Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: x4eP4tmsavRazjMaDK8jI/yiSJP2sYx31ce1Z2tIcsw=
Subject key identifier: DF:5E:CB:89:90:C9:1E:7F:B3:F7:88:3C:87:02:E7:7A:72:9B:48:27
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019D26CCE47D573DE2D41672764F0D7A9713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 027E
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: 5Po2qtadpqTNf7p3MMLaT46C8vE.roa (hash: nFjym/eYekZGGRObI9fvHB7nvqlWQEguTM24IpDntwA=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: MOFDrZSRZ6eJ8G9Ko5qfQwny/qZBfHYDr3AqWPRHBTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e4:7d:57:3d:e2:d4:16:72:76:4f:0d:7a:97:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=df5ecb8990c91e7fb3f7883c8702e77a729b4827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:35:9f:7f:87:ad:f3:d5:4c:36:5d:0e:22:
4e:18:3d:41:13:fd:81:8a:ff:51:da:e0:77:b7:39:
31:39:30:72:5a:6d:27:7c:05:a9:c7:69:2c:af:3f:
e9:71:3f:f9:1a:a0:3e:2d:e2:46:47:c8:1b:10:19:
bd:a9:5e:64:6e:86:4f:29:ba:d7:21:75:ef:2f:66:
82:76:f4:da:19:6e:41:ac:92:52:b3:ef:f8:2e:9a:
36:d6:82:bf:e4:fa:e9:c5:91:ff:b2:16:96:c9:4c:
17:cb:5b:33:6e:a1:95:cf:aa:23:6d:46:48:62:98:
2f:5f:1f:35:67:e8:ab:96:ad:ba:1b:e6:e9:e6:a8:
83:4a:81:f5:0c:99:e8:da:2a:5f:0f:ab:d8:97:ad:
3b:f9:da:59:b7:ce:4e:87:ff:b3:bb:3c:42:3c:c7:
16:8e:8d:b9:a8:33:0e:be:96:85:93:83:6b:d4:67:
fd:b6:0e:3e:d4:02:f1:a9:4f:12:e2:b1:13:cc:09:
03:a3:92:37:6f:bd:6b:c0:bf:2a:c5:32:1d:50:e8:
da:1d:86:e5:e2:92:4a:7e:54:b3:f0:3f:5d:9b:00:
0e:24:ca:23:5a:f3:05:bf:94:94:28:36:55:71:d7:
56:56:8d:09:78:5d:61:38:25:d2:f8:cb:d4:e8:b2:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:CB:89:90:C9:1E:7F:B3:F7:88:3C:87:02:E7:7A:72:9B:48:27
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6d:10:66:51:d9:f4:40:b8:40:29:bf:b0:8a:e9:28:13:07:
c1:b7:0f:21:4b:c1:2d:f2:c0:25:37:4d:ac:06:f4:1d:2c:c9:
57:e3:af:33:ef:8e:64:7a:67:42:88:43:cd:64:47:b5:aa:5a:
31:b7:17:2b:bc:29:cb:71:b2:85:61:d1:95:c1:76:1e:c3:a0:
75:d9:27:a2:c5:39:73:8c:dc:32:70:66:0f:4e:0f:eb:34:10:
ea:4f:01:4e:b4:d2:4f:af:27:e2:ce:f3:e5:7c:9f:a8:f1:7b:
eb:0a:a8:2a:ef:ef:97:2f:e5:bd:0c:61:c6:b0:4f:c9:ef:c3:
82:e2:82:a7:e3:42:82:11:f7:ca:0e:8b:cc:47:b1:4f:d8:ab:
53:73:2f:d8:a0:ae:30:bd:1c:a7:37:2e:fc:f7:d6:74:2e:c0:
00:93:45:25:0d:a2:92:a1:a8:e6:e7:86:0b:80:fe:14:d9:b8:
a6:9b:94:30:d1:a9:dc:71:fe:54:60:76:4b:af:93:2f:04:98:
62:d4:6b:65:e0:65:e6:62:ee:33:96:09:1c:80:0c:69:56:de:
97:ce:6a:21:6c:6f:3d:d7:2e:e2:02:d5:d6:f4:68:78:ff:9d:
19:fa:68:f4:4a:3d:48:6c:bb:3c:c7:16:d0:5a:55:86:7a:d1:
10:5a:a0:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOR9Vz3i1BZydk8NepcTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi
OTVmMzEwHhcNMjYwMzI1MjEwMDU1WhcNMjYwMzI2MjEwMDU1WjAzMTEwLwYDVQQD
EyhkZjVlY2I4OTkwYzkxZTdmYjNmNzg4M2M4NzAyZTc3YTcyOWI0ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSA1n3+HrfPVTDZdDiJOGD1BE/2B
iv9R2uB3tzkxOTByWm0nfAWpx2ksrz/pcT/5GqA+LeJGR8gbEBm9qV5kboZPKbrX
IXXvL2aCdvTaGW5BrJJSs+/4Lpo21oK/5PrpxZH/shaWyUwXy1szbqGVz6ojbUZI
YpgvXx81Z+irlq26G+bp5qiDSoH1DJno2ipfD6vYl607+dpZt85Oh/+zuzxCPMcW
jo25qDMOvpaFk4Nr1Gf9tg4+1ALxqU8S4rETzAkDo5I3b71rwL8qxTIdUOjaHYbl
4pJKflSz8D9dmwAOJMojWvMFv5SUKDZVcddWVo0JeF1hOCXS+MvU6LJPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9ey4mQyR5/s/eIPIcC53pym0gnMB8GA1UdIwQY
MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt
ZTExMWYzMjI2MzZhLzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh
LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm0QZlHZ
9EC4QCm/sIrpKBMHwbcPIUvBLfLAJTdNrAb0HSzJV+OvM++OZHpnQohDzWRHtapa
MbcXK7wpy3GyhWHRlcF2HsOgddknosU5c4zcMnBmD04P6zQQ6k8BTrTST68n4s7z
5XyfqPF76wqoKu/vly/lvQxhxrBPye/DguKCp+NCghH3yg6LzEexT9irU3Mv2KCu
ML0cpzcu/PfWdC7AAJNFJQ2ikqGo5ueGC4D+FNm4ppuUMNGp3HH+VGB2S6+TLwSY
YtRrZeBl5mLuM5YJHIAMaVbel85qIWxvPdcu4gLV1vRoeP+dGfpo9Eo9SGy7PMcW
0FpVhnrREFqgHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:01 2026 by rpki-client