Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: IBQQQhVHM0nlxbUWVpulcM/B0wwgk9Cb3zTY5EuOPRI=
Subject key identifier: A1:FD:5E:22:60:E3:7C:6C:C5:BB:D5:D0:58:AE:47:19:FB:CC:E0:46
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 019CAA216C50EA425F492A356B97A765F7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: 9wFSLO2QZCKdigYyBWee0eHuzbz77+ZHOUEHHkPdK5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6c:50:ea:42:5f:49:2a:35:6b:97:a7:65:f7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=a1fd5e2260e37c6cc5bbd5d058ae4719fbcce046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:01:69:07:50:4a:ba:f4:cb:5c:01:ce:40:
eb:b4:87:e4:a1:e9:4b:da:fb:9c:5c:d4:9c:c8:69:
cc:6a:8e:a3:83:aa:b5:91:be:5b:43:0d:57:2e:00:
3d:fe:76:4b:00:ae:ef:3f:e3:c1:56:4f:c3:da:bc:
e2:1e:2a:4f:75:f5:26:26:6f:1b:b9:92:b3:6d:d7:
0f:32:80:11:8e:3f:c6:fd:85:1c:ba:b5:f5:a7:08:
2f:89:13:77:c9:43:ac:9d:63:7d:91:71:00:49:b9:
1d:bf:e6:62:aa:1f:0d:6e:1d:d4:57:cf:8e:2e:2e:
2f:bb:0f:e1:fe:04:0c:9e:c0:8a:07:84:63:5a:f7:
ad:0d:b2:f5:94:c1:c3:42:2f:ef:e8:79:14:89:15:
5d:0a:63:ae:77:71:9f:f4:44:f3:e7:48:18:2f:63:
d1:8a:64:67:2b:6f:bb:1f:94:84:3d:73:10:2b:da:
83:5b:75:dc:83:09:48:e5:1b:36:96:ca:16:5b:e3:
0c:8d:60:b4:e8:7c:22:9a:fd:39:c4:03:50:c9:7c:
fd:0b:b5:90:ce:92:be:e5:bc:cd:11:1c:11:bc:de:
e5:14:56:ed:bd:38:5c:ef:d0:79:88:6e:c7:c2:5a:
32:23:90:0b:78:95:6c:a4:c5:ca:77:db:32:e0:69:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FD:5E:22:60:E3:7C:6C:C5:BB:D5:D0:58:AE:47:19:FB:CC:E0:46
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ab:72:8e:22:59:c1:00:1d:fe:06:15:07:09:43:5a:c2:1c:
d4:8b:fe:56:9d:00:43:69:d2:42:2f:27:1c:2b:f4:18:be:bf:
ba:b5:2d:27:af:47:a7:d2:33:47:f3:cf:8e:a6:63:42:2a:22:
8e:72:be:28:f3:b3:88:81:b0:c0:bd:4b:c1:93:86:a7:38:4c:
01:e7:40:2c:99:df:3b:2c:26:4d:6e:59:ff:a1:47:cb:a9:0d:
2e:21:0d:5e:10:b0:e7:0c:c7:3c:26:c1:b8:65:3f:68:80:b9:
c7:2b:6d:4c:e4:f4:95:f7:57:2a:10:00:70:00:ec:62:1e:b0:
d2:56:0d:76:b3:1d:cf:5a:e3:48:07:36:43:24:9c:56:a8:bf:
86:56:7a:39:4a:5b:c9:ca:39:e2:8b:74:48:2e:7b:5e:af:c4:
8c:5f:1a:7d:2f:81:6e:58:14:30:d2:a5:b1:9b:1e:a5:ef:10:
3e:5e:ab:56:1d:ff:bb:cb:07:ff:eb:33:46:f0:74:27:c0:6d:
46:46:d1:23:05:2a:74:6b:c3:f1:54:6e:74:6f:f5:76:4f:34:
54:22:5b:c4:a7:cf:3d:1b:60:f4:20:fe:a6:76:61:06:a2:76:
db:d0:28:0b:89:b5:81:61:13:ee:29:b7:81:0d:ec:ae:37:2f:
41:b6:76:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIWxQ6kJfSSo1a5enZffMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmIxMGQ4OWI1NTM3OTEzNTAzMTI3ZWI4NzIyNmFmYjg5
ZDFiMmQwHhcNMjYwMzAxMTYwMDQzWhcNMjYwMzAyMTYwMDQzWjAzMTEwLwYDVQQD
EyhhMWZkNWUyMjYwZTM3YzZjYzViYmQ1ZDA1OGFlNDcxOWZiY2NlMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg0BaQdQSrr0y1wBzkDrtIfkoelL
2vucXNScyGnMao6jg6q1kb5bQw1XLgA9/nZLAK7vP+PBVk/D2rziHipPdfUmJm8b
uZKzbdcPMoARjj/G/YUcurX1pwgviRN3yUOsnWN9kXEASbkdv+Ziqh8Nbh3UV8+O
Li4vuw/h/gQMnsCKB4RjWvetDbL1lMHDQi/v6HkUiRVdCmOud3Gf9ETz50gYL2PR
imRnK2+7H5SEPXMQK9qDW3XcgwlI5Rs2lsoWW+MMjWC06Hwimv05xANQyXz9C7WQ
zpK+5bzNERwRvN7lFFbtvThc79B5iG7HwloyI5ALeJVspMXKd9sy4GlbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH9XiJg43xsxbvV0FiuRxn7zOBGMB8GA1UdIwQY
MBaAFM4rENibVTeRNQMSfrhyJq+4nRstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUt
MzczZGRhNDNmNzkyLzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUtMzczZGRhNDNmNzky
LzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6tyjiJZ
wQAd/gYVBwlDWsIc1Iv+Vp0AQ2nSQi8nHCv0GL6/urUtJ69Hp9IzR/PPjqZjQioi
jnK+KPOziIGwwL1LwZOGpzhMAedALJnfOywmTW5Z/6FHy6kNLiENXhCw5wzHPCbB
uGU/aIC5xyttTOT0lfdXKhAAcADsYh6w0lYNdrMdz1rjSAc2QyScVqi/hlZ6OUpb
yco54ot0SC57Xq/EjF8afS+BblgUMNKlsZsepe8QPl6rVh3/u8sH/+szRvB0J8Bt
RkbRIwUqdGvD8VRudG/1dk80VCJbxKfPPRtg9CD+pnZhBqJ229AoC4m1gWET7im3
gQ3srjcvQbZ2Yw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:14 2026 by rpki-client