Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: h5G3venccGeJZaiKpq0opx5Qgi9CDWbzxyDecO+pfE0=
Subject key identifier: AE:40:00:30:26:AB:3A:DA:E5:F9:89:47:B8:A5:9E:20:D4:63:7B:8D
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 019D26CCBBF62CCDC4058F43C815F8DE57C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: sNlQzKU2maKEL5QJ12H4e9lzmKmdnfxEKnWMug6Q4pw=)
2: zoiA9GOl58HURHRI6-GRtkRSEfA.roa (hash: oLHIfegomnibpy5nfP5FLa3cn06nEqDH56LteMyYgZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bb:f6:2c:cd:c4:05:8f:43:c8:15:f8:de:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=ae40003026ab3adae5f98947b8a59e20d4637b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:ba:cd:8b:94:df:18:65:65:7e:98:63:a1:
86:90:2d:8e:37:b9:46:d1:2a:ea:fa:55:cc:fb:c5:
e8:c7:56:02:0a:73:e8:46:fd:58:ed:1f:97:04:54:
c9:f7:8a:d9:33:30:c0:53:5a:c2:ca:24:76:cd:9b:
bc:7f:53:13:4f:7c:3b:c3:68:c0:1c:7e:da:64:5d:
c0:c3:c5:8b:49:a5:6f:de:ba:00:cc:f6:4d:a8:48:
97:65:d7:f3:17:33:7e:2f:22:a2:25:79:d4:f5:07:
9f:e8:99:11:86:d1:10:92:20:70:0f:57:9b:df:2a:
5b:48:d2:18:0a:c5:5f:56:ad:c4:e9:8e:a3:31:29:
ba:d0:6a:bb:89:d9:f2:e3:1d:a2:d9:dd:0e:2b:d4:
6f:62:6a:15:51:f0:63:48:e4:8d:54:a9:5f:09:76:
f6:92:a3:91:02:fb:ed:10:a5:60:59:43:fc:3b:08:
66:8a:14:5a:42:7f:7a:df:54:2e:8b:62:2e:f3:4e:
09:5b:58:6c:06:86:dc:f0:a9:4c:2c:d2:15:92:1c:
38:a7:34:0f:fe:d9:9b:86:ea:5b:9b:19:4f:7c:b2:
9a:b3:ee:b5:1c:e1:af:ca:05:f1:06:a0:e4:bb:d8:
83:e6:58:be:78:29:1e:68:f6:81:30:52:63:96:bb:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:00:30:26:AB:3A:DA:E5:F9:89:47:B8:A5:9E:20:D4:63:7B:8D
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6d:70:0c:06:cf:35:8f:31:e5:13:8b:37:e3:2d:77:c0:17:
06:8e:5b:d8:4f:2e:f7:18:74:a4:e6:89:a1:9c:1e:fd:41:6e:
14:18:6b:d3:8d:be:dd:c7:8f:a1:13:5b:c9:8a:e3:e7:9b:0c:
5a:a2:4f:b9:46:0b:db:90:5f:98:f0:34:58:0a:ec:6c:8e:b4:
82:39:01:ae:bd:7e:bf:bc:86:34:e9:7d:21:37:2e:d9:9c:0d:
f7:c1:68:3d:f6:0c:fb:76:43:88:95:72:fc:f1:d7:90:7e:38:
23:3c:32:65:55:ec:ad:49:6a:a4:f4:a3:9d:53:60:9c:88:8f:
ae:53:91:03:a0:3e:1c:41:dc:7a:39:ad:50:20:67:e3:8f:3c:
dd:db:15:a8:8c:5c:e9:9a:91:2d:24:d4:24:5e:89:f2:f7:51:
9c:06:0e:b4:29:b4:c4:7f:41:2d:bb:3c:ee:12:f7:5e:d4:53:
dd:92:15:fc:41:d9:9b:aa:81:3c:61:89:51:7a:ff:2e:38:c2:
6f:ee:30:7a:df:f3:e2:72:e1:c0:8f:52:40:14:5e:bd:0d:b4:
02:48:27:eb:c3:17:51:8c:64:1f:da:5a:43:3a:9e:b1:ea:d6:
da:c6:8f:63:00:8d:76:1d:79:1b:fd:17:d6:04:62:08:d2:1f:
94:89:7f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzLv2LM3EBY9DyBX43lfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2YyNmI1NDFmMGJiYThhNWNlNzFlYTUzODExYjQ2YzE2
NTdhYjMwHhcNMjYwMzI1MjEwMDQ0WhcNMjYwMzI2MjEwMDQ0WjAzMTEwLwYDVQQD
EyhhZTQwMDAzMDI2YWIzYWRhZTVmOTg5NDdiOGE1OWUyMGQ0NjM3YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0au6zYuU3xhlZX6YY6GGkC2ON7lG
0Srq+lXM+8Xox1YCCnPoRv1Y7R+XBFTJ94rZMzDAU1rCyiR2zZu8f1MTT3w7w2jA
HH7aZF3Aw8WLSaVv3roAzPZNqEiXZdfzFzN+LyKiJXnU9Qef6JkRhtEQkiBwD1eb
3ypbSNIYCsVfVq3E6Y6jMSm60Gq7idny4x2i2d0OK9RvYmoVUfBjSOSNVKlfCXb2
kqORAvvtEKVgWUP8OwhmihRaQn9631Qui2Iu804JW1hsBobc8KlMLNIVkhw4pzQP
/tmbhupbmxlPfLKas+61HOGvygXxBqDku9iD5li+eCkeaPaBMFJjlrv5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5AADAmqzra5fmJR7ilniDUY3uNMB8GA1UdIwQY
MBaAFP8/JrVB8Luopc5x6lOBG0bBZXqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYt
MWMyNjBiMWUyOGQxLzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYtMWMyNjBiMWUyOGQx
LzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbW1wDAbP
NY8x5ROLN+Mtd8AXBo5b2E8u9xh0pOaJoZwe/UFuFBhr042+3cePoRNbyYrj55sM
WqJPuUYL25BfmPA0WArsbI60gjkBrr1+v7yGNOl9ITcu2ZwN98FoPfYM+3ZDiJVy
/PHXkH44IzwyZVXsrUlqpPSjnVNgnIiPrlORA6A+HEHcejmtUCBn44883dsVqIxc
6ZqRLSTUJF6J8vdRnAYOtCm0xH9BLbs87hL3XtRT3ZIV/EHZm6qBPGGJUXr/LjjC
b+4wet/z4nLhwI9SQBRevQ20Akgn68MXUYxkH9paQzqeserW2saPYwCNdh15G/0X
1gRiCNIflIl/fw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:09 2026 by rpki-client