Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: XLOEzoC302G0jzP+iaTf5rox3gtMRlsS1HHVsK+tX50=
Subject key identifier: DC:34:1C:26:B1:56:F0:18:08:A2:16:EC:5D:A4:6F:DF:1C:B8:95:13
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019C7D80164A85DE58E2BB47AF491106DDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 014B
Signing time: Sat 21 Feb 2026 00:01:12 +0000
Manifest this update: Sat 21 Feb 2026 00:01:12 +0000
Manifest next update: Sun 22 Feb 2026 00:01:12 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: TIb9RahkMD6D4oXPYEqJe3Hom3knbn/BjDoNH6711E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:80:16:4a:85:de:58:e2:bb:47:af:49:11:06:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Feb 21 00:01:12 2026 GMT
Not After : Feb 22 00:01:12 2026 GMT
Subject: CN=dc341c26b156f01808a216ec5da46fdf1cb89513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:19:2c:9f:a1:9d:9e:1a:66:cf:11:c8:c8:
d0:e5:ed:fc:fd:df:28:cb:76:7a:80:67:bb:e9:9d:
4b:a0:5a:46:50:0b:31:de:b9:b2:7e:9d:fd:06:0f:
e8:1f:95:be:e8:a3:b9:c9:83:cb:3b:7a:01:26:d9:
03:82:e9:3d:34:8a:fa:90:65:6c:7e:b3:b8:fa:bb:
31:11:35:34:97:0c:73:28:2f:c7:8c:dc:90:c6:d9:
be:05:c0:a0:0d:ee:8b:52:b6:4e:28:8f:71:08:58:
34:2f:10:0b:f6:c7:3f:30:ed:da:33:fd:bb:9c:7d:
ea:88:a0:88:69:3e:2a:7f:41:cc:5c:ee:85:85:3c:
90:96:6d:6d:86:fb:d4:6d:e5:a7:f8:20:44:d6:56:
83:e8:7c:47:86:eb:4f:48:d6:d2:bc:01:6f:88:90:
64:e1:6c:e2:b7:66:e5:f3:14:6a:ce:04:8d:8d:00:
87:25:50:a7:aa:ce:5e:a7:0b:27:2a:14:04:ef:be:
c8:e6:b4:25:53:f6:9f:a4:26:9c:54:d9:9d:a1:65:
db:4d:63:e0:f2:68:c9:a6:b4:14:19:dc:ce:a9:70:
27:1e:4c:e2:63:4c:a4:f6:8f:8a:f9:82:3e:88:44:
55:3c:45:2a:8f:bb:42:87:bf:0b:b2:b5:a3:1a:cc:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:1C:26:B1:56:F0:18:08:A2:16:EC:5D:A4:6F:DF:1C:B8:95:13
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:8e:48:c6:f3:85:ab:a2:f4:0f:84:ea:b4:df:d3:e9:e4:
a0:a9:e1:30:54:18:b4:4d:d5:68:d9:76:3e:ce:87:0b:5c:ae:
eb:e1:66:67:01:29:8a:3e:a2:cf:24:4c:15:3f:79:b3:79:ad:
0c:c0:45:c8:c3:9c:ea:79:cb:c0:14:b2:a0:39:5c:ac:a8:21:
8b:44:23:71:ff:37:12:e9:6e:e2:50:82:e7:1d:6e:43:56:ab:
8b:fb:27:f5:09:f5:cb:1c:e3:4d:6b:8a:2a:71:4f:f5:05:f8:
98:39:8c:26:ba:fe:2e:37:00:32:8b:28:87:eb:6a:4b:8f:0a:
98:ca:68:9e:ab:f4:24:53:95:28:b9:24:3b:93:40:5d:74:77:
aa:c7:f4:4b:ac:a6:fe:f0:bd:97:3a:e2:3b:20:93:0e:e5:90:
da:0a:f1:9a:8f:87:cd:cc:db:63:ae:ba:cb:ef:0a:af:8c:75:
5e:6e:64:80:24:d1:05:62:79:5c:24:b2:47:e2:49:79:08:91:
7f:95:68:04:26:56:ce:4a:66:a3:8c:66:c7:6a:4a:fb:06:82:
57:fc:dd:fd:d1:c4:17:fc:0b:53:e2:1a:c3:b4:89:76:8f:14:
7f:45:16:d7:89:18:e7:2c:d5:ed:4d:2f:c3:c4:06:3f:e3:a7:
16:b8:44:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZx9gBZKhd5Y4rtHr0kRBt2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNDAxODVmNTUyY2Q5NzUyNzZjMDM0NjRmNTBjN2E1ZDM1
MTU2NGMwHhcNMjYwMjIxMDAwMTEyWhcNMjYwMjIyMDAwMTEyWjAzMTEwLwYDVQQD
EyhkYzM0MWMyNmIxNTZmMDE4MDhhMjE2ZWM1ZGE0NmZkZjFjYjg5NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy8ZLJ+hnZ4aZs8RyMjQ5e38/d8o
y3Z6gGe76Z1LoFpGUAsx3rmyfp39Bg/oH5W+6KO5yYPLO3oBJtkDguk9NIr6kGVs
frO4+rsxETU0lwxzKC/HjNyQxtm+BcCgDe6LUrZOKI9xCFg0LxAL9sc/MO3aM/27
nH3qiKCIaT4qf0HMXO6FhTyQlm1thvvUbeWn+CBE1laD6HxHhutPSNbSvAFviJBk
4Wzit2bl8xRqzgSNjQCHJVCnqs5epwsnKhQE777I5rQlU/afpCacVNmdoWXbTWPg
8mjJprQUGdzOqXAnHkziY0yk9o+K+YI+iERVPEUqj7tCh78LsrWjGszwlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw0HCaxVvAYCKIW7F2kb98cuJUTMB8GA1UdIwQY
MBaAFM9AGF9VLNl1J2wDRk9Qx6XTUVZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzct
OTE5ZWVmYmE0OGI1LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMTY4ZmEtZmJmNi00ZTA3LTllYzctOTE5ZWVmYmE0OGI1
LzEvejBBWVgxVXMyWFVuYkFOR1QxREhwZE5SVmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIiOSMbz
haui9A+E6rTf0+nkoKnhMFQYtE3VaNl2Ps6HC1yu6+FmZwEpij6izyRMFT95s3mt
DMBFyMOc6nnLwBSyoDlcrKghi0Qjcf83Eulu4lCC5x1uQ1ari/sn9Qn1yxzjTWuK
KnFP9QX4mDmMJrr+LjcAMosoh+tqS48KmMponqv0JFOVKLkkO5NAXXR3qsf0S6ym
/vC9lzriOyCTDuWQ2grxmo+HzczbY666y+8Kr4x1Xm5kgCTRBWJ5XCSyR+JJeQiR
f5VoBCZWzkpmo4xmx2pK+waCV/zd/dHEF/wLU+Iaw7SJdo8Uf0UW14kY5yzV7U0v
w8QGP+OnFrhEgw==
-----END CERTIFICATE-----
Generated at Sat Feb 21 06:07:22 2026 by rpki-client