Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: RpK+ehKX4bMT4UE8YJFAhwKB98QMBWeWRVQSa6riflU=
Subject key identifier: 32:67:65:04:D0:EC:05:B9:9A:28:6D:83:35:20:E5:A8:72:B5:25:3F
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019CE290953B4215837CD79F02445B647FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0809
Signing time: Thu 12 Mar 2026 15:00:52 +0000
Manifest this update: Thu 12 Mar 2026 15:00:52 +0000
Manifest next update: Fri 13 Mar 2026 15:00:52 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: VU5LNex8/2ZyXjNCDLZnUGCLfHMVTzMTqu1vOVuE/So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:90:95:3b:42:15:83:7c:d7:9f:02:44:5b:64:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Mar 12 15:00:52 2026 GMT
Not After : Mar 13 15:00:52 2026 GMT
Subject: CN=32676504d0ec05b99a286d833520e5a872b5253f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:07:75:a0:42:7f:4b:7d:7c:26:54:60:ac:
e9:c2:d9:1a:a5:28:ca:d9:97:df:e0:06:91:47:80:
8f:ee:9b:46:5b:8c:ec:cc:cc:94:9c:5b:30:85:b1:
dc:26:ba:11:1f:4a:6e:78:aa:bc:3b:d4:22:a3:b5:
f4:23:31:66:b6:2b:7d:d2:e8:1d:65:97:7e:53:b9:
8b:0b:50:23:f6:16:d5:35:11:2d:58:b7:ee:e5:e1:
93:91:36:97:ab:da:3c:35:44:53:d2:09:06:2d:a4:
93:89:a3:84:0f:ed:a3:95:5f:1c:fd:d1:27:85:87:
26:83:3f:55:84:f2:57:47:10:cf:14:24:6e:a9:23:
eb:c9:48:dc:cd:ff:ab:a8:f1:f1:30:23:50:1b:4d:
ce:c4:4c:63:06:14:ff:74:e4:53:30:55:5d:d1:c6:
ba:cb:58:12:77:48:ee:d4:6d:c6:6a:0a:1e:dd:ec:
81:c7:36:f3:a5:38:52:51:44:23:82:a3:ae:de:9c:
4f:a4:1c:f8:15:64:d0:61:19:d5:36:f3:e4:37:c4:
81:a1:3f:66:1b:37:04:47:6f:6f:84:d5:8e:3f:d8:
73:c3:2c:8e:75:e1:ea:c8:a2:74:0f:db:fc:4b:b6:
e6:01:1a:76:20:e5:f0:2b:65:7d:fc:7b:31:08:e6:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:65:04:D0:EC:05:B9:9A:28:6D:83:35:20:E5:A8:72:B5:25:3F
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:39:8b:82:00:5c:67:19:69:00:b6:ec:ae:38:77:01:ff:91:
a0:d3:38:59:a7:b4:90:f7:a3:20:40:c5:9b:e6:17:0d:eb:09:
2e:ef:5c:11:0d:d2:17:6e:ad:22:ab:b2:ce:d7:92:c9:29:e5:
03:ec:54:8b:0b:25:22:87:41:a9:cb:90:a1:e6:cd:eb:1f:21:
cd:8f:21:cb:ce:a9:87:44:c3:87:d5:65:1f:6f:4a:35:8b:4d:
a2:ca:e3:e1:7e:51:f0:15:f5:0e:a0:53:a6:fa:1b:7e:a7:ff:
7a:79:8d:7c:18:57:1d:91:da:71:fc:ae:a0:80:ab:14:84:39:
d0:b4:48:28:43:51:af:95:f7:87:a0:ec:b8:7f:c1:37:da:1c:
a0:60:9d:21:cd:87:d8:48:13:5a:2c:bb:50:49:b2:74:e6:e5:
ce:c7:71:55:67:21:02:41:6e:8a:33:ce:43:a3:5c:ac:63:b9:
f3:58:57:34:d7:bc:87:58:a0:ec:a9:b9:c0:bc:1a:14:08:8f:
1d:91:a2:7e:16:37:7c:b3:63:bf:ce:d3:23:bd:48:3f:77:19:
13:f1:a3:0b:e3:7b:aa:68:cf:c8:92:68:6d:79:d8:41:0a:36:
ca:3c:92:80:bb:df:37:ff:b0:73:5e:48:11:dc:7f:fd:a5:b2:
ca:91:f7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzikJU7QhWDfNefAkRbZH/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2RiZDVmYzZmOTFiODA3YjdiYzRjZjZlNjQ2ZTM0NTg2
MmFmM2UwHhcNMjYwMzEyMTUwMDUyWhcNMjYwMzEzMTUwMDUyWjAzMTEwLwYDVQQD
EygzMjY3NjUwNGQwZWMwNWI5OWEyODZkODMzNTIwZTVhODcyYjUyNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbMHdaBCf0t9fCZUYKzpwtkapSjK
2Zff4AaRR4CP7ptGW4zszMyUnFswhbHcJroRH0pueKq8O9Qio7X0IzFmtit90ugd
ZZd+U7mLC1Aj9hbVNREtWLfu5eGTkTaXq9o8NURT0gkGLaSTiaOED+2jlV8c/dEn
hYcmgz9VhPJXRxDPFCRuqSPryUjczf+rqPHxMCNQG03OxExjBhT/dORTMFVd0ca6
y1gSd0ju1G3Gagoe3eyBxzbzpThSUUQjgqOu3pxPpBz4FWTQYRnVNvPkN8SBoT9m
GzcER29vhNWOP9hzwyyOdeHqyKJ0D9v8S7bmARp2IOXwK2V9/HsxCOa1xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJnZQTQ7AW5mihtgzUg5ahytSU/MB8GA1UdIwQY
MBaAFM09vV/G+RuAe3vEz25kbjRYYq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUt
OGNhYWQzZTMxYWRjLzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUtOGNhYWQzZTMxYWRj
LzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjmLggBc
ZxlpALbsrjh3Af+RoNM4Wae0kPejIEDFm+YXDesJLu9cEQ3SF26tIquyzteSySnl
A+xUiwslIodBqcuQoebN6x8hzY8hy86ph0TDh9VlH29KNYtNosrj4X5R8BX1DqBT
pvobfqf/enmNfBhXHZHacfyuoICrFIQ50LRIKENRr5X3h6DsuH/BN9ocoGCdIc2H
2EgTWiy7UEmydOblzsdxVWchAkFuijPOQ6NcrGO581hXNNe8h1ig7Km5wLwaFAiP
HZGifhY3fLNjv87TI71IP3cZE/GjC+N7qmjPyJJobXnYQQo2yjySgLvfN/+wc15I
Edx//aWyypH3pA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:22 2026 by rpki-client