Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: iNUhxZ6btPZNqKmAxtfiynwZG6JysWMjSXPhvgXLHz0=
Subject key identifier: B7:78:F0:73:69:3D:BE:B5:A0:3E:CF:95:5E:AB:4A:06:3C:5C:2C:C6
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019D09D50421E83D8D8F06D8F184BFFB1155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 1879
Signing time: Fri 20 Mar 2026 06:00:48 +0000
Manifest this update: Fri 20 Mar 2026 06:00:48 +0000
Manifest next update: Sat 21 Mar 2026 06:00:48 +0000
Files and hashes: 1: P2B766sld6YbwOxda85NHhDsjNc.roa (hash: Rh+n3/ugGLGil4AXCXWWDwwftkzN5fZJ5lMUe38d6gg=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: 41ffgByjD3bv9RBynfBMDHMso0AhTJ9nbyNLq+Z6lWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:d5:04:21:e8:3d:8d:8f:06:d8:f1:84:bf:fb:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Mar 20 06:00:48 2026 GMT
Not After : Mar 21 06:00:48 2026 GMT
Subject: CN=b778f073693dbeb5a03ecf955eab4a063c5c2cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:63:fa:a4:93:de:4c:01:ac:5d:82:4e:60:
0a:4f:21:9b:58:92:d5:4c:97:f0:1f:3b:fb:67:09:
7b:f0:54:ad:4d:90:68:61:28:4c:6c:02:bf:54:83:
49:fb:69:ba:67:e1:80:79:c6:8c:f8:44:e8:83:d3:
83:d4:3a:a5:07:07:f4:e3:b9:71:0e:19:d5:97:19:
07:45:3c:59:9a:e1:fc:62:13:a4:1e:03:55:5e:49:
5d:0a:c2:0c:c7:d0:18:55:d6:9b:6a:70:21:25:7a:
81:b7:79:d9:84:16:73:9e:08:8b:94:ad:59:64:76:
0c:b5:0f:f1:05:f5:a9:5b:97:3c:70:8d:7f:fb:74:
68:8b:89:21:11:ad:16:c7:f4:70:15:d7:ff:a0:c2:
87:80:b5:1c:c3:dc:63:c3:97:08:2e:50:b1:d7:89:
8c:ea:39:43:0b:bd:c0:8b:fb:82:62:30:ae:94:e5:
61:13:72:4d:b0:34:ba:18:dc:3e:84:48:43:da:90:
b1:6e:ef:b3:ca:1f:47:62:40:96:0a:33:77:15:e2:
dc:f1:54:64:1c:ea:0c:04:84:f4:3b:3a:23:f7:92:
06:5d:c0:44:c6:26:00:38:77:d7:92:3d:40:06:ca:
62:3b:77:4b:d2:d5:14:1f:ae:d8:79:2f:36:ba:35:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:F0:73:69:3D:BE:B5:A0:3E:CF:95:5E:AB:4A:06:3C:5C:2C:C6
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e7:96:59:e1:b7:4f:6d:ed:6b:9f:98:38:a5:bf:09:1f:f8:
ee:8c:44:02:9b:5f:63:e5:4f:99:45:02:03:e4:0c:c7:05:14:
8a:2f:3d:21:11:92:2e:8a:bf:50:d6:c4:39:38:36:e0:99:d3:
41:2c:27:5f:c7:f5:87:4e:db:60:ef:a3:f8:4f:72:d1:35:21:
0d:48:8d:ac:1b:0f:2d:ac:59:b8:81:b1:1c:02:d0:fe:68:99:
30:b4:33:32:e0:e2:bf:18:00:10:a8:29:bd:06:ed:62:48:f9:
dd:22:fd:2a:9c:33:22:ea:2d:77:c9:7f:33:e7:e9:af:be:76:
3d:a5:82:a5:f0:bb:22:a4:f1:b8:a4:51:c7:f0:7a:7c:d6:37:
e2:28:c9:d2:c0:c2:57:a0:01:56:b8:c7:56:d2:a9:45:8d:3b:
df:93:9f:fd:3d:bc:d4:12:dc:32:aa:58:23:f2:a8:c3:8e:b7:
fd:e1:00:60:1f:6e:7a:bd:2f:e2:e9:8a:df:0c:5e:50:5c:33:
41:6f:cd:ca:9f:da:93:2f:05:89:4c:c7:50:24:f8:95:1c:22:
ed:5b:98:c8:0b:a6:1d:39:5a:a5:97:e6:de:dc:5d:16:ea:92:
18:bd:c9:03:55:a4:b5:e5:b9:b1:bc:8f:75:95:91:a5:66:99:
5d:50:e6:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0J1QQh6D2NjwbY8YS/+xFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTZhYTBlMjE1NThjOTJhNDg2NTQyNDRlMDU5NjFhMWZj
ZmEwZjIwHhcNMjYwMzIwMDYwMDQ4WhcNMjYwMzIxMDYwMDQ4WjAzMTEwLwYDVQQD
EyhiNzc4ZjA3MzY5M2RiZWI1YTAzZWNmOTU1ZWFiNGEwNjNjNWMyY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzNj+qST3kwBrF2CTmAKTyGbWJLV
TJfwHzv7Zwl78FStTZBoYShMbAK/VINJ+2m6Z+GAecaM+ETog9OD1DqlBwf047lx
DhnVlxkHRTxZmuH8YhOkHgNVXkldCsIMx9AYVdabanAhJXqBt3nZhBZzngiLlK1Z
ZHYMtQ/xBfWpW5c8cI1/+3Roi4khEa0Wx/RwFdf/oMKHgLUcw9xjw5cILlCx14mM
6jlDC73Ai/uCYjCulOVhE3JNsDS6GNw+hEhD2pCxbu+zyh9HYkCWCjN3FeLc8VRk
HOoMBIT0Ozoj95IGXcBExiYAOHfXkj1ABspiO3dL0tUUH67YeS82ujUefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd48HNpPb61oD7PlV6rSgY8XCzGMB8GA1UdIwQY
MBaAFM5Wqg4hVYySpIZUJE4Flhofz6DyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wNzQ3NmMtMmM1Yi00MGU5LWI1NjIt
NTRmYTMwODY0YzIxLzEvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wNzQ3NmMtMmM1Yi00MGU5LWI1NjItNTRmYTMwODY0YzIx
LzEvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReeWWeG3
T23ta5+YOKW/CR/47oxEAptfY+VPmUUCA+QMxwUUii89IRGSLoq/UNbEOTg24JnT
QSwnX8f1h07bYO+j+E9y0TUhDUiNrBsPLaxZuIGxHALQ/miZMLQzMuDivxgAEKgp
vQbtYkj53SL9KpwzIuotd8l/M+fpr752PaWCpfC7IqTxuKRRx/B6fNY34ijJ0sDC
V6ABVrjHVtKpRY0735Of/T281BLcMqpYI/Kow463/eEAYB9uer0v4umK3wxeUFwz
QW/Nyp/aky8FiUzHUCT4lRwi7VuYyAumHTlapZfm3txdFuqSGL3JA1WkteW5sbyP
dZWRpWaZXVDmUw==
-----END CERTIFICATE-----
Generated at Fri Mar 20 13:56:11 2026 by rpki-client