Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
File: ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft (raw, json)
Hash identifier: CLeEiJlP/lOobyrL67vETYkkjvoInCyUWPho5/beAoc=
Subject key identifier: A7:5F:29:37:26:50:34:F6:F4:64:73:29:F9:44:1F:32:0E:74:AF:E8
Authority key identifier: 66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
Certificate issuer: /CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Certificate serial: 019F85D6C3697E5E26BC7B759A8E99599B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:12 +0000
Manifest this update: Tue 21 Jul 2026 18:01:12 +0000
Manifest next update: Wed 22 Jul 2026 18:01:12 +0000
Files and hashes: 1: 5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa (hash: QUgenxmjnt6hLRphe+QYqG3ci12uKtkz5r9TvSluXps=)
2: ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl (hash: qG5qZ0ulSOejdQu1uO7vrVfeqyD98JY2rUgCVhyuNSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:c3:69:7e:5e:26:bc:7b:75:9a:8e:99:59:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Validity
Not Before: Jul 21 18:01:12 2026 GMT
Not After : Jul 22 18:01:12 2026 GMT
Subject: CN=a75f2937265034f6f4647329f9441f320e74afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:93:57:4b:d3:0d:00:e0:ea:f1:c4:95:dc:
16:01:be:a4:a6:30:40:4f:73:4d:08:2e:84:ed:c2:
11:60:79:07:9b:c2:58:66:2c:83:4c:7b:3e:2a:a8:
05:91:2e:cd:71:6d:7e:f0:19:68:c9:eb:3b:69:05:
94:87:72:9b:dd:81:1c:46:55:ac:dd:36:0a:2d:07:
e7:9c:20:26:19:42:93:4c:41:08:14:93:d5:5a:d0:
46:37:5f:63:03:b7:0b:e0:10:58:85:3f:4d:38:67:
ac:c0:ad:66:47:6b:79:8d:48:6c:ed:b1:df:71:0b:
59:e6:1d:e6:b4:76:65:02:c5:c4:ae:5d:ba:c1:4b:
35:26:83:fd:5c:ca:28:5a:b6:0c:ac:4b:2d:d4:28:
76:78:ad:ff:26:bc:27:46:9a:fc:15:45:65:12:96:
40:d2:d2:9b:07:3f:be:d9:d4:bd:d9:2b:79:e9:d8:
f5:ba:8d:e9:28:d8:52:c7:a6:f5:08:cb:7a:f0:f8:
fb:d5:f7:e3:aa:f6:de:81:21:37:e2:0c:2a:c5:e9:
11:ba:b4:a7:21:f0:eb:7c:dc:92:14:a5:2c:68:fd:
d0:cb:d8:dd:a6:6a:e8:bf:98:08:0d:5e:74:1d:08:
2a:1c:b4:a2:78:30:ef:da:46:89:09:38:35:40:1b:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5F:29:37:26:50:34:F6:F4:64:73:29:F9:44:1F:32:0E:74:AF:E8
X509v3 Authority Key Identifier:
keyid:66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:db:66:24:11:f4:19:d8:3a:95:e7:88:2f:03:cc:14:b8:83:
8c:73:76:3a:64:fc:37:e9:fb:f2:44:8f:b7:02:b4:a1:52:ff:
a9:13:77:1b:d9:cc:10:c2:32:83:8e:9c:5b:ad:f1:3f:23:88:
76:bc:17:9b:11:51:7f:b7:91:11:a8:d5:a4:d7:00:fa:de:32:
3b:db:b4:09:90:5a:ff:fc:f4:dc:d5:7b:9a:2f:ca:f9:a2:7f:
2e:78:9a:77:82:23:93:10:ce:66:3b:c5:eb:6a:91:df:24:d1:
99:91:3d:37:26:f5:29:38:a8:62:93:04:88:ad:df:48:9c:c8:
12:ed:fe:bb:cd:7e:a9:75:06:56:c7:bd:6b:20:b1:0e:d8:0d:
5a:cc:33:a8:db:30:4d:a9:b8:e7:48:17:03:22:7f:28:55:40:
a9:c8:b5:01:a4:ee:3d:32:c1:76:e3:3f:00:6b:41:c6:b8:3f:
9f:75:64:e4:a8:6e:5e:02:d9:9c:f0:b0:22:ce:15:37:52:84:
12:90:e0:5a:d5:25:a5:1a:ad:dc:5c:9b:15:1b:cb:e6:2a:9d:
ab:c5:33:6b:3d:21:1d:47:bf:5a:8d:c8:da:87:ce:29:dd:29:
93:c3:af:0c:af:9e:46:a6:4f:82:72:37:2f:43:f4:46:3f:64:
46:ed:c3:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1sNpfl4mvHt1mo6ZWZtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDFhZjk4YTdmMDI5YzNmNjk3MmVlMzc0ZjY5ZDIwNWM2
ZjI5ZDIwHhcNMjYwNzIxMTgwMTEyWhcNMjYwNzIyMTgwMTEyWjAzMTEwLwYDVQQD
EyhhNzVmMjkzNzI2NTAzNGY2ZjQ2NDczMjlmOTQ0MWYzMjBlNzRhZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZyTV0vTDQDg6vHEldwWAb6kpjBA
T3NNCC6E7cIRYHkHm8JYZiyDTHs+KqgFkS7NcW1+8Bloyes7aQWUh3Kb3YEcRlWs
3TYKLQfnnCAmGUKTTEEIFJPVWtBGN19jA7cL4BBYhT9NOGeswK1mR2t5jUhs7bHf
cQtZ5h3mtHZlAsXErl26wUs1JoP9XMooWrYMrEst1Ch2eK3/JrwnRpr8FUVlEpZA
0tKbBz++2dS92St56dj1uo3pKNhSx6b1CMt68Pj71ffjqvbegSE34gwqxekRurSn
IfDrfNySFKUsaP3Qy9jdpmrov5gIDV50HQgqHLSieDDv2kaJCTg1QBvv3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdfKTcmUDT29GRzKflEHzIOdK/oMB8GA1UdIwQY
MBaAFGbRr5in8CnD9pcu43T2nSBcbynSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRHdm1LZndLY1AybHk3amRQYWRJRnh2S2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEt
NmFlYWU2M2VkOGZlLzEvWnRHdm1LZndLY1AybHk3amRQYWRJRnh2S2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEtNmFlYWU2M2VkOGZl
LzEvWnRHdm1LZndLY1AybHk3amRQYWRJRnh2S2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldtmJBH0
Gdg6leeILwPMFLiDjHN2OmT8N+n78kSPtwK0oVL/qRN3G9nMEMIyg46cW63xPyOI
drwXmxFRf7eREajVpNcA+t4yO9u0CZBa//z03NV7mi/K+aJ/Lniad4IjkxDOZjvF
62qR3yTRmZE9Nyb1KTioYpMEiK3fSJzIEu3+u81+qXUGVse9ayCxDtgNWswzqNsw
Tam450gXAyJ/KFVAqci1AaTuPTLBduM/AGtBxrg/n3Vk5KhuXgLZnPCwIs4VN1KE
EpDgWtUlpRqt3FybFRvL5iqdq8Uzaz0hHUe/Wo3I2ofOKd0pk8OvDK+eRqZPgnI3
L0P0Rj9kRu3D/w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:18:56 2026 by rpki-client