Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier: I0Xw7bqmDp3rBtfXj4AQFUTSQNuNe8Pm8oimYzX+/2o=
Subject key identifier: 2A:D2:92:F2:1A:1A:A2:CB:FA:A7:D5:2B:F7:ED:F8:18:3F:4B:59:C7
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 019D3A1C3CDCFB05BE4044CDFEC031CA09A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number: 075E
Signing time: Sun 29 Mar 2026 15:00:22 +0000
Manifest this update: Sun 29 Mar 2026 15:00:22 +0000
Manifest next update: Mon 30 Mar 2026 15:00:22 +0000
Files and hashes: 1: C-10eoHVV_ERuNuHp1M0fCx__Ag.roa (hash: kJJFsA3C5xKnlbqZn0ozkgC1qO7Vwfq9ha16s0RBd0k=)
2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: FnGIxlAD72lHh0HZusBo+pZG8pbFrqNKtuDniimQGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:3c:dc:fb:05:be:40:44:cd:fe:c0:31:ca:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Mar 29 15:00:22 2026 GMT
Not After : Mar 30 15:00:22 2026 GMT
Subject: CN=2ad292f21a1aa2cbfaa7d52bf7edf8183f4b59c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:cb:4b:36:dd:80:a8:9b:d3:6f:ca:33:b7:
8e:fd:d3:67:01:fc:f2:47:4a:5b:1a:7d:41:21:54:
63:44:6b:53:1d:4a:37:24:d2:ee:92:9c:25:a6:4b:
34:04:e1:2a:54:a4:7d:aa:de:d0:93:a5:bf:99:df:
4f:09:24:9f:cf:e8:aa:a5:a7:66:fc:d7:23:db:88:
a8:42:ac:3d:98:5b:21:3b:eb:4c:77:67:d6:9a:4c:
32:1e:22:24:f9:f5:34:ff:df:ed:17:bf:c0:63:ec:
c0:60:86:36:9b:2a:53:bb:98:25:2a:fe:7d:1c:29:
73:a8:ac:13:ff:62:f9:98:f5:47:e0:2a:3c:59:99:
2b:5b:39:9e:28:36:18:f7:79:27:56:84:5c:ac:b1:
ba:91:48:ea:08:a8:d5:f0:6b:1b:a0:b6:d5:83:cf:
f1:57:10:e4:fa:4a:31:d7:96:9e:36:0a:5b:89:e4:
d1:36:e9:62:e8:78:b6:97:ae:b6:55:8e:e6:09:71:
09:26:9f:e8:02:2b:9e:b7:e6:d9:9f:00:15:53:1d:
cb:76:c7:7d:eb:75:6b:21:33:2a:bd:7a:1a:d7:cf:
fd:c6:86:ae:6f:1c:99:7e:42:dc:6d:5b:63:31:6a:
2e:d9:a1:c8:ee:e4:02:25:06:9c:63:45:64:b5:74:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:92:F2:1A:1A:A2:CB:FA:A7:D5:2B:F7:ED:F8:18:3F:4B:59:C7
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:97:0b:9c:41:89:24:00:48:5b:5d:03:6d:9c:e5:9c:8b:
2c:3b:8d:c2:9b:b6:e3:6d:51:27:99:fe:c4:86:9b:e2:5d:29:
02:61:f3:a9:32:bf:61:38:7f:53:5c:5e:bb:e7:47:c6:df:0f:
1e:6a:98:3d:b3:4a:fd:16:8d:1c:5f:bd:25:eb:c5:61:e7:5b:
a1:81:e8:ab:d0:f7:fb:37:ec:08:fa:14:80:7b:5b:63:9c:12:
da:7b:bb:e4:5c:42:47:71:78:65:d1:2b:03:f5:fb:13:a8:aa:
b0:5c:a1:6c:dd:a3:5f:81:c4:15:dc:f3:63:01:6d:77:5a:d0:
b7:51:8c:6c:c8:9c:f5:19:71:e7:98:05:4b:80:85:76:ed:54:
fa:df:53:fc:26:1b:9c:a2:12:c8:c9:c5:e1:6b:28:ab:23:ec:
47:5a:77:41:c8:61:48:1a:d5:dc:9d:69:bb:87:e4:7c:06:19:
d6:4a:2e:e8:20:de:a8:63:d4:d2:0e:3e:53:fa:0a:f4:36:c7:
a3:68:4d:74:7d:bf:b8:c0:89:fd:d0:06:5e:94:c7:dd:b2:1a:
08:52:1f:1d:58:89:27:42:d7:93:ad:15:f2:f2:a2:7b:cf:3d:
3e:f3:36:48:74:77:47:f8:20:9f:68:15:fd:58:0f:13:39:e5:
ee:45:b6:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HDzc+wW+QETN/sAxygmoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2U2NDkyZDQ3MzE1MjBjMWVlZGJjZGEyOTY3OTUwMGFj
MDgzYWIwHhcNMjYwMzI5MTUwMDIyWhcNMjYwMzMwMTUwMDIyWjAzMTEwLwYDVQQD
EygyYWQyOTJmMjFhMWFhMmNiZmFhN2Q1MmJmN2VkZjgxODNmNGI1OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO3LSzbdgKib02/KM7eO/dNnAfzy
R0pbGn1BIVRjRGtTHUo3JNLukpwlpks0BOEqVKR9qt7Qk6W/md9PCSSfz+iqpadm
/Ncj24ioQqw9mFshO+tMd2fWmkwyHiIk+fU0/9/tF7/AY+zAYIY2mypTu5glKv59
HClzqKwT/2L5mPVH4Co8WZkrWzmeKDYY93knVoRcrLG6kUjqCKjV8GsboLbVg8/x
VxDk+kox15aeNgpbieTRNuli6Hi2l662VY7mCXEJJp/oAiuet+bZnwAVUx3Ldsd9
63VrITMqvXoa18/9xoaubxyZfkLcbVtjMWou2aHI7uQCJQacY0VktXQ02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrSkvIaGqLL+qfVK/ft+Bg/S1nHMB8GA1UdIwQY
MBaAFM0+ZJLUcxUgwe7bzaKWeVAKwIOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTEyNzQtMDNhYy00OTRkLWJhOGUt
Y2ZjZmZhM2MwNjY1LzEvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YTEyNzQtMDNhYy00OTRkLWJhOGUtY2ZjZmZhM2MwNjY1
LzEvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbueXC5xB
iSQASFtdA22c5ZyLLDuNwpu2421RJ5n+xIab4l0pAmHzqTK/YTh/U1xeu+dHxt8P
HmqYPbNK/RaNHF+9JevFYedboYHoq9D3+zfsCPoUgHtbY5wS2nu75FxCR3F4ZdEr
A/X7E6iqsFyhbN2jX4HEFdzzYwFtd1rQt1GMbMic9Rlx55gFS4CFdu1U+t9T/CYb
nKISyMnF4WsoqyPsR1p3QchhSBrV3J1pu4fkfAYZ1kou6CDeqGPU0g4+U/oK9DbH
o2hNdH2/uMCJ/dAGXpTH3bIaCFIfHViJJ0LXk60V8vKie889PvM2SHR3R/ggn2gV
/VgPEznl7kW26w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:50 2026 by rpki-client