Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: 3Nvkv9iF6rTFgpet5ozVHmwyfZIq1qV7A5qLolLcFA8=
Subject key identifier: 14:BC:AF:AF:9F:F2:9B:B4:DA:B4:CD:15:9B:D7:8D:F4:FE:B1:02:32
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019CB8822F00AE4FA1D080D0BD185A102D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 093D
Signing time: Wed 04 Mar 2026 11:01:05 +0000
Manifest this update: Wed 04 Mar 2026 11:01:05 +0000
Manifest next update: Thu 05 Mar 2026 11:01:05 +0000
Files and hashes: 1: 9H2Cao4L9seLn80FxSiOGYvYmbE.roa (hash: 6fh3UPrvbfpSC3IgcyXg2AEmgPfBi1rjETuQ8TwnWs8=)
2: J616ho14DKGXrY52dTz4rECA6rg.roa (hash: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4=)
3: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (hash: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8=)
4: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: S9MOmAg9nzuj+9s9q92ieC19lZ4PsaJyDHe4T7h/1zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:82:2f:00:ae:4f:a1:d0:80:d0:bd:18:5a:10:2d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Mar 4 11:01:05 2026 GMT
Not After : Mar 5 11:01:05 2026 GMT
Subject: CN=14bcafaf9ff29bb4dab4cd159bd78df4feb10232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:b0:f9:e5:2b:18:6b:9d:f8:01:f5:15:6a:
f8:a9:10:6e:98:4e:72:dd:2d:c2:97:49:45:9c:29:
cd:65:44:56:7f:2c:ee:3c:43:bb:59:d7:99:99:9c:
34:53:87:23:61:f7:51:e7:35:cf:62:4f:ad:51:08:
f4:9d:ff:5a:85:ca:bb:37:92:63:b4:3e:cc:2d:40:
5f:17:68:dd:c9:c6:9d:e1:61:af:8c:99:0b:ff:13:
ab:25:49:0f:08:a7:4f:60:7e:bf:5c:16:6c:b1:14:
f6:a6:80:bf:35:ba:c4:e7:68:35:ac:c0:ab:2c:2c:
a5:8b:0e:9a:c6:37:d5:b7:24:a6:59:fa:b9:ab:62:
0e:c3:dc:ff:fe:d8:c8:7d:19:50:25:b2:01:5a:fb:
88:e6:4d:c0:c1:b0:20:cd:aa:d2:c3:c8:f9:50:02:
25:dc:34:fc:d2:45:78:e8:5d:4b:ab:a9:10:32:92:
c3:f0:c9:55:5d:62:5d:07:8e:94:b8:b0:90:ab:fb:
af:a1:3f:1c:34:b8:54:a4:07:ea:aa:f0:de:db:06:
63:85:2a:85:9f:13:dd:61:ed:c0:96:3d:bf:b9:36:
f2:ec:c7:8b:c5:b4:58:5d:46:05:88:69:0b:1e:ea:
ca:51:1e:d4:cf:6b:3e:3f:ef:57:1c:ff:31:5f:df:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:AF:AF:9F:F2:9B:B4:DA:B4:CD:15:9B:D7:8D:F4:FE:B1:02:32
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:fc:14:fd:51:d8:bf:0d:4d:7e:86:50:35:da:5f:76:70:
8b:52:f7:3b:14:ca:0a:08:cb:55:d3:65:17:74:48:80:9c:92:
2d:06:64:b6:4d:3d:e4:ea:bc:59:6e:88:d8:63:12:4a:4f:69:
01:29:cd:cd:24:b6:43:94:13:28:32:79:ba:e3:b2:2c:02:68:
bd:31:93:36:ac:fc:5f:02:bb:00:13:9b:e9:b2:96:bd:f2:a2:
ae:df:01:d1:29:ee:a3:47:d2:05:cd:fe:86:70:45:0d:19:12:
90:b8:91:1e:c3:22:0c:87:5e:01:13:87:eb:e2:56:3e:cf:62:
6f:28:b6:de:db:dd:da:a2:36:f5:62:c6:b4:32:40:5f:dc:fb:
5c:d7:e0:9d:1b:d5:96:46:f3:b3:07:b5:7b:db:cd:f0:cf:79:
0b:79:5e:c9:b7:60:c4:0e:93:33:b9:f4:72:a9:6d:e2:3a:3f:
01:5b:dd:3c:94:70:12:81:77:65:82:e5:d6:99:97:ec:7d:d9:
60:db:6d:ef:94:9e:98:fa:33:7e:16:8a:5f:43:fa:bd:a3:bd:
30:16:b5:b2:3b:85:4d:6e:aa:17:bd:53:e9:07:46:1e:0b:65:
ec:d6:bc:cb:24:20:17:21:ae:f6:25:66:17:21:b7:b1:3d:01:
bc:0f:c2:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy4gi8Ark+h0IDQvRhaEC1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk
MjZmZTgwHhcNMjYwMzA0MTEwMTA1WhcNMjYwMzA1MTEwMTA1WjAzMTEwLwYDVQQD
EygxNGJjYWZhZjlmZjI5YmI0ZGFiNGNkMTU5YmQ3OGRmNGZlYjEwMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ6w+eUrGGud+AH1FWr4qRBumE5y
3S3Cl0lFnCnNZURWfyzuPEO7WdeZmZw0U4cjYfdR5zXPYk+tUQj0nf9ahcq7N5Jj
tD7MLUBfF2jdycad4WGvjJkL/xOrJUkPCKdPYH6/XBZssRT2poC/NbrE52g1rMCr
LCyliw6axjfVtySmWfq5q2IOw9z//tjIfRlQJbIBWvuI5k3AwbAgzarSw8j5UAIl
3DT80kV46F1Lq6kQMpLD8MlVXWJdB46UuLCQq/uvoT8cNLhUpAfqqvDe2wZjhSqF
nxPdYe3Alj2/uTby7MeLxbRYXUYFiGkLHurKUR7Uz2s+P+9XHP8xX9+59QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS8r6+f8pu02rTNFZvXjfT+sQIyMB8GA1UdIwQY
MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt
YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx
LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7L8FP1R
2L8NTX6GUDXaX3Zwi1L3OxTKCgjLVdNlF3RIgJySLQZktk095Oq8WW6I2GMSSk9p
ASnNzSS2Q5QTKDJ5uuOyLAJovTGTNqz8XwK7ABOb6bKWvfKirt8B0Snuo0fSBc3+
hnBFDRkSkLiRHsMiDIdeAROH6+JWPs9ibyi23tvd2qI29WLGtDJAX9z7XNfgnRvV
lkbzswe1e9vN8M95C3leybdgxA6TM7n0cqlt4jo/AVvdPJRwEoF3ZYLl1pmX7H3Z
YNtt75SemPozfhaKX0P6vaO9MBa1sjuFTW6qF71T6QdGHgtl7Na8yyQgFyGu9iVm
FyG3sT0BvA/C9g==
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:45 2026 by rpki-client