Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: IReIY1Fv7P7BoWm9Ia5+G8B0Re4PodKzmMbrre34g3g=
Subject key identifier: FE:78:91:67:04:2C:B8:CF:3D:2A:C4:87:41:55:50:3D:5B:31:80:19
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019D29CE35068E28003773BDDD06A588D6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 110E
Signing time: Thu 26 Mar 2026 11:01:12 +0000
Manifest this update: Thu 26 Mar 2026 11:01:12 +0000
Manifest next update: Fri 27 Mar 2026 11:01:12 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: nJxdR5BUa9TutNWXSs6DXavrVxCrTWdcgWDvhoHxI7s=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:35:06:8e:28:00:37:73:bd:dd:06:a5:88:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Mar 26 11:01:12 2026 GMT
Not After : Mar 27 11:01:12 2026 GMT
Subject: CN=fe789167042cb8cf3d2ac4874155503d5b318019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:c0:be:97:7b:bd:fd:e1:3b:33:f2:ac:e5:
89:b3:4d:89:4e:b2:83:ca:5d:06:45:b9:f1:3b:e9:
bb:69:8b:1e:1f:c7:f0:7c:76:29:16:7e:e1:c8:ad:
cd:22:6b:11:44:45:15:37:9c:a9:62:f4:cf:0e:25:
d1:46:ad:e2:e7:36:03:55:2e:0e:92:54:8d:e2:4a:
08:87:c5:a8:f0:a5:77:49:8e:e4:d7:cb:96:60:c8:
a2:f3:64:05:d7:7e:de:1a:a2:30:39:16:d1:3c:28:
4f:0e:8a:a0:ef:e4:fa:7e:a4:5d:5a:f5:54:42:5b:
0b:92:0f:9b:3f:35:7f:ce:0c:10:3e:cd:1e:61:6f:
12:16:3b:4d:ef:88:c8:a9:5a:eb:fa:61:f1:64:af:
1d:a8:49:7c:28:1f:d2:96:ed:f8:d6:cc:43:9d:8f:
0c:20:4e:4b:1f:87:2c:2e:a7:50:d5:46:5b:2b:49:
c7:f5:64:51:6d:73:9a:56:8a:11:9b:a8:9c:8b:b5:
cd:8d:4f:24:7f:03:4a:ca:b4:81:03:ba:2a:f1:16:
76:49:28:f1:67:da:cb:4d:a2:b8:cd:c0:57:01:3f:
c4:bb:11:4f:04:89:8f:6f:a9:ed:0e:e5:ed:26:06:
df:84:2f:0a:38:70:45:e1:40:6c:ce:ef:fc:da:c0:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:91:67:04:2C:B8:CF:3D:2A:C4:87:41:55:50:3D:5B:31:80:19
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:db:2a:98:24:04:49:f1:59:59:8f:cf:c5:be:d7:82:e1:
86:99:f4:3d:39:8d:7c:2c:ad:c1:10:f5:20:d0:9b:61:08:f1:
fa:f8:b7:4b:42:a1:80:07:6c:3d:58:34:e3:10:af:ac:45:01:
98:5f:bd:c4:a8:15:4b:00:4f:f2:68:76:a4:c6:b9:78:28:ef:
29:81:eb:58:07:c9:63:23:89:d1:ed:41:0d:4e:86:1d:c1:b8:
8b:44:a5:71:ff:0c:f8:f6:68:cc:34:ee:c9:e6:e7:74:45:80:
8b:55:26:ff:06:dd:0a:94:1d:32:c0:49:11:8c:61:d3:d2:6e:
1c:2b:9b:c9:32:99:3e:30:0e:a1:65:d5:3b:d7:b0:40:04:66:
ab:48:fb:f8:66:95:b3:c8:92:5a:1a:6d:8a:9f:23:3f:da:72:
87:b3:a4:85:7d:e6:79:7f:b0:45:ed:62:7d:5d:b1:4b:7e:9a:
6e:ef:40:86:83:57:43:32:27:73:49:1a:71:c3:bf:75:e0:c6:
ba:0a:d7:6e:2b:8a:94:26:f5:76:b7:ea:30:da:ad:58:c0:a2:
db:73:7c:93:67:0a:64:11:a6:0c:c9:97:0f:16:be:e2:67:44:
3b:13:9a:b2:d0:a4:72:e2:8c:9d:f0:b5:a5:d7:e1:ea:8d:06:
5a:81:07:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzjUGjigAN3O93QaliNbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli
YzA1YTcwHhcNMjYwMzI2MTEwMTEyWhcNMjYwMzI3MTEwMTEyWjAzMTEwLwYDVQQD
EyhmZTc4OTE2NzA0MmNiOGNmM2QyYWM0ODc0MTU1NTAzZDViMzE4MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/bAvpd7vf3hOzPyrOWJs02JTrKD
yl0GRbnxO+m7aYseH8fwfHYpFn7hyK3NImsRREUVN5ypYvTPDiXRRq3i5zYDVS4O
klSN4koIh8Wo8KV3SY7k18uWYMii82QF137eGqIwORbRPChPDoqg7+T6fqRdWvVU
QlsLkg+bPzV/zgwQPs0eYW8SFjtN74jIqVrr+mHxZK8dqEl8KB/Slu341sxDnY8M
IE5LH4csLqdQ1UZbK0nH9WRRbXOaVooRm6ici7XNjU8kfwNKyrSBA7oq8RZ2SSjx
Z9rLTaK4zcBXAT/EuxFPBImPb6ntDuXtJgbfhC8KOHBF4UBszu/82sAdrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP54kWcELLjPPSrEh0FVUD1bMYAZMB8GA1UdIwQY
MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt
MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2
LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrXbKpgk
BEnxWVmPz8W+14Lhhpn0PTmNfCytwRD1INCbYQjx+vi3S0KhgAdsPVg04xCvrEUB
mF+9xKgVSwBP8mh2pMa5eCjvKYHrWAfJYyOJ0e1BDU6GHcG4i0Slcf8M+PZozDTu
yebndEWAi1Um/wbdCpQdMsBJEYxh09JuHCubyTKZPjAOoWXVO9ewQARmq0j7+GaV
s8iSWhptip8jP9pyh7OkhX3meX+wRe1ifV2xS36abu9AhoNXQzInc0kaccO/deDG
ugrXbiuKlCb1drfqMNqtWMCi23N8k2cKZBGmDMmXDxa+4mdEOxOastCkcuKMnfC1
pdfh6o0GWoEHyw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:53 2026 by rpki-client