Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: o6VMvPQBo0iCSxR8CCxZpS43LXHR1OYpqNwz52NBp3c=
Subject key identifier: DB:88:55:36:FC:37:1C:D6:E7:95:31:C6:21:B4:1C:C9:85:5C:46:BE
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019CAB6B34DF8E3AFE74D1B522E439404EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 027C
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: AFlTJkw5J9xjI6LD3Mjqu2mOSzujVRhUxjd9PsdgVhM=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:34:df:8e:3a:fe:74:d1:b5:22:e4:39:40:4e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=db885536fc371cd6e79531c621b41cc9855c46be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:3a:44:3c:e5:cd:83:52:f0:27:4d:2e:1f:
d7:f1:ee:c9:99:dc:eb:fb:45:d6:b7:01:02:de:22:
63:4c:1e:17:05:54:0a:26:c9:0d:2e:a6:e3:b6:34:
f8:13:8a:22:91:93:f0:9d:51:e5:ec:64:ea:71:d2:
c5:0a:ec:5c:01:b1:f5:c9:47:6b:0c:ee:f1:33:55:
84:0e:fa:ff:36:18:24:d5:6f:d9:db:58:d9:84:92:
79:f6:69:5d:98:e9:ab:55:ca:26:df:41:75:39:05:
62:67:aa:98:a4:35:c3:a0:2a:cd:82:e0:85:d5:b4:
9d:f0:b6:64:21:b4:0c:81:ed:ac:8f:39:b5:d4:6b:
0f:df:93:3d:66:c2:60:94:00:80:a3:86:b6:76:1a:
58:eb:0a:1c:14:19:6c:95:83:e0:f1:9e:43:5a:20:
5d:4f:08:ca:34:79:fd:bd:d0:7b:dd:91:8b:54:0f:
8c:6a:06:fa:36:6c:e6:26:42:85:36:e1:08:04:80:
48:2f:04:35:79:eb:91:89:68:13:81:49:99:8d:54:
d0:7c:cd:99:a5:48:85:65:cb:aa:8e:27:e4:b2:30:
09:ed:9b:a8:4b:fe:23:f4:4b:d5:1f:a9:da:a4:48:
9c:dd:86:e6:5b:3a:e0:9c:94:84:30:f9:e2:e3:26:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:88:55:36:FC:37:1C:D6:E7:95:31:C6:21:B4:1C:C9:85:5C:46:BE
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1f:ae:cc:bf:32:b3:a9:0b:78:dd:33:da:a9:d6:6c:7e:7b:
bd:2d:11:c2:3a:ed:83:c8:50:87:5d:43:92:97:bf:30:75:d1:
93:4f:d2:04:77:2b:2e:de:52:84:a2:fb:60:7c:df:4c:ad:b2:
78:a4:36:1f:b3:59:25:e0:6d:a5:25:2c:48:5e:33:ec:14:bc:
c5:e1:3f:4f:6b:dd:6f:b0:e9:ab:e4:34:91:89:00:4d:ac:f0:
49:01:3d:e0:c1:41:d8:aa:15:a2:da:b9:e0:4f:e7:3e:76:da:
b7:5b:a2:dc:d1:c7:cd:72:02:12:76:36:dd:21:1d:d9:8a:e9:
6d:c0:07:9b:89:db:72:10:1f:ab:63:7f:fb:5c:45:12:ae:d2:
be:1a:43:ce:62:69:ca:8b:a7:19:26:f3:f7:42:ae:58:e5:fa:
89:d3:90:01:8e:69:6a:59:10:69:2b:25:54:07:cf:a7:24:11:
71:43:84:10:2d:25:80:d6:18:6f:a0:a7:1f:b7:05:38:47:d0:
59:29:6d:29:3e:d3:b6:67:7b:d8:52:ad:0a:07:a4:f0:9c:05:
ac:92:74:30:d4:e9:7d:eb:13:ff:85:21:62:3a:4f:f4:fc:9a:
31:47:24:e2:0e:ee:9c:14:21:37:61:55:64:42:4f:c8:24:3b:
55:67:a8:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazTfjjr+dNG1IuQ5QE63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk
MTQ3NTYwHhcNMjYwMzAxMjIwMDU1WhcNMjYwMzAyMjIwMDU1WjAzMTEwLwYDVQQD
EyhkYjg4NTUzNmZjMzcxY2Q2ZTc5NTMxYzYyMWI0MWNjOTg1NWM0NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfw6RDzlzYNS8CdNLh/X8e7Jmdzr
+0XWtwEC3iJjTB4XBVQKJskNLqbjtjT4E4oikZPwnVHl7GTqcdLFCuxcAbH1yUdr
DO7xM1WEDvr/Nhgk1W/Z21jZhJJ59mldmOmrVcom30F1OQViZ6qYpDXDoCrNguCF
1bSd8LZkIbQMge2sjzm11GsP35M9ZsJglACAo4a2dhpY6wocFBlslYPg8Z5DWiBd
TwjKNHn9vdB73ZGLVA+Magb6NmzmJkKFNuEIBIBILwQ1eeuRiWgTgUmZjVTQfM2Z
pUiFZcuqjifksjAJ7ZuoS/4j9EvVH6napEic3YbmWzrgnJSEMPni4yYeLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuIVTb8NxzW55UxxiG0HMmFXEa+MB8GA1UdIwQY
MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt
MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1
LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR+uzL8y
s6kLeN0z2qnWbH57vS0Rwjrtg8hQh11Dkpe/MHXRk0/SBHcrLt5ShKL7YHzfTK2y
eKQ2H7NZJeBtpSUsSF4z7BS8xeE/T2vdb7Dpq+Q0kYkATazwSQE94MFB2KoVotq5
4E/nPnbat1ui3NHHzXICEnY23SEd2YrpbcAHm4nbchAfq2N/+1xFEq7SvhpDzmJp
younGSbz90KuWOX6idOQAY5palkQaSslVAfPpyQRcUOEEC0lgNYYb6CnH7cFOEfQ
WSltKT7Ttmd72FKtCgek8JwFrJJ0MNTpfesT/4UhYjpP9PyaMUck4g7unBQhN2FV
ZEJPyCQ7VWeo6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:41 2026 by rpki-client