Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: ASvedWFgt/PO2Z7RTZsV00SBrbUu1xvS6y5hs+56AkA=
Subject key identifier: AE:B1:94:D4:89:5E:45:14:1A:24:08:E4:60:CA:01:84:FC:FE:B9:AA
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019CACB52E08A4E6F204B8AAC9518049B99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 10DD
Signing time: Mon 02 Mar 2026 04:01:20 +0000
Manifest this update: Mon 02 Mar 2026 04:01:20 +0000
Manifest next update: Tue 03 Mar 2026 04:01:20 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: I2l8nWvuHInh9639UF7HWD4boRuYL4JTeRqf4Saf0QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:2e:08:a4:e6:f2:04:b8:aa:c9:51:80:49:b9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Mar 2 04:01:20 2026 GMT
Not After : Mar 3 04:01:20 2026 GMT
Subject: CN=aeb194d4895e45141a2408e460ca0184fcfeb9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:45:51:f1:5c:54:f2:36:08:ea:de:54:bf:
54:8b:3a:04:96:38:ee:87:e2:4f:e0:e2:95:03:af:
e4:ef:d1:4d:ea:81:0d:34:fe:b2:dd:41:23:e5:ac:
15:4e:13:b8:2d:17:36:4f:60:b0:81:63:75:fd:35:
f6:48:b4:ac:e8:0c:1b:72:2b:18:e7:a8:b3:ee:c1:
fe:81:5a:3c:62:75:75:c3:41:64:cd:39:72:7a:2f:
c4:62:37:dd:44:83:7d:be:fa:df:40:70:6b:a1:87:
a2:1d:3e:cb:67:58:51:65:02:66:17:5e:92:9a:58:
e9:9a:54:97:64:a0:5e:d2:86:35:25:3c:ed:35:77:
18:bb:87:b3:3e:65:2a:66:20:c2:7c:9f:4a:fe:01:
17:10:4b:0e:52:96:34:3d:36:49:bf:8b:de:37:a6:
5c:6a:24:ec:20:ce:69:34:4b:88:b3:c6:7c:30:e4:
a0:77:e1:83:45:ff:70:67:05:ad:92:d5:b4:ee:38:
55:43:1d:03:14:99:1a:71:82:29:a0:c1:c5:d9:37:
96:d0:08:8f:7a:07:57:fa:6d:93:e1:86:cb:fa:68:
64:05:c7:7b:2f:1d:e7:7b:6f:12:21:81:96:44:46:
44:91:7d:a6:56:3f:e4:2d:02:3b:65:37:4b:76:c4:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:94:D4:89:5E:45:14:1A:24:08:E4:60:CA:01:84:FC:FE:B9:AA
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e7:40:21:e4:5b:4d:8e:a5:41:98:8f:7d:af:45:7b:a1:58:
af:fa:f0:a2:8b:29:6c:9e:d6:ff:b6:5b:e3:a6:f2:10:66:bc:
7c:a8:e5:cb:4d:6c:93:dd:95:c6:6f:13:8b:ab:59:53:8e:a7:
0c:b8:63:82:d9:a4:52:b9:a0:d5:19:55:12:c6:5f:70:97:b6:
76:bd:4c:18:4e:d5:84:d3:06:8a:0a:c1:e9:7f:72:f9:cf:3e:
20:31:ff:4d:42:b8:6b:4c:1b:f0:c8:1f:6a:a4:43:91:4f:3e:
64:a6:d9:9a:d4:1a:6b:d7:fa:d0:54:36:67:6b:1c:04:57:df:
96:cd:63:b0:b6:e0:e0:66:71:78:c3:cf:5d:df:8a:8c:a6:95:
49:d2:1b:69:8e:e6:8e:e4:2e:6a:5e:fe:ea:96:09:d5:f9:7c:
f5:2b:6c:5c:b5:35:7d:6f:29:b0:77:4a:05:f6:3f:f5:a2:63:
50:76:26:83:2a:86:20:43:66:13:e7:47:a2:70:29:9e:d1:e0:
8f:b1:f9:35:44:4e:ae:70:a7:85:3a:bc:3c:08:66:47:ab:c5:
3d:16:dd:be:45:ae:dc:f4:cb:55:eb:66:cb:66:0c:c5:73:3d:
ae:2d:44:33:e1:69:61:3c:33:00:ad:f7:a6:65:9f:07:0c:32:
31:20:4b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystS4IpObyBLiqyVGASbmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjYwMzAyMDQwMTIwWhcNMjYwMzAzMDQwMTIwWjAzMTEwLwYDVQQD
EyhhZWIxOTRkNDg5NWU0NTE0MWEyNDA4ZTQ2MGNhMDE4NGZjZmViOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTpFUfFcVPI2COreVL9UizoEljju
h+JP4OKVA6/k79FN6oENNP6y3UEj5awVThO4LRc2T2CwgWN1/TX2SLSs6AwbcisY
56iz7sH+gVo8YnV1w0FkzTlyei/EYjfdRIN9vvrfQHBroYeiHT7LZ1hRZQJmF16S
mljpmlSXZKBe0oY1JTztNXcYu4ezPmUqZiDCfJ9K/gEXEEsOUpY0PTZJv4veN6Zc
aiTsIM5pNEuIs8Z8MOSgd+GDRf9wZwWtktW07jhVQx0DFJkacYIpoMHF2TeW0AiP
egdX+m2T4YbL+mhkBcd7Lx3ne28SIYGWREZEkX2mVj/kLQI7ZTdLdsThiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6xlNSJXkUUGiQI5GDKAYT8/rmqMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+dAIeRb
TY6lQZiPfa9Fe6FYr/rwoospbJ7W/7Zb46byEGa8fKjly01sk92Vxm8Ti6tZU46n
DLhjgtmkUrmg1RlVEsZfcJe2dr1MGE7VhNMGigrB6X9y+c8+IDH/TUK4a0wb8Mgf
aqRDkU8+ZKbZmtQaa9f60FQ2Z2scBFffls1jsLbg4GZxeMPPXd+KjKaVSdIbaY7m
juQual7+6pYJ1fl89StsXLU1fW8psHdKBfY/9aJjUHYmgyqGIENmE+dHonApntHg
j7H5NUROrnCnhTq8PAhmR6vFPRbdvkWu3PTLVetmy2YMxXM9ri1EM+FpYTwzAK33
pmWfBwwyMSBLtw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:03:00 2026 by rpki-client