Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: Q/9dHS99YlUbiYo7ltDnENQwALrucQkbL9gtoLltlqg=
Subject key identifier: 5A:77:57:3F:25:3F:75:30:12:3B:48:E0:34:4E:82:0F:98:A9:35:FB
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019F9EF23059F269A191DDECA101D07F6A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 15A1
Signing time: Sun 26 Jul 2026 15:01:39 +0000
Manifest this update: Sun 26 Jul 2026 15:01:39 +0000
Manifest next update: Mon 27 Jul 2026 15:01:39 +0000
Files and hashes: 1: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (hash: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: FWw+ecmz1uwiz4Aj6iD+E83MHXJzk8NKbW4r+WM7/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:30:59:f2:69:a1:91:dd:ec:a1:01:d0:7f:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jul 26 15:01:39 2026 GMT
Not After : Jul 27 15:01:39 2026 GMT
Subject: CN=5a77573f253f7530123b48e0344e820f98a935fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:32:c2:bf:d0:79:2c:a5:3e:3f:4a:59:49:
1b:89:45:17:66:6b:e8:ff:3f:1a:a9:85:29:aa:5c:
5c:6d:ec:c2:f2:88:da:f1:fc:dd:c7:9a:85:d9:1c:
25:1f:1b:f8:fa:0f:d8:4f:a3:80:1f:da:c9:a8:64:
c4:c1:36:76:4d:a4:87:7f:87:af:b6:5e:4a:f9:2d:
cc:6c:d6:88:d0:c6:6e:1a:72:d8:09:68:26:6c:c0:
73:d3:cb:91:ed:5f:86:a7:fa:c8:1f:48:fe:5d:36:
3f:af:60:72:07:71:aa:eb:79:08:93:3c:e6:6c:06:
a1:f8:db:17:8a:9c:b3:13:75:ea:4d:0c:af:27:31:
28:f4:37:c2:28:5d:6c:b8:b6:ba:7d:4f:ff:99:7c:
f8:3d:5b:e3:d3:8e:a3:0c:e5:79:2f:cb:b1:98:9d:
8f:62:0f:4b:e5:14:fe:9c:80:2c:02:30:9a:b2:cb:
37:9e:3f:d7:5f:16:b1:bb:ab:5f:c3:1b:5e:af:bc:
22:ef:9b:bc:6b:f2:32:12:c8:09:6c:c8:94:0b:31:
2c:ee:3c:8f:0c:9a:af:a1:f2:73:9f:f5:96:a8:70:
a1:e6:fb:3d:c5:7f:00:ed:60:d7:4f:15:2a:23:98:
bc:25:72:47:58:fc:8b:68:6d:59:bd:40:0f:41:88:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:57:3F:25:3F:75:30:12:3B:48:E0:34:4E:82:0F:98:A9:35:FB
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:7b:86:5f:73:be:2e:e5:a9:6e:02:75:88:2d:ce:1a:97:
0c:c4:01:e0:c0:1c:50:47:d1:8e:ac:08:43:dd:b6:22:f9:76:
ae:86:7d:d9:d1:3a:fb:77:c5:3f:7a:0e:23:da:45:e2:04:f0:
c9:a6:f4:00:fb:af:49:a5:c8:a0:81:fd:94:1e:3c:f1:6e:8a:
62:28:93:ec:78:20:7c:e4:e3:a3:9d:93:f7:ec:6e:02:f4:0d:
37:47:eb:a0:7b:86:80:ee:64:87:6b:1f:0c:1d:32:76:9b:32:
c0:86:82:2d:47:a1:54:ae:16:92:fb:03:33:a0:8d:97:d7:9e:
e0:c1:dd:c5:eb:18:57:a5:1a:37:de:f0:bd:64:d1:3d:ac:bf:
03:e8:50:31:38:ab:cf:45:8c:6b:31:bc:68:42:1a:72:65:e8:
7d:96:d3:48:e0:2a:c6:b0:67:b8:ae:8c:9c:29:96:ad:5c:a2:
f8:15:a6:47:e6:89:61:6f:ce:11:ba:38:01:0e:0a:ea:b9:0a:
f0:23:38:a9:0e:e0:22:b0:d8:70:9b:38:31:9c:38:ef:a1:92:
4b:3a:1b:44:56:8e:4f:7d:ae:3d:e8:c2:33:80:89:fd:27:83:
a0:52:f0:cb:97:b9:dc:f8:93:44:ff:f4:32:a3:15:8c:e6:8c:
a5:9f:d3:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+e8jBZ8mmhkd3soQHQf2qNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTJiNTM0MjZmYjYxNGQ5YTVhNmQ4M2Y0MDA1NjZhNjYw
YzlkZDIwHhcNMjYwNzI2MTUwMTM5WhcNMjYwNzI3MTUwMTM5WjAzMTEwLwYDVQQD
Eyg1YTc3NTczZjI1M2Y3NTMwMTIzYjQ4ZTAzNDRlODIwZjk4YTkzNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lcywr/QeSylPj9KWUkbiUUXZmvo
/z8aqYUpqlxcbezC8oja8fzdx5qF2RwlHxv4+g/YT6OAH9rJqGTEwTZ2TaSHf4ev
tl5K+S3MbNaI0MZuGnLYCWgmbMBz08uR7V+Gp/rIH0j+XTY/r2ByB3Gq63kIkzzm
bAah+NsXipyzE3XqTQyvJzEo9DfCKF1suLa6fU//mXz4PVvj046jDOV5L8uxmJ2P
Yg9L5RT+nIAsAjCasss3nj/XXxaxu6tfwxter7wi75u8a/IyEsgJbMiUCzEs7jyP
DJqvofJzn/WWqHCh5vs9xX8A7WDXTxUqI5i8JXJHWPyLaG1ZvUAPQYhe9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp3Vz8lP3UwEjtI4DROgg+YqTX7MB8GA1UdIwQY
MBaAFJmStTQm+2FNmlptg/QAVmpmDJ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgt
NzkxYTYyZDJkOGFiLzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgtNzkxYTYyZDJkOGFi
LzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVB7hl9z
vi7lqW4CdYgtzhqXDMQB4MAcUEfRjqwIQ922Ivl2roZ92dE6+3fFP3oOI9pF4gTw
yab0APuvSaXIoIH9lB488W6KYiiT7HggfOTjo52T9+xuAvQNN0froHuGgO5kh2sf
DB0ydpsywIaCLUehVK4WkvsDM6CNl9ee4MHdxesYV6UaN97wvWTRPay/A+hQMTir
z0WMazG8aEIacmXofZbTSOAqxrBnuK6MnCmWrVyi+BWmR+aJYW/OEbo4AQ4K6rkK
8CM4qQ7gIrDYcJs4MZw476GSSzobRFaOT32uPejCM4CJ/SeDoFLwy5e53PiTRP/0
MqMVjOaMpZ/TPQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:56:43 2026 by rpki-client