Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: fp6HS9NqBcu9kGDlo9XIhARyPXC3aRb5BBpHWajC/kk=
Subject key identifier: 28:A0:8D:A5:19:4F:7C:D6:26:BF:99:68:F3:4A:12:82:A4:59:DE:91
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019CAA58F4465CF44D8836DC09C61D586A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1891
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: CNaXW7TUyh8NKNi/0gqVLi4nArt3x7D5ZcMc61wAnGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f4:46:5c:f4:4d:88:36:dc:09:c6:1d:58:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=28a08da5194f7cd626bf9968f34a1282a459de91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:1c:35:b2:3a:83:7c:db:e7:8a:ba:ef:45:
e4:72:6a:f6:80:f6:4b:33:f7:d0:69:6f:a9:fa:82:
aa:67:44:9e:78:4d:22:19:64:4a:46:ef:2f:5a:44:
f9:ee:2a:c4:ca:2d:4d:36:02:f6:15:da:fb:ff:94:
7f:f6:e3:af:ba:29:34:01:67:4d:82:ef:61:b7:98:
bd:f0:93:fe:36:a2:02:63:18:24:13:5b:88:88:d7:
f9:87:31:b7:a5:25:4a:62:33:87:46:82:34:25:d7:
14:11:da:7c:3b:64:51:26:9d:e2:49:56:35:3a:01:
be:6e:5c:cd:2b:b6:4c:f0:ea:c6:e6:04:14:a4:0c:
3d:0c:a9:45:36:a5:c6:5f:19:30:c5:34:4d:77:c3:
a3:65:2a:d6:3e:a6:f1:10:e9:ed:86:98:86:00:a7:
fe:df:a1:1a:60:20:cb:a0:f7:de:fe:84:bc:51:93:
b3:3c:00:f3:26:27:50:02:9f:81:5b:2a:05:9a:42:
7f:cb:e1:76:ae:3b:f0:2d:1c:c4:3e:a3:60:0a:3e:
dd:48:ae:a6:8c:a7:ee:ee:0e:b9:e7:bd:4b:de:90:
e9:40:6e:b6:90:c0:ec:06:3e:57:88:3d:16:b9:bc:
87:ee:f2:10:69:5d:b8:6d:7d:9c:ad:6a:6d:b6:74:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A0:8D:A5:19:4F:7C:D6:26:BF:99:68:F3:4A:12:82:A4:59:DE:91
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9b:9a:b1:98:29:ac:c0:c1:79:a6:47:d2:e0:cd:47:e8:39:
06:8f:91:c7:d9:bd:0e:af:ec:d1:d9:33:11:ed:9d:53:e8:7a:
02:ad:a3:6f:29:02:1c:dc:4c:cb:2d:25:1d:3b:0a:0e:ef:84:
93:23:d0:74:f7:63:29:2c:41:9f:3b:6a:14:48:0e:1a:32:ab:
ac:4b:fa:44:74:43:fd:0c:47:c4:82:03:5d:d5:bc:b1:c4:12:
26:87:dc:d1:15:ce:5b:5e:3f:f8:8b:06:59:d8:9c:1f:7e:0e:
93:72:f3:32:91:12:31:3e:24:62:2c:29:2e:87:28:3a:9e:97:
5d:94:11:2f:30:38:8d:0b:3d:6c:1e:7a:63:36:aa:fd:fb:8d:
0f:7c:5e:5b:1b:34:89:89:bd:93:54:e6:2a:e8:a3:99:40:d6:
73:59:5c:66:98:28:a9:db:07:54:ed:f7:44:fd:13:46:b4:60:
8e:b8:1e:3f:c2:d0:f3:c8:54:d9:f3:d0:64:39:ab:7b:a8:7f:
eb:10:3e:75:26:bd:74:f4:fc:0b:5b:64:dd:75:c0:77:42:99:
db:22:3b:f4:96:3a:59:db:34:08:e3:5a:cf:13:97:15:b1:cf:
f8:fb:24:6f:98:b9:29:e5:75:86:0d:d5:90:eb:c0:8c:14:d6:
92:37:15:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWPRGXPRNiDbcCcYdWGo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi
Yzc1M2IwHhcNMjYwMzAxMTcwMTIyWhcNMjYwMzAyMTcwMTIyWjAzMTEwLwYDVQQD
EygyOGEwOGRhNTE5NGY3Y2Q2MjZiZjk5NjhmMzRhMTI4MmE0NTlkZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVIcNbI6g3zb54q670Xkcmr2gPZL
M/fQaW+p+oKqZ0SeeE0iGWRKRu8vWkT57irEyi1NNgL2Fdr7/5R/9uOvuik0AWdN
gu9ht5i98JP+NqICYxgkE1uIiNf5hzG3pSVKYjOHRoI0JdcUEdp8O2RRJp3iSVY1
OgG+blzNK7ZM8OrG5gQUpAw9DKlFNqXGXxkwxTRNd8OjZSrWPqbxEOnthpiGAKf+
36EaYCDLoPfe/oS8UZOzPADzJidQAp+BWyoFmkJ/y+F2rjvwLRzEPqNgCj7dSK6m
jKfu7g65571L3pDpQG62kMDsBj5XiD0WubyH7vIQaV24bX2crWpttnQl4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCigjaUZT3zWJr+ZaPNKEoKkWd6RMB8GA1UdIwQY
MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt
OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy
LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipuasZgp
rMDBeaZH0uDNR+g5Bo+Rx9m9Dq/s0dkzEe2dU+h6Aq2jbykCHNxMyy0lHTsKDu+E
kyPQdPdjKSxBnztqFEgOGjKrrEv6RHRD/QxHxIIDXdW8scQSJofc0RXOW14/+IsG
WdicH34Ok3LzMpESMT4kYiwpLocoOp6XXZQRLzA4jQs9bB56Yzaq/fuND3xeWxs0
iYm9k1TmKuijmUDWc1lcZpgoqdsHVO33RP0TRrRgjrgeP8LQ88hU2fPQZDmre6h/
6xA+dSa9dPT8C1tk3XXAd0KZ2yI79JY6Wds0CONazxOXFbHP+Pskb5i5KeV1hg3V
kOvAjBTWkjcVyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:10 2026 by rpki-client