Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: VV/Z8HPhnWrlBslxI8uy1XT3ElbgaZ4hNXMb2Jk0T6g=
Subject key identifier: D7:77:50:51:8F:A0:0D:16:14:BA:ED:EE:BC:5C:CF:23:61:95:B9:BF
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019CAA21ADFBF6375016FAB0B2C82B7D4412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 13C9
Signing time: Sun 01 Mar 2026 16:00:59 +0000
Manifest this update: Sun 01 Mar 2026 16:00:59 +0000
Manifest next update: Mon 02 Mar 2026 16:00:59 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: JztwQNWJrtydgMKD8YviQOup8I8PKPtbv17ddVPTDV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ad:fb:f6:37:50:16:fa:b0:b2:c8:2b:7d:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Mar 1 16:00:59 2026 GMT
Not After : Mar 2 16:00:59 2026 GMT
Subject: CN=d77750518fa00d1614baedeebc5ccf236195b9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:f8:b9:85:4a:8e:e5:be:48:5b:f7:8e:79:
18:5e:72:ff:c3:f6:08:82:95:26:ad:6b:66:8f:26:
6f:5c:55:a0:1c:74:a6:36:85:63:c5:84:05:2e:60:
33:a6:c2:87:97:23:97:61:2c:80:f5:d3:5d:4c:10:
21:80:44:3e:36:f2:8f:df:97:76:59:fd:12:ad:cc:
8a:fe:09:c0:5a:58:ec:b7:93:da:c5:71:23:6b:fe:
04:45:c1:f2:37:09:2d:5f:4a:7d:44:d3:92:62:f2:
79:e3:dc:fb:16:d6:b2:44:8b:5a:f0:db:45:e5:96:
3c:1a:5e:b9:6b:db:9b:20:eb:ba:0b:21:cf:3e:5a:
78:24:97:fd:ea:d7:f4:6b:68:af:44:ba:6b:cb:89:
cb:5f:b3:f4:19:f6:40:01:9f:ee:0a:e3:83:62:de:
23:22:f5:50:02:73:d0:62:6d:93:7d:b2:75:32:e2:
4f:a9:8e:90:cb:19:ea:ec:7e:46:9b:19:dc:d1:24:
ec:7f:44:9a:de:7d:8f:44:dc:08:99:e9:f9:37:5e:
54:2b:0f:6a:bc:ed:88:42:a7:fa:7c:dc:48:f6:98:
9c:66:f0:23:86:32:a5:f1:ac:ca:cb:4b:f8:00:50:
15:e7:42:e7:2d:78:a6:e4:db:6f:26:f9:f4:93:4d:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:50:51:8F:A0:0D:16:14:BA:ED:EE:BC:5C:CF:23:61:95:B9:BF
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:de:6d:41:4d:be:27:9d:5c:ca:1b:d3:32:1c:80:19:50:
55:a2:37:68:4b:72:c2:29:05:46:1d:0f:a5:5a:76:b7:b2:65:
36:dc:d3:6e:e0:1d:77:39:06:60:a9:fe:4f:c3:c4:ef:7b:09:
3c:8a:e1:6d:c3:3e:05:98:39:8c:af:fa:a4:3a:96:c7:d0:15:
cf:45:59:9a:fc:97:1e:90:09:ab:3a:c7:3d:c0:5a:4b:21:b3:
50:60:68:96:21:29:05:52:50:85:a5:a8:7e:70:0a:9f:db:fb:
f5:39:12:8a:bb:77:10:22:6e:fa:f2:ed:27:2d:07:d0:c2:1f:
44:c2:18:3a:40:3e:e1:00:2f:f5:ec:05:8f:df:f4:9d:51:8f:
e9:c6:62:39:e1:4e:8a:93:20:b2:d7:4c:4c:11:dc:c7:cc:da:
37:9d:31:b6:df:84:93:67:88:71:b3:e3:11:c4:a7:16:85:4e:
3e:2f:4b:56:54:70:d2:e1:d1:9d:a5:35:ad:ac:cc:6d:d8:a9:
ea:37:26:80:af:fb:bf:34:1c:07:fb:45:9b:ba:81:f8:e2:f7:
e9:cf:9f:68:09:56:d3:26:b4:7a:c9:16:ee:fd:b1:36:21:76:
ad:04:c5:94:81:b4:de:e0:8d:71:13:66:de:34:94:40:13:1f:
c2:3f:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:26 2026 by rpki-client