Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: 5sVFX2pinmVZhTUug7erplNMLwnED6NewW0K73qBPEo=
Subject key identifier: 26:93:56:2A:E4:36:B1:87:7B:55:39:DC:78:B1:9C:08:34:8A:24:C1
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019D04E5FB03A17686AE5432D324C1109F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 111F
Signing time: Thu 19 Mar 2026 07:01:13 +0000
Manifest this update: Thu 19 Mar 2026 07:01:13 +0000
Manifest next update: Fri 20 Mar 2026 07:01:13 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: zMDyJiTFPegKj70Ih4dcsqXir6aE5QjOoFUbIkWTFhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:fb:03:a1:76:86:ae:54:32:d3:24:c1:10:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Mar 19 07:01:13 2026 GMT
Not After : Mar 20 07:01:13 2026 GMT
Subject: CN=2693562ae436b1877b5539dc78b19c08348a24c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:bb:34:f6:08:d7:6f:94:5e:82:68:2a:f0:
72:78:17:a2:a9:db:60:57:b1:b5:f8:e3:62:2e:00:
90:d5:bb:62:6b:9c:5e:47:5a:52:56:76:37:25:5c:
64:54:e3:34:7f:22:f9:a3:10:38:16:de:31:bf:d3:
65:77:56:f4:63:88:a7:7d:1c:ee:7c:06:95:0e:95:
d2:74:6c:80:c1:d3:08:a3:14:7d:45:ce:92:16:87:
15:36:5d:d6:95:de:ce:d4:7a:2b:a8:57:2e:11:de:
f8:cf:d7:ea:29:fc:62:ad:e6:74:d3:68:b9:b2:81:
c3:08:ff:f5:32:39:b5:23:01:63:83:2d:e4:e5:45:
4b:b2:33:44:55:78:16:50:ef:3f:79:ef:1d:1c:81:
0f:c7:93:15:8c:27:31:2f:26:6b:ac:3e:c0:8a:0b:
52:a0:4f:0f:a1:73:64:21:8a:08:12:67:c9:a5:67:
66:d9:80:b4:26:75:f9:f3:cf:19:60:92:4b:f6:2d:
46:38:c2:91:7e:6b:92:29:16:16:d6:1e:89:89:4f:
33:7a:f8:a2:5f:82:fd:c4:53:f4:08:00:5c:bf:4f:
53:a2:09:2a:ce:d8:0f:76:31:ec:08:33:7e:fb:c4:
88:85:97:07:9a:84:2b:08:bd:4b:e9:ea:39:f0:8c:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:93:56:2A:E4:36:B1:87:7B:55:39:DC:78:B1:9C:08:34:8A:24:C1
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:d9:b5:33:0c:38:e3:cb:7c:c8:a1:0d:11:71:16:f2:c9:
d8:42:3f:5d:69:0e:91:12:55:d4:fb:8c:2f:bf:31:fc:a2:80:
8a:68:6a:67:3d:28:28:25:41:34:1f:32:5c:f6:34:7e:bf:21:
28:2c:86:09:07:75:6c:76:d1:d5:a0:77:09:19:b7:a9:97:f0:
73:05:e9:40:0f:d0:78:4b:84:49:a9:ce:5b:fd:04:6a:95:e9:
d9:a2:85:78:1d:d5:92:1f:91:a4:cd:aa:69:b3:f2:d3:10:a4:
60:fb:e4:42:61:5b:00:bb:12:4b:67:69:86:8f:e2:fb:e2:5a:
1e:f9:56:b3:8d:5d:fd:72:6b:e0:8b:75:b4:33:18:26:48:93:
c8:1a:5f:e9:d3:54:80:67:f5:69:ac:e2:e1:b4:fc:54:ca:28:
31:36:2b:44:4f:88:cc:8f:6e:d5:9c:bb:bd:62:df:b8:59:c3:
94:32:92:8a:86:14:c5:fc:46:36:1e:8f:e7:4b:ea:11:b5:da:
cf:30:97:fd:1c:f1:42:ee:6a:ea:bd:0d:2e:64:50:4a:8e:f8:
cd:f0:f9:47:a0:07:37:9e:bd:82:0c:e1:0f:1c:aa:3c:d4:16:
42:5b:41:d7:f4:b0:97:be:07:bb:94:83:17:14:00:c9:cb:4a:
33:e0:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:47:53 2026 by rpki-client