Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: efWImhSY5PjgdT+DKop9M9FzagybMtcshYrpw+ICAvw=
Subject key identifier: 11:95:16:8E:86:17:7A:37:16:F5:83:2F:78:CE:86:C9:E4:17:5F:1E
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019D386572C73D82C8509FAA1BDF22230BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: bvZFPCvF4Igp5im9CQi4MSj0eOc.roa (hash: SLYZCRjXEHo6LL4IR+75+DXz52FJqPAYvzqcrr6DgqE=)
2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: 6J1gXTLLUCRSYbtUSSVrwSZXNjvWk8wZf7venICZxhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:72:c7:3d:82:c8:50:9f:aa:1b:df:22:23:0b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=1195168e86177a3716f5832f78ce86c9e4175f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:d5:d2:66:b1:26:5c:22:73:f6:6a:de:65:
6f:c2:e2:be:c0:76:21:6e:8f:6e:da:6a:78:86:ee:
17:47:7d:d5:f4:4a:4e:c4:92:f9:ff:e4:e3:41:35:
7e:1d:e2:36:47:c9:55:15:23:8d:fd:ac:44:18:1b:
8a:e4:0a:5a:c6:e3:b1:5d:4b:16:f0:72:1b:60:fd:
8f:94:b4:5f:a0:52:79:6d:0b:04:9e:f6:56:72:7f:
47:fb:5f:ec:02:f5:9a:0b:eb:32:58:fc:ad:1d:99:
f6:78:6c:e9:f5:4e:ca:2c:9a:d1:f9:f9:15:fc:05:
3e:8d:0f:b0:e6:26:a0:a6:89:f8:a8:6c:95:c4:42:
47:66:fe:9f:a5:b7:57:fd:16:0b:9e:8e:49:f2:21:
58:04:19:d4:86:df:fb:ab:27:46:c5:8b:17:35:85:
f9:77:5b:6e:9d:3e:f4:97:bc:1d:cb:1e:31:f3:60:
c4:82:6a:de:0f:47:69:4d:a8:cc:a8:99:6b:60:e6:
a6:db:1e:c5:e7:a4:6b:15:10:d8:78:c1:08:c6:a0:
18:e2:0f:47:77:ca:aa:1a:ba:b7:c0:13:52:6c:39:
d8:88:a4:5b:25:e2:e7:a5:df:1a:b4:1d:97:93:7e:
0f:32:27:be:ad:b1:bb:3b:3f:2e:92:80:fa:87:34:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:16:8E:86:17:7A:37:16:F5:83:2F:78:CE:86:C9:E4:17:5F:1E
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d5:8b:c9:23:a9:f4:c5:68:d3:bb:8e:93:0e:a0:b2:69:3d:
ce:71:33:11:92:0c:8d:a8:1f:57:0a:ef:0b:b8:08:70:ab:3d:
fc:15:50:c3:00:4c:1a:d1:87:42:2f:d5:3a:c0:46:67:58:72:
82:39:f0:8a:48:68:21:47:26:a7:1d:b4:21:9c:21:11:c8:09:
fd:4b:f0:43:22:84:7b:54:44:1d:1d:0f:62:27:3f:ca:85:16:
83:4a:c2:70:6f:1d:cf:ec:63:24:57:7f:f3:f1:9a:41:ec:7b:
87:45:2f:fc:af:2a:24:30:68:57:1c:0c:9d:46:25:c7:69:c7:
f6:e7:80:84:69:13:b3:1f:cb:49:7b:05:90:c9:70:30:fd:a6:
11:75:9c:38:f1:52:a9:d4:0e:b2:e8:a7:8e:8b:b6:91:9e:26:
a5:41:3f:87:2c:4b:c7:4b:0f:94:05:e1:1d:ff:66:d7:1a:ba:
38:b1:69:de:99:b4:fb:2d:98:38:5e:f3:93:be:4a:c4:36:d2:
ce:cc:c8:21:9a:eb:9b:80:81:1f:a3:29:da:8a:3c:51:7b:d4:
0b:8b:cb:a2:85:fd:4b:c7:15:ce:65:ca:72:32:e5:87:b2:9b:
ae:36:ac:f7:db:f4:40:71:58:c2:f3:97:52:c5:6f:20:60:45:
a9:35:f0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXLHPYLIUJ+qG98iIwu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy
ZjhmN2IwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
EygxMTk1MTY4ZTg2MTc3YTM3MTZmNTgzMmY3OGNlODZjOWU0MTc1ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRPV0maxJlwic/Zq3mVvwuK+wHYh
bo9u2mp4hu4XR33V9EpOxJL5/+TjQTV+HeI2R8lVFSON/axEGBuK5ApaxuOxXUsW
8HIbYP2PlLRfoFJ5bQsEnvZWcn9H+1/sAvWaC+syWPytHZn2eGzp9U7KLJrR+fkV
/AU+jQ+w5iagpon4qGyVxEJHZv6fpbdX/RYLno5J8iFYBBnUht/7qydGxYsXNYX5
d1tunT70l7wdyx4x82DEgmreD0dpTajMqJlrYOam2x7F56RrFRDYeMEIxqAY4g9H
d8qqGrq3wBNSbDnYiKRbJeLnpd8atB2Xk34PMie+rbG7Oz8ukoD6hzSBTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGVFo6GF3o3FvWDL3jOhsnkF18eMB8GA1UdIwQY
MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt
ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl
LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNWLySOp
9MVo07uOkw6gsmk9znEzEZIMjagfVwrvC7gIcKs9/BVQwwBMGtGHQi/VOsBGZ1hy
gjnwikhoIUcmpx20IZwhEcgJ/UvwQyKEe1REHR0PYic/yoUWg0rCcG8dz+xjJFd/
8/GaQex7h0Uv/K8qJDBoVxwMnUYlx2nH9ueAhGkTsx/LSXsFkMlwMP2mEXWcOPFS
qdQOsuinjou2kZ4mpUE/hyxLx0sPlAXhHf9m1xq6OLFp3pm0+y2YOF7zk75KxDbS
zszIIZrrm4CBH6Mp2oo8UXvUC4vLooX9S8cVzmXKcjLlh7Kbrjas99v0QHFYwvOX
UsVvIGBFqTXw1A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:33 2026 by rpki-client