Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: 2YcPQNKU9iHdAPegr5VEpPDF4bnpWoqT703M4+7Owp4=
Subject key identifier: 9B:8B:74:CB:AC:A2:2A:95:E7:E3:6F:88:38:88:19:DA:73:A0:9A:D8
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019F859F6EA8BD7038E63F6A5517CE0C33B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0502
Signing time: Tue 21 Jul 2026 17:00:45 +0000
Manifest this update: Tue 21 Jul 2026 17:00:45 +0000
Manifest next update: Wed 22 Jul 2026 17:00:45 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: NU12B20s+VqMqNTNLSgYRskl69HsKZ0EjDHTc5G2SCc=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:6e:a8:bd:70:38:e6:3f:6a:55:17:ce:0c:33:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jul 21 17:00:45 2026 GMT
Not After : Jul 22 17:00:45 2026 GMT
Subject: CN=9b8b74cbaca22a95e7e36f88388819da73a09ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:e7:44:3a:7a:18:60:91:a4:4a:43:cb:82:
0c:30:bb:01:13:6e:80:ca:47:52:f1:5d:df:41:bd:
5b:4b:91:ad:ab:8e:47:eb:e7:81:2d:3a:2a:1e:26:
20:35:92:bf:1d:85:22:36:ce:c5:5f:5d:eb:c3:1d:
40:50:74:61:fc:a7:1d:60:e9:7f:e8:b5:54:66:24:
72:a2:d9:8d:da:6c:32:bf:1a:b3:16:2d:fb:aa:1a:
47:73:1f:5d:6b:bc:ba:c1:99:bf:01:65:01:81:89:
2f:4a:49:e4:bb:a1:a1:73:37:54:c2:f2:dc:ad:3b:
5a:7b:db:a3:f3:26:76:a9:9a:2b:da:74:f3:7f:4a:
38:5b:63:22:c2:0d:1a:bc:76:3b:e3:5c:eb:14:9b:
5c:fe:b2:21:a5:af:a6:f9:04:4f:2f:6f:39:ee:7e:
cb:df:5e:3c:28:d6:4d:9e:48:6e:5f:c3:dc:12:0d:
71:bb:a0:26:c2:c2:eb:fb:d9:ad:3c:48:f0:bb:df:
60:45:18:1e:17:36:2f:e8:d4:48:8e:37:7e:a8:70:
0f:9c:ba:28:d7:37:d0:76:ee:2a:60:77:ad:33:6b:
83:50:63:f0:96:0e:79:79:3a:ca:f3:58:a0:1b:48:
05:dc:58:bb:e2:73:98:34:d5:cb:a3:8d:ca:00:6b:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:74:CB:AC:A2:2A:95:E7:E3:6F:88:38:88:19:DA:73:A0:9A:D8
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:47:05:73:e7:90:c3:3d:f4:a9:9a:ae:72:db:33:86:d1:
6e:78:32:61:2c:69:0d:3b:e2:29:d6:61:c1:6f:53:2e:68:a2:
f4:84:ae:79:60:e9:2d:17:1b:ee:e1:42:b9:e8:42:89:92:ab:
95:f6:bf:71:bd:77:81:f1:35:83:91:91:94:f7:18:ae:b7:68:
92:cc:79:b3:f8:e7:46:ea:fd:3a:62:a0:0f:2f:0d:60:0c:6a:
1a:af:90:70:71:e2:08:f0:e9:78:eb:03:d9:45:4e:79:14:89:
68:70:f5:97:08:a1:54:02:b0:b1:8e:d3:c1:e6:2d:cb:e0:20:
d9:0e:e7:b0:a0:c3:b0:24:4d:6b:4e:1e:c0:4e:8d:ee:04:f0:
34:81:55:0b:36:42:ee:92:f2:c3:7e:8b:57:69:80:52:ef:ad:
79:8c:1e:64:5c:56:60:2b:08:5f:e9:8d:a2:c0:89:1c:fb:99:
86:60:a1:18:90:25:b5:5a:39:f1:76:f1:2e:f0:ba:76:47:dc:
5f:e0:ec:10:c6:ca:22:18:a9:46:99:1f:63:0c:04:9a:98:fb:
18:03:e3:63:71:eb:9b:57:f4:49:c4:5b:19:e7:d0:95:3e:fe:
f4:1f:89:75:eb:9f:46:7b:4b:c5:00:f9:7b:f7:21:7b:48:ec:
75:45:59:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn26ovXA45j9qVRfODDO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz
NDEzMjYwHhcNMjYwNzIxMTcwMDQ1WhcNMjYwNzIyMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg5YjhiNzRjYmFjYTIyYTk1ZTdlMzZmODgzODg4MTlkYTczYTA5YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUTnRDp6GGCRpEpDy4IMMLsBE26A
ykdS8V3fQb1bS5Gtq45H6+eBLToqHiYgNZK/HYUiNs7FX13rwx1AUHRh/KcdYOl/
6LVUZiRyotmN2mwyvxqzFi37qhpHcx9da7y6wZm/AWUBgYkvSknku6GhczdUwvLc
rTtae9uj8yZ2qZor2nTzf0o4W2Miwg0avHY741zrFJtc/rIhpa+m+QRPL2857n7L
3148KNZNnkhuX8PcEg1xu6AmwsLr+9mtPEjwu99gRRgeFzYv6NRIjjd+qHAPnLoo
1zfQdu4qYHetM2uDUGPwlg55eTrK81igG0gF3Fi74nOYNNXLo43KAGvulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuLdMusoiqV5+NviDiIGdpzoJrYMB8GA1UdIwQY
MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt
ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl
LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIBHBXPn
kMM99KmarnLbM4bRbngyYSxpDTviKdZhwW9TLmii9ISueWDpLRcb7uFCuehCiZKr
lfa/cb13gfE1g5GRlPcYrrdoksx5s/jnRur9OmKgDy8NYAxqGq+QcHHiCPDpeOsD
2UVOeRSJaHD1lwihVAKwsY7TweYty+Ag2Q7nsKDDsCRNa04ewE6N7gTwNIFVCzZC
7pLyw36LV2mAUu+teYweZFxWYCsIX+mNosCJHPuZhmChGJAltVo58XbxLvC6dkfc
X+DsEMbKIhipRpkfYwwEmpj7GAPjY3Hrm1f0ScRbGefQlT7+9B+JdeufRntLxQD5
e/che0jsdUVZuw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:20:05 2026 by rpki-client