
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: wXHrQewV/v/0zokgHsgTGu3KflWKgaTXSP2h3v7A96U=
Subject key identifier: 89:B7:01:31:C2:3E:F5:6D:7F:25:6A:F6:62:55:3E:A2:7E:0B:CC:3B
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019FA30562970C555C9B67725287483EEB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 10:01:06 +0000
Manifest this update: Mon 27 Jul 2026 10:01:06 +0000
Manifest next update: Tue 28 Jul 2026 10:01:06 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: 4VnN8c+H9JTVsJcYRDcyqGeYoGW9G4v/GbVKwpJsY8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:62:97:0c:55:5c:9b:67:72:52:87:48:3e:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Jul 27 10:01:06 2026 GMT
Not After : Jul 28 10:01:06 2026 GMT
Subject: CN=89b70131c23ef56d7f256af662553ea27e0bcc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:f7:e5:34:96:c6:0f:11:d4:1c:26:24:14:
89:9a:7b:3a:61:9e:cd:82:cb:60:a8:19:5d:0c:e1:
ed:4b:06:92:b0:b4:c7:48:a0:00:49:c4:82:32:ba:
91:1b:48:ad:d3:8d:79:69:f5:8e:a2:93:36:fe:04:
3f:5c:52:aa:0d:47:59:e6:d0:47:c9:38:cb:91:eb:
85:e9:53:6a:0c:3a:52:2d:1b:d4:bf:9b:01:8f:46:
eb:db:80:fd:32:fb:a5:d3:c4:d6:5f:c2:c7:b0:62:
d9:ca:cf:4c:66:c7:4e:09:ec:bf:68:88:34:d2:96:
20:8b:3f:b9:2d:61:38:cf:a3:ac:02:b8:23:58:2c:
12:d7:80:a1:31:23:de:70:08:25:f9:48:3c:ac:15:
e1:77:4e:79:0c:d5:6a:35:3c:47:13:f0:88:2b:3e:
d2:59:6a:fa:06:73:ef:79:67:e3:a6:93:3d:ec:c9:
66:9d:82:34:e5:65:dd:f7:e7:92:80:55:62:35:cd:
3f:9d:72:fb:cb:62:ea:b6:aa:d3:ba:20:39:5d:85:
52:f1:77:ec:d4:47:11:fc:d4:16:99:9c:cc:50:35:
ce:2f:32:2c:9d:aa:43:ef:8e:0c:ca:f2:bf:f3:85:
e6:b1:b0:77:59:d5:92:8f:54:a2:1b:ab:e0:27:72:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:01:31:C2:3E:F5:6D:7F:25:6A:F6:62:55:3E:A2:7E:0B:CC:3B
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:72:be:3c:b5:66:bb:73:bb:f7:fc:2b:90:3d:fa:ad:f5:
49:fd:88:cb:7a:4f:bc:ad:79:2e:41:92:38:f9:04:1d:2f:ca:
6f:18:90:e4:ed:6e:9e:60:9e:96:32:fa:4f:34:d6:24:35:66:
63:84:63:33:e2:ed:b4:08:3f:62:64:1f:61:7c:b0:58:69:37:
22:b8:82:cb:95:89:d0:17:34:b7:ee:22:fc:bd:91:4f:64:e1:
91:a6:1c:a4:8f:20:56:44:df:9a:c4:a4:80:d7:19:3f:8e:73:
19:7e:f3:3f:a9:92:72:d8:7f:52:a0:ed:13:72:a9:b7:da:61:
1e:e3:a8:66:9d:f9:36:f5:b3:3a:6f:ef:16:fb:2f:5a:d7:f1:
7d:84:e2:f8:b0:08:ec:c6:72:3c:7c:11:5a:4b:c9:04:21:35:
4c:b3:1a:e5:08:ad:d3:df:16:12:e8:61:80:ed:b2:79:c1:88:
b3:f4:58:bb:93:ed:be:5c:dd:39:c9:b2:38:cc:b3:dd:aa:79:
0e:f1:b4:ee:66:53:30:bd:03:ff:bd:2b:3c:f2:40:cd:a3:1d:
04:10:de:ec:13:48:76:a9:02:1c:b4:41:e8:a1:b6:b6:9c:f9:
68:77:f6:15:44:4e:08:f1:87:73:9b:a0:6c:03:fd:74:80:27:
51:b6:db:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBWKXDFVcm2dyUodIPusZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk
OWJlMDUwHhcNMjYwNzI3MTAwMTA2WhcNMjYwNzI4MTAwMTA2WjAzMTEwLwYDVQQD
Eyg4OWI3MDEzMWMyM2VmNTZkN2YyNTZhZjY2MjU1M2VhMjdlMGJjYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMH35TSWxg8R1BwmJBSJmns6YZ7N
gstgqBldDOHtSwaSsLTHSKAAScSCMrqRG0it0415afWOopM2/gQ/XFKqDUdZ5tBH
yTjLkeuF6VNqDDpSLRvUv5sBj0br24D9Mvul08TWX8LHsGLZys9MZsdOCey/aIg0
0pYgiz+5LWE4z6OsArgjWCwS14ChMSPecAgl+Ug8rBXhd055DNVqNTxHE/CIKz7S
WWr6BnPveWfjppM97MlmnYI05WXd9+eSgFViNc0/nXL7y2LqtqrTuiA5XYVS8Xfs
1EcR/NQWmZzMUDXOLzIsnapD744MyvK/84XmsbB3WdWSj1SiG6vgJ3IY0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm3ATHCPvVtfyVq9mJVPqJ+C8w7MB8GA1UdIwQY
MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt
N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2
LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcepyvjy1
Zrtzu/f8K5A9+q31Sf2Iy3pPvK15LkGSOPkEHS/KbxiQ5O1unmCeljL6TzTWJDVm
Y4RjM+LttAg/YmQfYXywWGk3IriCy5WJ0Bc0t+4i/L2RT2ThkaYcpI8gVkTfmsSk
gNcZP45zGX7zP6mScth/UqDtE3Kpt9phHuOoZp35NvWzOm/vFvsvWtfxfYTi+LAI
7MZyPHwRWkvJBCE1TLMa5Qit098WEuhhgO2yecGIs/RYu5PtvlzdOcmyOMyz3ap5
DvG07mZTML0D/70rPPJAzaMdBBDe7BNIdqkCHLRB6KG2tpz5aHf2FUROCPGHc5ug
bAP9dIAnUbbbIg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:21 2026 by rpki-client