Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: oQClGhCglIzB6MUZWa6s7vZRRQcrS5hMyK4SGR5cW54=
Subject key identifier: CE:DE:3F:35:0D:50:84:20:58:7D:E4:C1:0E:50:DD:11:77:D6:64:0E
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 019D38D36B5371E4EC6C0ACA76F1917CA33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 15D2
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: ldB1ccba1eVWxNgUlrtHodR40IY.roa (hash: /jl6IvaIt6KPatpRGzV51YKDjVrmO0TQhFPcR45WfF4=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: 8zArWZUTxnEK9ktK/JKN2Wm+vNVx1RuxMiM6IhLJNQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6b:53:71:e4:ec:6c:0a:ca:76:f1:91:7c:a3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=cede3f350d508420587de4c10e50dd1177d6640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:8e:61:9e:16:7e:fb:fd:97:1b:84:47:42:
cd:68:0e:22:cb:2a:5f:78:34:64:70:dc:e0:ef:48:
8f:4a:fc:58:d3:f8:ab:33:4f:8a:da:d0:78:69:c7:
11:5e:f4:a1:04:04:51:9b:5e:72:ad:9d:a4:67:ba:
15:cd:36:95:db:b7:37:7d:e1:08:78:df:47:4c:fb:
0f:af:5b:da:66:ce:ab:63:33:9d:b9:2c:a8:e6:09:
f0:c4:b0:5c:3a:89:23:fd:0c:47:f1:2e:62:50:a4:
38:eb:c3:95:11:e6:77:5f:16:25:e5:46:21:ea:4a:
2b:b6:59:ed:b0:a4:a1:38:b7:6c:5c:bc:1e:c7:aa:
7a:08:66:78:1c:ce:d1:e1:b6:a0:f5:bb:11:33:7a:
ae:21:8e:70:2c:6f:4d:8b:b3:27:e7:ff:18:c1:6b:
46:2e:fe:78:1d:0d:97:d2:70:f4:88:1f:2d:47:a7:
29:51:ff:cf:d7:53:a0:47:ec:35:86:61:a4:02:07:
65:af:c0:b0:14:3c:27:0f:d1:75:cc:da:f2:60:d6:
fd:19:00:2e:2f:8f:27:53:af:a5:36:93:51:0b:14:
18:89:d2:be:77:32:0a:41:33:a7:dc:0b:5e:29:6c:
2a:3a:14:fb:59:d8:3d:ff:18:84:9f:45:ce:7d:be:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DE:3F:35:0D:50:84:20:58:7D:E4:C1:0E:50:DD:11:77:D6:64:0E
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:5e:0d:95:e4:80:11:7a:a1:c6:06:c8:ad:37:49:f1:a2:
7e:15:65:f8:08:7d:fb:01:ab:d4:66:8e:94:d0:ce:43:75:34:
35:72:5a:31:e1:c7:2a:35:57:fe:4b:35:2a:2f:25:bf:b0:79:
59:07:63:6a:ab:1b:00:0b:cb:36:f6:ef:28:2c:92:13:81:cc:
8f:33:2f:6f:36:9f:e3:73:ff:fa:bc:d4:3d:79:9d:25:be:87:
7a:5e:45:7c:c6:0b:12:8c:02:93:6e:9a:0f:4b:65:47:31:df:
14:35:5f:c0:4b:a6:4b:f3:f1:32:0c:7c:9b:45:9a:37:c3:0c:
80:23:89:e1:35:f8:7f:ff:b7:d6:b1:96:04:98:2e:77:10:c5:
50:f8:a5:fd:d0:a5:68:be:58:0c:e9:26:3f:d1:1c:d7:f4:17:
a9:00:0e:fd:19:0b:d3:c4:ba:24:76:f4:15:85:c2:ef:bc:f0:
ae:2a:6d:91:69:22:6a:06:df:99:ca:7e:8b:56:f7:07:21:dc:
69:80:76:82:d2:c6:29:97:ca:09:3b:62:e0:55:df:45:8d:7e:
0f:f8:b2:80:c8:99:8e:e8:e4:97:4e:18:1a:d7:48:dc:7e:e3:
8d:38:b0:f1:0f:cf:ad:6d:ae:82:f5:1b:48:d2:c6:bb:74:ca:
56:70:42:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402tTceTsbArKdvGRfKM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi
YjhjMjUwHhcNMjYwMzI5MDkwMTEyWhcNMjYwMzMwMDkwMTEyWjAzMTEwLwYDVQQD
EyhjZWRlM2YzNTBkNTA4NDIwNTg3ZGU0YzEwZTUwZGQxMTc3ZDY2NDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaiOYZ4Wfvv9lxuER0LNaA4iyypf
eDRkcNzg70iPSvxY0/irM0+K2tB4accRXvShBARRm15yrZ2kZ7oVzTaV27c3feEI
eN9HTPsPr1vaZs6rYzOduSyo5gnwxLBcOokj/QxH8S5iUKQ468OVEeZ3XxYl5UYh
6kortlntsKShOLdsXLwex6p6CGZ4HM7R4bag9bsRM3quIY5wLG9Ni7Mn5/8YwWtG
Lv54HQ2X0nD0iB8tR6cpUf/P11OgR+w1hmGkAgdlr8CwFDwnD9F1zNryYNb9GQAu
L48nU6+lNpNRCxQYidK+dzIKQTOn3AteKWwqOhT7Wdg9/xiEn0XOfb5mswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7ePzUNUIQgWH3kwQ5Q3RF31mQOMB8GA1UdIwQY
MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt
Nzk0OTdlZTI1OTg0LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0
LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASS1eDZXk
gBF6ocYGyK03SfGifhVl+Ah9+wGr1GaOlNDOQ3U0NXJaMeHHKjVX/ks1Ki8lv7B5
WQdjaqsbAAvLNvbvKCySE4HMjzMvbzaf43P/+rzUPXmdJb6Hel5FfMYLEowCk26a
D0tlRzHfFDVfwEumS/PxMgx8m0WaN8MMgCOJ4TX4f/+31rGWBJgudxDFUPil/dCl
aL5YDOkmP9Ec1/QXqQAO/RkL08S6JHb0FYXC77zwriptkWkiagbfmcp+i1b3ByHc
aYB2gtLGKZfKCTti4FXfRY1+D/iygMiZjujkl04YGtdI3H7jjTiw8Q/PrW2ugvUb
SNLGu3TKVnBCvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:26 2026 by rpki-client