Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: Qb3/mDE6cMALJwchryGz/+G5qmfmjSaI6HVCQn6Yj+A=
Subject key identifier: 91:EC:8E:B7:7D:2C:08:5D:31:D0:9A:05:A8:61:FE:D5:32:03:3F:A7
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019CD8B209CF2C04821438D72D4087341C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 185F
Signing time: Tue 10 Mar 2026 17:01:12 +0000
Manifest this update: Tue 10 Mar 2026 17:01:12 +0000
Manifest next update: Wed 11 Mar 2026 17:01:12 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: 0THtiu/S6ezFMc2EnO/Y521O/Mr4ipyF6uQxF278lu4=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:b2:09:cf:2c:04:82:14:38:d7:2d:40:87:34:1c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Mar 10 17:01:12 2026 GMT
Not After : Mar 11 17:01:12 2026 GMT
Subject: CN=91ec8eb77d2c085d31d09a05a861fed532033fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:a0:fe:1c:f1:eb:65:97:23:0d:06:22:c4:
b6:a7:aa:8c:88:cf:0d:64:26:7c:b4:18:90:2f:6a:
0e:28:44:85:9b:16:c1:a6:ca:97:11:83:1e:7a:bb:
a9:ab:80:24:da:7b:6a:75:77:e1:f7:07:f4:8f:27:
93:30:06:96:5c:33:2e:aa:9d:75:ba:20:28:ae:02:
65:39:cf:87:b8:53:d5:08:9f:45:fe:b6:7b:7d:68:
c3:7a:e3:55:40:ba:e5:66:c7:91:5a:9a:93:26:2e:
ca:38:ed:45:ef:0b:b3:92:9c:ee:cc:d0:41:66:68:
ea:84:f6:d9:af:57:79:59:01:17:7a:5a:fc:8a:6c:
5b:af:f1:40:9d:aa:69:61:aa:d3:0d:7b:c9:5b:67:
98:56:28:3a:3d:34:5a:1b:f2:d6:00:29:2c:d9:e5:
90:cd:01:c6:fc:46:aa:a4:4e:f1:c7:f7:b5:e6:36:
46:75:d2:fd:92:7b:31:ce:6f:8f:a3:fb:fc:dc:38:
af:5f:c5:f9:51:77:e3:1d:db:02:c3:0d:e3:47:21:
92:0a:94:1a:65:96:a1:e5:67:6e:f4:0b:f8:64:c0:
d3:71:bd:18:f0:af:fe:2d:00:13:24:cf:04:42:ba:
30:db:12:bd:40:78:23:2b:ed:86:64:59:29:7d:45:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EC:8E:B7:7D:2C:08:5D:31:D0:9A:05:A8:61:FE:D5:32:03:3F:A7
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a0:e5:c0:eb:86:3d:42:83:51:65:b6:16:59:6f:fa:d6:dc:
b3:84:29:8a:be:fd:da:f9:3a:76:d8:bb:91:fb:4d:f3:e5:91:
fd:e2:b7:a2:a8:8a:36:05:2b:3a:a4:fe:83:2a:ff:4b:5e:c9:
26:d5:dd:70:37:96:93:4f:be:fb:70:08:e1:fb:e0:04:d2:69:
68:be:82:2e:02:53:5d:55:a8:be:06:f7:d9:38:63:5b:c2:f6:
58:3c:d0:29:30:97:62:25:3a:ed:95:e1:88:c0:23:ab:a0:55:
ef:b7:da:a3:21:ba:5a:3f:30:35:ea:9b:3a:43:70:81:72:d0:
80:e7:a9:ed:c0:14:71:bb:25:94:44:3e:f9:9d:85:d5:7f:5e:
7b:5b:d4:ef:8e:01:05:82:ff:cd:93:30:ee:84:4c:5a:43:3e:
f5:56:8e:de:45:59:f5:0a:a8:d0:56:34:75:e7:c8:8f:25:c8:
dd:0a:d7:96:0d:7e:9a:a9:bf:14:37:c9:52:06:69:3c:0d:65:
d4:0b:92:d0:23:06:be:5b:74:55:58:22:7c:2b:30:43:ae:a4:
9e:2d:e0:d0:fc:de:f1:1c:bf:d9:b6:f3:c7:67:07:6a:e3:14:
ad:75:bb:fd:ab:f3:ee:0f:47:19:2f:26:50:77:ba:7d:23:0c:
c3:4f:df:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzYsgnPLASCFDjXLUCHNByOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjYwMzEwMTcwMTEyWhcNMjYwMzExMTcwMTEyWjAzMTEwLwYDVQQD
Eyg5MWVjOGViNzdkMmMwODVkMzFkMDlhMDVhODYxZmVkNTMyMDMzZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37qg/hzx62WXIw0GIsS2p6qMiM8N
ZCZ8tBiQL2oOKESFmxbBpsqXEYMeerupq4Ak2ntqdXfh9wf0jyeTMAaWXDMuqp11
uiAorgJlOc+HuFPVCJ9F/rZ7fWjDeuNVQLrlZseRWpqTJi7KOO1F7wuzkpzuzNBB
ZmjqhPbZr1d5WQEXelr8imxbr/FAnappYarTDXvJW2eYVig6PTRaG/LWACks2eWQ
zQHG/EaqpE7xx/e15jZGddL9knsxzm+Po/v83DivX8X5UXfjHdsCww3jRyGSCpQa
ZZah5Wdu9Av4ZMDTcb0Y8K/+LQATJM8EQrow2xK9QHgjK+2GZFkpfUXPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHsjrd9LAhdMdCaBahh/tUyAz+nMB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqDlwOuG
PUKDUWW2Fllv+tbcs4Qpir792vk6dti7kftN8+WR/eK3oqiKNgUrOqT+gyr/S17J
JtXdcDeWk0+++3AI4fvgBNJpaL6CLgJTXVWovgb32ThjW8L2WDzQKTCXYiU67ZXh
iMAjq6BV77faoyG6Wj8wNeqbOkNwgXLQgOep7cAUcbsllEQ++Z2F1X9ee1vU744B
BYL/zZMw7oRMWkM+9VaO3kVZ9Qqo0FY0defIjyXI3QrXlg1+mqm/FDfJUgZpPA1l
1AuS0CMGvlt0VVgifCswQ66kni3g0Pze8Ry/2bbzx2cHauMUrXW7/avz7g9HGS8m
UHe6fSMMw0/fLw==
-----END CERTIFICATE-----
Generated at Tue Mar 10 19:33:03 2026 by rpki-client