Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: dLj5znqHebbouNFMT0dgeRbj94uTerh6KKhEXwjFydM=
Subject key identifier: 44:AE:99:0C:88:9F:86:86:CF:80:CB:B4:9C:8C:38:0E:CD:3D:2C:9F
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 019D2A046993C47926E45015178DBA507791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 12F8
Signing time: Thu 26 Mar 2026 12:00:25 +0000
Manifest this update: Thu 26 Mar 2026 12:00:25 +0000
Manifest next update: Fri 27 Mar 2026 12:00:25 +0000
Files and hashes: 1: dH6j6Vt6CRtQDf6kD1WzJkiD5Gw.roa (hash: JwifCT1MoH+VlyFq9D1v5Ui+8OntIAiwzYTBK587hVI=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: YeYZOoDkWg9evYH5I9jLf4AXyqXJR3FknpDLQsXK7F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:69:93:c4:79:26:e4:50:15:17:8d:ba:50:77:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Mar 26 12:00:25 2026 GMT
Not After : Mar 27 12:00:25 2026 GMT
Subject: CN=44ae990c889f8686cf80cbb49c8c380ecd3d2c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:28:ce:dc:3d:7e:10:90:91:d2:9c:fa:3f:
4e:8b:e7:b5:ca:b2:64:04:ba:67:6e:06:de:42:01:
1f:db:f7:16:72:a4:c1:96:02:1f:53:e7:7c:d2:88:
01:b4:c6:9f:ff:8c:20:04:a8:94:73:18:c9:31:fb:
b7:37:a8:fb:2a:21:5e:03:66:45:87:ce:1a:26:30:
2e:1a:24:a9:61:7f:99:60:44:11:ac:7a:20:c0:78:
f1:6d:e8:5e:06:15:10:4c:ce:c1:03:95:21:7c:c4:
93:f7:06:6d:99:a1:4e:ea:c8:9d:8c:6d:7c:3e:4d:
69:bd:fa:08:e9:43:bf:1c:c0:eb:d2:74:d6:2a:b4:
1a:44:4b:a9:bb:37:d7:92:e2:62:eb:4b:ac:67:fe:
b5:77:e6:25:6a:17:48:fc:a2:8a:13:1c:8b:39:1e:
cc:36:27:f0:c3:56:68:36:3a:f0:2f:e5:f3:8b:54:
22:b9:27:b5:fa:3b:99:32:f1:21:7d:4d:55:1c:27:
08:1c:e8:a0:cd:93:35:19:82:35:70:d5:59:80:40:
30:0d:62:d3:ce:46:a3:0a:34:8c:a8:55:f3:a1:6e:
51:f0:c7:8d:65:9b:2f:6c:2d:28:68:21:bb:3d:cf:
6f:35:7e:cf:1a:46:d7:67:12:07:45:da:28:40:4b:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AE:99:0C:88:9F:86:86:CF:80:CB:B4:9C:8C:38:0E:CD:3D:2C:9F
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:61:f4:ab:ae:3e:07:dd:b7:1c:2e:ef:6b:03:1d:ad:1f:15:
42:7b:cd:76:70:6a:98:a5:06:93:d2:b1:0f:12:0c:6d:cf:35:
93:df:89:df:94:c7:48:4a:a9:a9:3b:c0:2d:bf:86:e7:4f:b7:
00:ff:80:22:55:e7:99:23:e1:94:13:a0:8b:a2:b9:44:54:d2:
28:d5:5f:d3:64:48:c4:7b:f5:bb:4a:e5:ad:77:9d:fb:95:3f:
14:61:ed:ad:b2:0c:d3:87:fb:a3:03:ec:e5:8d:f9:c8:77:af:
71:f6:ae:13:66:65:6a:0e:f1:82:14:da:f0:a3:e0:17:89:8f:
e5:48:61:e5:d3:de:cb:b1:13:ca:3b:42:5d:fd:13:21:0a:f9:
65:29:95:e6:44:c9:a8:ae:d8:40:d4:c6:15:5c:99:e5:6a:0a:
fb:31:42:a4:f3:37:37:36:8e:42:cb:05:c7:2b:d8:4a:af:82:
3f:1c:cb:ff:d6:75:88:08:45:4e:e3:39:3b:75:db:91:12:8a:
0b:05:c2:09:44:2d:1b:47:7b:70:3d:38:27:3f:b3:1c:1a:71:
8c:34:a6:8a:38:bf:25:f0:dc:da:a4:dc:6a:35:28:ca:4d:ef:
60:1d:da:e1:fb:05:4d:10:5d:19:36:3c:70:38:9c:4b:b5:e9:
d7:1f:f1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBGmTxHkm5FAVF426UHeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzBmM2QxMTE4MzYxYjU5ZjMzMTVmNTkxNjQzZTFkYWJi
YjIwMDgwHhcNMjYwMzI2MTIwMDI1WhcNMjYwMzI3MTIwMDI1WjAzMTEwLwYDVQQD
Eyg0NGFlOTkwYzg4OWY4Njg2Y2Y4MGNiYjQ5YzhjMzgwZWNkM2QyYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppcoztw9fhCQkdKc+j9Oi+e1yrJk
BLpnbgbeQgEf2/cWcqTBlgIfU+d80ogBtMaf/4wgBKiUcxjJMfu3N6j7KiFeA2ZF
h84aJjAuGiSpYX+ZYEQRrHogwHjxbeheBhUQTM7BA5UhfMST9wZtmaFO6sidjG18
Pk1pvfoI6UO/HMDr0nTWKrQaREupuzfXkuJi60usZ/61d+YlahdI/KKKExyLOR7M
Nifww1ZoNjrwL+Xzi1QiuSe1+juZMvEhfU1VHCcIHOigzZM1GYI1cNVZgEAwDWLT
zkajCjSMqFXzoW5R8MeNZZsvbC0oaCG7Pc9vNX7PGkbXZxIHRdooQEtFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESumQyIn4aGz4DLtJyMOA7NPSyfMB8GA1UdIwQY
MBaAFM9w89ERg2G1nzMV9ZFkPh2ruyAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEt
ZmJiOWY5MWM4Y2NlLzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEtZmJiOWY5MWM4Y2Nl
LzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWH0q64+
B923HC7vawMdrR8VQnvNdnBqmKUGk9KxDxIMbc81k9+J35THSEqpqTvALb+G50+3
AP+AIlXnmSPhlBOgi6K5RFTSKNVf02RIxHv1u0rlrXed+5U/FGHtrbIM04f7owPs
5Y35yHevcfauE2Zlag7xghTa8KPgF4mP5Uhh5dPey7ETyjtCXf0TIQr5ZSmV5kTJ
qK7YQNTGFVyZ5WoK+zFCpPM3NzaOQssFxyvYSq+CPxzL/9Z1iAhFTuM5O3XbkRKK
CwXCCUQtG0d7cD04Jz+zHBpxjDSmiji/JfDc2qTcajUoyk3vYB3a4fsFTRBdGTY8
cDicS7Xp1x/xqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:22 2026 by rpki-client