Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: 4E7IgQj8JbOpq8CzUxCQTPQdThFXIU5NYlGjw3iNSqU=
Subject key identifier: 96:19:CF:43:8F:6D:EB:BC:CB:B8:B0:EB:D6:AF:72:CB:5F:AB:01:6A
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019F189E9DC5469B06C8D5F383C5A80D0E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1919
Signing time: Tue 30 Jun 2026 13:01:16 +0000
Manifest this update: Tue 30 Jun 2026 13:01:16 +0000
Manifest next update: Wed 01 Jul 2026 13:01:16 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: 8e+T6c9au58hX3wV/n1BL+iO2TiD3VTJqcEO2OSJSyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:9d:c5:46:9b:06:c8:d5:f3:83:c5:a8:0d:0e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jun 30 13:01:16 2026 GMT
Not After : Jul 1 13:01:16 2026 GMT
Subject: CN=9619cf438f6debbccbb8b0ebd6af72cb5fab016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:20:2c:81:8d:49:55:f9:0a:4f:10:70:ec:
27:07:68:a6:4b:7d:2e:96:0d:89:b3:1d:44:22:c8:
80:c5:49:96:68:b2:b1:96:36:a6:89:ca:d8:70:3a:
75:d6:0e:50:58:4a:b4:34:b3:83:3a:13:33:29:1e:
01:25:80:58:94:97:52:81:7e:03:53:e5:b2:e9:5b:
c0:9a:74:2d:5d:96:4e:9f:09:aa:40:7a:f3:97:90:
19:81:10:ec:c7:02:1f:fe:a8:e1:69:39:97:36:89:
b0:3f:a1:33:43:32:a1:a6:bb:6b:53:8b:55:95:82:
16:b8:60:c8:d5:bf:9e:95:80:ed:e1:c2:62:13:4a:
4a:7c:b3:26:c8:88:08:22:6f:40:b3:08:f2:d2:58:
85:53:37:ce:4b:5c:7e:00:c1:cf:23:77:51:12:d4:
6e:e7:22:7e:9c:6a:6a:4c:cd:4a:02:74:8f:67:ba:
29:5c:ad:81:34:e7:87:6e:c2:1c:c7:46:40:1a:a1:
08:85:a6:84:d5:23:6b:62:41:7a:1b:49:35:2b:16:
de:44:e5:17:81:0f:17:8e:41:3a:07:ac:a2:30:75:
ae:06:be:64:d2:33:b1:55:05:e2:a7:7f:9a:65:43:
84:f7:97:8a:ec:22:75:c5:43:e3:bf:a4:95:ad:4b:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:CF:43:8F:6D:EB:BC:CB:B8:B0:EB:D6:AF:72:CB:5F:AB:01:6A
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6c:16:58:62:2c:86:16:22:97:e4:43:86:78:f7:21:07:23:
e8:6b:df:56:47:4f:48:8a:9f:2c:9a:a4:35:ab:9a:b9:6c:3b:
d0:dd:8b:68:36:85:de:a7:d4:96:47:3a:26:93:12:23:89:33:
9b:01:2f:bb:47:d5:5c:01:e7:23:c5:47:7b:3f:e0:72:36:ca:
e0:fe:f2:64:f2:97:d1:b9:e5:2b:86:42:f9:ef:e1:6e:ba:e7:
0a:d0:61:91:5a:2c:d3:d4:ba:3e:30:0e:6c:7f:80:0d:37:a0:
01:0d:d1:9c:99:e6:0e:23:6a:d1:17:6f:78:3a:bc:57:c7:a7:
22:46:c4:2d:79:4f:89:83:5a:bc:d0:d4:71:8b:7b:98:f0:78:
d0:c1:5b:55:ef:57:be:f5:7b:66:61:e9:84:bb:ec:f4:5c:c5:
84:bc:71:e7:05:11:39:85:48:25:9a:e1:7a:c9:f7:ae:a4:8e:
29:01:b3:1b:28:91:bc:a7:78:ee:90:04:00:85:c6:11:1b:31:
f6:6d:0b:58:21:43:6d:5b:f9:73:59:4f:c3:1b:2f:7b:cd:4b:
46:13:81:dd:62:39:29:f8:6f:8b:10:5d:f9:6e:28:01:a9:d4:
87:68:f3:d3:29:10:26:36:c2:0e:e4:d8:ca:f2:63:0a:d2:d9:
52:8b:c8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynp3FRpsGyNXzg8WoDQ5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4
MTg0Y2UwHhcNMjYwNjMwMTMwMTE2WhcNMjYwNzAxMTMwMTE2WjAzMTEwLwYDVQQD
Eyg5NjE5Y2Y0MzhmNmRlYmJjY2JiOGIwZWJkNmFmNzJjYjVmYWIwMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uogLIGNSVX5Ck8QcOwnB2imS30u
lg2Jsx1EIsiAxUmWaLKxljamicrYcDp11g5QWEq0NLODOhMzKR4BJYBYlJdSgX4D
U+Wy6VvAmnQtXZZOnwmqQHrzl5AZgRDsxwIf/qjhaTmXNomwP6EzQzKhprtrU4tV
lYIWuGDI1b+elYDt4cJiE0pKfLMmyIgIIm9Aswjy0liFUzfOS1x+AMHPI3dREtRu
5yJ+nGpqTM1KAnSPZ7opXK2BNOeHbsIcx0ZAGqEIhaaE1SNrYkF6G0k1KxbeROUX
gQ8XjkE6B6yiMHWuBr5k0jOxVQXip3+aZUOE95eK7CJ1xUPjv6SVrUsJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYZz0OPbeu8y7iw69avcstfqwFqMB8GA1UdIwQY
MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt
OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk
LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGwWWGIs
hhYil+RDhnj3IQcj6GvfVkdPSIqfLJqkNauauWw70N2LaDaF3qfUlkc6JpMSI4kz
mwEvu0fVXAHnI8VHez/gcjbK4P7yZPKX0bnlK4ZC+e/hbrrnCtBhkVos09S6PjAO
bH+ADTegAQ3RnJnmDiNq0RdveDq8V8enIkbELXlPiYNavNDUcYt7mPB40MFbVe9X
vvV7ZmHphLvs9FzFhLxx5wUROYVIJZrhesn3rqSOKQGzGyiRvKd47pAEAIXGERsx
9m0LWCFDbVv5c1lPwxsve81LRhOB3WI5KfhvixBd+W4oAanUh2jz0ykQJjbCDuTY
yvJjCtLZUovIYg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:13 2026 by rpki-client