Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: I/C4nKIBZMr+D2uuRwQXdVc9jYps6RRL14S42GqLt1g=
Subject key identifier: 42:BB:54:5F:92:F7:D0:6E:5A:DF:55:3B:89:92:67:D7:CE:91:1D:50
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019F86447B85E69076DCC646B99B4A26D3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 133F
Signing time: Tue 21 Jul 2026 20:01:02 +0000
Manifest this update: Tue 21 Jul 2026 20:01:02 +0000
Manifest next update: Wed 22 Jul 2026 20:01:02 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: kBsOdoAKs6JtXsvTrrrIQ3V/OSG5ue3WftnpwZDpzq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:7b:85:e6:90:76:dc:c6:46:b9:9b:4a:26:d3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jul 21 20:01:02 2026 GMT
Not After : Jul 22 20:01:02 2026 GMT
Subject: CN=42bb545f92f7d06e5adf553b899267d7ce911d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:43:22:9e:65:77:be:e2:0f:cb:d9:2b:c3:
35:f5:49:a2:ae:e4:26:bc:6f:3b:b0:d3:08:5b:66:
22:a6:86:f1:4d:55:ec:c0:99:0f:11:2e:9c:6b:4c:
56:3f:ad:30:9f:99:0d:b0:ff:4c:9e:46:57:6e:e3:
df:6d:08:1c:04:06:08:96:08:1f:a7:7f:05:8d:c5:
20:34:54:e9:61:c3:53:65:86:58:7c:89:8e:c4:27:
39:bb:0e:d6:99:a1:76:be:e8:02:63:94:0b:d8:9c:
4f:d4:b3:1b:8a:c5:60:32:88:eb:49:56:0a:01:9d:
b5:89:09:8b:ab:2f:71:19:70:42:94:d6:93:75:b8:
84:12:d5:82:bc:6e:e1:a1:dc:24:a8:86:b0:71:24:
53:a7:67:50:18:c4:19:93:a2:49:31:66:cb:c4:e0:
af:c8:8c:b6:4d:92:7d:d2:46:03:1f:e9:ba:41:ea:
b1:4e:c8:cd:00:38:64:54:44:74:8f:1f:7e:05:39:
e7:dc:3f:be:f0:62:a9:b4:72:f0:b1:fc:79:d0:f6:
42:57:5e:c7:d7:32:ae:4e:9a:97:1e:5b:34:1f:65:
d4:0b:64:60:0e:48:16:03:47:59:fd:27:cf:48:21:
4f:63:a6:52:3b:c9:57:21:48:0a:bc:c9:0a:61:2e:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BB:54:5F:92:F7:D0:6E:5A:DF:55:3B:89:92:67:D7:CE:91:1D:50
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:65:f9:10:b6:94:79:de:16:00:91:c3:04:28:91:21:d8:2c:
1a:a5:f9:2d:dc:69:f0:be:1d:88:11:44:cb:74:7f:d5:15:a6:
d9:2e:33:4d:20:7c:5c:64:4c:7e:9a:f1:e3:4a:33:3e:97:1a:
62:33:79:32:c2:a0:88:8e:86:ac:c9:e6:85:69:bc:8b:75:08:
df:87:ba:94:15:14:30:84:7e:ab:2b:eb:74:95:99:4a:11:f0:
14:0e:a9:a4:c6:d1:e8:b1:c1:29:c1:3d:8c:66:de:f4:ef:2a:
10:42:6b:0d:a7:db:3a:9c:6c:30:3b:54:ca:34:8a:34:28:f9:
ac:6d:6b:08:a0:a9:6f:b8:0b:b2:63:db:50:01:8e:27:44:3d:
12:d0:71:6a:24:38:80:43:ff:0e:1c:55:5d:5d:ce:93:5e:df:
70:5e:b2:bf:84:0f:3d:6e:9f:42:c4:a8:36:c7:fb:db:ab:97:
02:e5:89:15:92:0f:8e:89:54:8e:a8:3e:f5:cd:ab:05:13:3d:
15:86:1c:da:2c:8c:b5:56:38:be:56:e6:95:20:44:88:31:20:
21:5d:06:93:a5:10:0f:a8:87:54:aa:c3:52:cb:61:6f:ab:d9:
66:01:1e:05:af:a6:21:52:70:46:8e:f1:73:cc:90:61:4a:c9:
91:04:b4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRHuF5pB23MZGuZtKJtO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0
MmZjNmUwHhcNMjYwNzIxMjAwMTAyWhcNMjYwNzIyMjAwMTAyWjAzMTEwLwYDVQQD
Eyg0MmJiNTQ1ZjkyZjdkMDZlNWFkZjU1M2I4OTkyNjdkN2NlOTExZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1RDIp5ld77iD8vZK8M19UmiruQm
vG87sNMIW2YipobxTVXswJkPES6ca0xWP60wn5kNsP9MnkZXbuPfbQgcBAYIlggf
p38FjcUgNFTpYcNTZYZYfImOxCc5uw7WmaF2vugCY5QL2JxP1LMbisVgMojrSVYK
AZ21iQmLqy9xGXBClNaTdbiEEtWCvG7hodwkqIawcSRTp2dQGMQZk6JJMWbLxOCv
yIy2TZJ90kYDH+m6QeqxTsjNADhkVER0jx9+BTnn3D++8GKptHLwsfx50PZCV17H
1zKuTpqXHls0H2XUC2RgDkgWA0dZ/SfPSCFPY6ZSO8lXIUgKvMkKYS7FNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK7VF+S99BuWt9VO4mSZ9fOkR1QMB8GA1UdIwQY
MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt
ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri
LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWX5ELaU
ed4WAJHDBCiRIdgsGqX5Ldxp8L4diBFEy3R/1RWm2S4zTSB8XGRMfprx40ozPpca
YjN5MsKgiI6GrMnmhWm8i3UI34e6lBUUMIR+qyvrdJWZShHwFA6ppMbR6LHBKcE9
jGbe9O8qEEJrDafbOpxsMDtUyjSKNCj5rG1rCKCpb7gLsmPbUAGOJ0Q9EtBxaiQ4
gEP/DhxVXV3Ok17fcF6yv4QPPW6fQsSoNsf726uXAuWJFZIPjolUjqg+9c2rBRM9
FYYc2iyMtVY4vlbmlSBEiDEgIV0Gk6UQD6iHVKrDUsthb6vZZgEeBa+mIVJwRo7x
c8yQYUrJkQS0EA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:00:35 2026 by rpki-client