9Vn
NFY06DulC9FazzXYqOm2GWqQG5qsmzqD+6kMdFO8NPgo8oleBFuhIEvC61HL4f1e
SGcGvJ6+DMwcxfurEwv9NY+QtMIlD0WLVHRN+nTq76mDRJ9AvFQzJ2qzs3oFDxY5
dY3FLTrec3dRSA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:05 2026 by rpki-client