Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: f5AlbFKN014AeazgoREh7PfFPYyj2usxH+ZbXc2JM3g=
Subject key identifier: 10:09:93:D1:77:F5:EF:EE:3B:B3:FE:11:19:02:4C:A2:71:46:12:CA
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 019CAD594B63F22A61C320C0434C48491CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:00:36 +0000
Manifest this update: Mon 02 Mar 2026 07:00:36 +0000
Manifest next update: Tue 03 Mar 2026 07:00:36 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: gPVMI+cZl36nxE067oPCiTmFgImHop/zBDiGZTe59Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4b:63:f2:2a:61:c3:20:c0:43:4c:48:49:1c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Mar 2 07:00:36 2026 GMT
Not After : Mar 3 07:00:36 2026 GMT
Subject: CN=100993d177f5efee3bb3fe1119024ca2714612ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:1c:30:ea:9f:4d:9d:a6:fe:49:52:81:5f:
aa:cf:28:82:f0:80:97:d0:44:da:17:ad:fb:7f:ce:
bc:a3:91:79:2e:37:8b:49:ea:a7:af:69:5b:0b:65:
c8:b9:63:59:c1:1a:9f:77:85:6f:a4:43:b1:de:6b:
83:b2:56:3a:a4:45:96:f5:2b:98:d4:c4:c9:41:10:
9d:66:ea:04:73:98:d7:59:cc:a8:73:e4:2c:85:7a:
fc:f9:5b:7c:f9:44:f2:09:3d:28:12:a6:e6:9f:b6:
5a:60:6a:e5:61:a6:c6:92:b6:c2:73:0c:00:f1:1f:
79:68:43:6e:90:95:b4:af:eb:b8:3b:22:24:d2:15:
bd:f0:20:63:59:67:a8:65:42:b6:ac:51:f5:df:25:
70:b7:d2:bb:f9:7c:69:52:0a:89:22:43:ec:31:b5:
b8:b5:fc:d4:2b:fa:39:e8:df:45:64:83:4f:76:87:
b6:09:fd:fa:4b:48:f3:a2:ae:80:db:5e:9d:a9:6a:
10:97:5a:01:e8:4d:29:42:d2:47:bb:1e:3f:bb:3c:
7e:2a:99:83:78:d6:58:61:29:e7:8d:03:5b:1e:18:
49:64:3a:d8:2e:54:b7:33:e0:a1:23:c9:fd:ef:61:
e1:af:07:70:21:3b:bd:6e:69:05:a3:61:35:61:a6:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:93:D1:77:F5:EF:EE:3B:B3:FE:11:19:02:4C:A2:71:46:12:CA
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:40:93:a2:c4:93:ff:e8:c8:fc:a7:4b:35:b6:ba:93:14:69:
eb:13:42:0a:71:11:07:54:7a:19:52:3a:20:7d:31:d2:95:9d:
f3:4c:46:0f:47:04:6c:fd:b5:d5:f1:05:dd:9e:28:e0:1f:9f:
95:c8:76:4b:c2:6d:05:df:ea:ef:6b:42:c8:6c:89:fc:61:d9:
7c:14:d2:76:d6:b2:ef:ee:9a:4f:76:3b:c9:94:3b:f6:59:60:
de:52:48:9e:b9:6d:b1:a9:e1:68:a1:bf:14:33:54:dd:ea:7a:
35:8b:8a:ed:ca:e7:c1:31:11:97:54:6a:ab:f3:99:3f:9c:67:
45:bd:ec:62:c8:a8:4d:b0:a3:97:21:7d:49:cc:c3:4a:78:6c:
65:1e:0a:7a:76:43:40:42:12:f3:69:52:24:f6:07:a7:25:65:
51:c2:66:8c:32:e2:88:98:57:2e:f5:d8:d7:64:fa:94:4e:09:
16:aa:37:58:85:67:cd:ea:c8:ed:e3:67:79:24:7e:e1:ef:6e:
ac:3f:4b:19:a4:ea:37:17:c9:10:f4:fa:ad:84:52:57:40:4b:
e7:d2:c5:98:b1:1b:b1:86:6f:2b:1b:aa:34:2f:8f:07:f6:18:
f5:82:53:36:32:5a:96:a8:14:db:94:fb:9d:64:69:87:78:6b:
ab:70:e7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWUtj8iphwyDAQ0xISRymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTVjZWMxNDNhMmFmMWVkMWMyZDk5Njk2ZjFmMTY4N2Y0
NTg2NDkwHhcNMjYwMzAyMDcwMDM2WhcNMjYwMzAzMDcwMDM2WjAzMTEwLwYDVQQD
EygxMDA5OTNkMTc3ZjVlZmVlM2JiM2ZlMTExOTAyNGNhMjcxNDYxMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRccMOqfTZ2m/klSgV+qzyiC8ICX
0ETaF637f868o5F5LjeLSeqnr2lbC2XIuWNZwRqfd4VvpEOx3muDslY6pEWW9SuY
1MTJQRCdZuoEc5jXWcyoc+QshXr8+Vt8+UTyCT0oEqbmn7ZaYGrlYabGkrbCcwwA
8R95aENukJW0r+u4OyIk0hW98CBjWWeoZUK2rFH13yVwt9K7+XxpUgqJIkPsMbW4
tfzUK/o56N9FZINPdoe2Cf36S0jzoq6A216dqWoQl1oB6E0pQtJHux4/uzx+KpmD
eNZYYSnnjQNbHhhJZDrYLlS3M+ChI8n972HhrwdwITu9bmkFo2E1Yaa0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAJk9F39e/uO7P+ERkCTKJxRhLKMB8GA1UdIwQY
MBaAFM+lzsFDoq8e0cLZlpbx8Wh/RYZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOWUwZDktNTJhMi00MzdjLTg5NWYt
NGM1ODJjMjhmYmEzLzEvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOWUwZDktNTJhMi00MzdjLTg5NWYtNGM1ODJjMjhmYmEz
LzEvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkCTosST
/+jI/KdLNba6kxRp6xNCCnERB1R6GVI6IH0x0pWd80xGD0cEbP211fEF3Z4o4B+f
lch2S8JtBd/q72tCyGyJ/GHZfBTSdtay7+6aT3Y7yZQ79llg3lJInrltsanhaKG/
FDNU3ep6NYuK7crnwTERl1Rqq/OZP5xnRb3sYsioTbCjlyF9SczDSnhsZR4KenZD
QEIS82lSJPYHpyVlUcJmjDLiiJhXLvXY12T6lE4JFqo3WIVnzerI7eNneSR+4e9u
rD9LGaTqNxfJEPT6rYRSV0BL59LFmLEbsYZvKxuqNC+PB/YY9YJTNjJalqgU25T7
nWRph3hrq3DnPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:04 2026 by rpki-client