Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: C+RN4RbJDEFmCX3ZWgduwnJoi+lItIjts/CiayuTjGA=
Subject key identifier: 35:FC:23:91:72:83:9B:EF:AC:A1:7B:BA:DC:5D:3F:88:CB:93:7B:38
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 019F841F3CD0BC53FDEB6EEE07F8E0251E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 14B2
Signing time: Tue 21 Jul 2026 10:01:07 +0000
Manifest this update: Tue 21 Jul 2026 10:01:07 +0000
Manifest next update: Wed 22 Jul 2026 10:01:07 +0000
Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: e1IJ/ObRhxR2mtoF3j4OAg3aAaQBvZc3jr3vX6QdS2I=)
3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1f:3c:d0:bc:53:fd:eb:6e:ee:07:f8:e0:25:1e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Jul 21 10:01:07 2026 GMT
Not After : Jul 22 10:01:07 2026 GMT
Subject: CN=35fc239172839befaca17bbadc5d3f88cb937b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:01:4f:66:f4:b1:b0:0a:9a:7f:31:6e:e4:
8a:48:36:6a:e7:0e:be:57:08:2c:67:eb:1d:88:88:
f4:22:ed:5c:aa:ea:aa:26:da:c6:cf:31:7d:c0:f8:
42:55:b3:d4:9b:d5:8d:6a:71:c7:1f:95:2a:4f:8e:
cf:b3:18:2a:7d:e1:1d:4c:65:57:04:e6:df:2f:b9:
2f:a7:54:d7:06:6e:ca:dd:4e:45:b3:81:da:6c:ee:
9d:d5:8c:0d:36:cb:7b:32:56:d3:08:16:c5:ce:06:
78:00:61:5a:bc:71:18:01:23:8a:60:c3:5c:e4:32:
66:49:c6:21:4b:4e:a3:58:f3:c4:26:12:a1:1d:3b:
0f:e7:fb:4f:93:25:9d:cc:4d:fd:a1:be:58:71:8f:
24:84:25:69:76:62:3c:e2:9f:6b:fd:ae:85:a6:b0:
31:12:1b:f7:e9:02:a2:c8:2f:50:44:8b:35:91:d5:
80:e1:f3:bb:c1:0e:1c:36:0b:2e:cb:12:bc:cf:15:
72:22:6e:b1:e2:45:87:96:92:95:ed:e0:f6:83:56:
57:c6:23:96:35:ef:f7:f6:a2:b3:c8:6b:e3:0b:eb:
50:38:f7:e3:a8:d2:d9:a4:45:01:49:c6:7c:38:08:
e1:28:e9:7a:27:79:ce:c8:52:d3:0e:53:07:80:87:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:23:91:72:83:9B:EF:AC:A1:7B:BA:DC:5D:3F:88:CB:93:7B:38
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f5:8e:3b:c5:3f:e5:ec:fa:20:c8:de:4e:c9:3e:d3:1c:99:
9d:b4:8a:4b:b9:2e:48:85:d0:b7:f6:98:46:6c:97:5c:d5:95:
f9:6f:b7:48:7e:96:41:cd:3d:d0:00:90:69:b6:f7:25:d8:20:
84:05:b5:5b:a8:d1:06:fc:d8:35:05:99:d7:81:1f:91:7c:83:
63:53:c1:33:d2:de:8c:af:7d:7c:71:cd:d9:fd:72:ee:e9:76:
7f:89:fe:be:91:17:5a:e6:66:ce:da:d5:e4:e1:7f:54:65:ee:
fd:16:b3:a3:c3:75:bc:84:88:5a:30:ed:ed:31:de:16:61:f4:
c4:0c:c5:4e:47:6e:92:ad:22:3c:4e:31:e6:c6:58:e4:82:cc:
21:07:5d:96:b2:e0:5d:05:f9:fc:32:c9:39:d1:e0:9c:d4:cd:
97:ae:a2:48:0b:95:d7:10:37:b1:9e:17:d3:71:b3:81:1d:33:
2a:26:63:14:71:eb:ce:56:8e:1f:92:11:33:0d:ee:11:71:24:
eb:38:21:62:e4:34:eb:9a:e9:fd:72:f8:dc:53:14:9f:3c:23:
35:1e:51:da:07:36:5d:de:65:4e:a4:8c:5b:65:69:4b:eb:9b:
62:59:5b:8c:6d:85:15:30:96:fc:50:7d:98:a2:42:9f:86:30:
e3:68:6c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EHzzQvFP9627uB/jgJR5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3
OWFhZDAwHhcNMjYwNzIxMTAwMTA3WhcNMjYwNzIyMTAwMTA3WjAzMTEwLwYDVQQD
EygzNWZjMjM5MTcyODM5YmVmYWNhMTdiYmFkYzVkM2Y4OGNiOTM3YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb8BT2b0sbAKmn8xbuSKSDZq5w6+
VwgsZ+sdiIj0Iu1cquqqJtrGzzF9wPhCVbPUm9WNanHHH5UqT47PsxgqfeEdTGVX
BObfL7kvp1TXBm7K3U5Fs4HabO6d1YwNNst7MlbTCBbFzgZ4AGFavHEYASOKYMNc
5DJmScYhS06jWPPEJhKhHTsP5/tPkyWdzE39ob5YcY8khCVpdmI84p9r/a6FprAx
Ehv36QKiyC9QRIs1kdWA4fO7wQ4cNgsuyxK8zxVyIm6x4kWHlpKV7eD2g1ZXxiOW
Ne/39qKzyGvjC+tQOPfjqNLZpEUBScZ8OAjhKOl6J3nOyFLTDlMHgIfZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX8I5Fyg5vvrKF7utxdP4jLk3s4MB8GA1UdIwQY
MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt
Y2FjYThiODBjOTFjLzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj
LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPWOO8U/
5ez6IMjeTsk+0xyZnbSKS7kuSIXQt/aYRmyXXNWV+W+3SH6WQc090ACQabb3Jdgg
hAW1W6jRBvzYNQWZ14EfkXyDY1PBM9LejK99fHHN2f1y7ul2f4n+vpEXWuZmztrV
5OF/VGXu/Razo8N1vISIWjDt7THeFmH0xAzFTkdukq0iPE4x5sZY5ILMIQddlrLg
XQX5/DLJOdHgnNTNl66iSAuV1xA3sZ4X03GzgR0zKiZjFHHrzlaOH5IRMw3uEXEk
6zghYuQ065rp/XL43FMUnzwjNR5R2gc2Xd5lTqSMW2VpS+ubYllbjG2FFTCW/FB9
mKJCn4Yw42hspQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:44:17 2026 by rpki-client