Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: Ih4TCCHs43OCeAbyQ28HkPjUctRGphNgT8TwygsMNe8=
Subject key identifier: C2:DA:21:9B:D4:53:F7:46:A5:4F:D4:28:97:58:E8:34:37:EF:C8:33
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 019FA33C7B913F555179914E0993E7653DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 11:01:17 +0000
Manifest this update: Mon 27 Jul 2026 11:01:17 +0000
Manifest next update: Tue 28 Jul 2026 11:01:17 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: ItPqgE6XefK8dBQz559r3D97Mh2Gq1LsQEe2fEYLK4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:7b:91:3f:55:51:79:91:4e:09:93:e7:65:3d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Jul 27 11:01:17 2026 GMT
Not After : Jul 28 11:01:17 2026 GMT
Subject: CN=c2da219bd453f746a54fd4289758e83437efc833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:69:b9:67:05:69:55:42:1e:0d:7e:90:f5:
5b:32:1a:ba:36:7c:00:e7:32:ba:ac:87:ea:f8:38:
28:59:00:e3:c6:84:d4:79:f3:5a:44:fe:7a:ca:22:
11:ec:c2:c4:45:0c:a5:07:24:15:2d:e8:f2:03:d4:
1d:ad:f5:69:ad:60:36:fd:1f:24:66:a0:36:47:77:
67:30:2b:7c:9a:0d:01:cf:4e:c3:f8:a0:3f:6e:31:
e0:d2:4f:65:87:cc:8f:92:f6:25:ef:a6:5d:bf:f7:
5f:27:5e:0c:5e:c0:97:91:28:77:32:17:48:10:ca:
5b:ad:5d:a4:d8:24:32:2a:3b:4a:e8:c4:12:3f:70:
bf:91:c9:13:69:19:8f:4c:7d:a9:0c:94:c9:42:20:
3e:62:42:4a:ff:77:eb:a9:b7:df:76:7d:71:e7:92:
dc:ca:40:a4:49:44:6a:9b:80:22:37:bc:fa:59:5d:
d2:59:f1:5e:72:48:f6:ba:aa:3b:b4:18:62:71:e0:
68:6c:c2:8d:16:29:21:77:2e:7a:7e:47:b0:52:9b:
e3:c3:c1:3c:f5:d0:df:80:d1:a8:6d:98:a5:2b:45:
60:e3:6f:c0:e7:eb:ce:0a:9e:b8:89:e6:be:48:a3:
48:62:21:eb:05:4c:b7:ad:a8:29:96:31:e1:3a:2b:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DA:21:9B:D4:53:F7:46:A5:4F:D4:28:97:58:E8:34:37:EF:C8:33
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5c:13:5a:f3:f6:f7:ec:ac:48:ce:6c:43:80:25:5a:9e:f3:
14:33:5c:64:49:18:5f:99:c3:7b:c8:ac:6f:b7:43:17:35:f4:
2c:4f:c9:da:b3:23:c4:8c:98:44:2e:54:ef:bc:ed:00:65:43:
04:41:c6:5b:fe:66:32:c6:f9:a2:24:04:06:39:81:fc:5f:98:
12:c8:72:18:a8:c7:78:08:7a:32:3f:47:b0:9a:18:88:17:d0:
7e:01:26:ba:4f:f7:b2:e2:71:52:5f:26:d7:23:7e:23:af:19:
22:36:91:27:42:41:8d:16:9d:ee:4f:a8:06:11:bc:ac:d5:23:
63:c4:53:ca:f2:bc:8d:a3:19:75:90:f4:a1:21:37:35:2d:31:
64:0f:fd:f9:29:2a:2b:51:ca:d5:ba:7f:80:78:d8:d1:a0:d5:
17:42:e7:44:10:4b:cd:2c:a6:d0:59:a9:84:7f:06:71:9d:a6:
ea:a1:3e:ec:4e:7f:64:41:e8:81:5d:b9:6d:29:f0:2e:cc:a1:
12:00:8e:71:01:da:6c:9a:e7:b6:8d:ac:84:8e:76:fc:18:ac:
41:2b:8d:e2:73:f8:d3:a0:93:f3:e1:2b:81:d1:cf:73:94:3c:
ba:f1:9d:43:72:35:36:03:d3:61:72:e4:f2:a6:0a:58:0f:05:
d3:cd:04:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPHuRP1VReZFOCZPnZT3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDFlMjg5MzBkNzdhN2ViOTg5MWI2ZmFiYmIyOTE1ZWUz
ODg1YWEwHhcNMjYwNzI3MTEwMTE3WhcNMjYwNzI4MTEwMTE3WjAzMTEwLwYDVQQD
EyhjMmRhMjE5YmQ0NTNmNzQ2YTU0ZmQ0Mjg5NzU4ZTgzNDM3ZWZjODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArohpuWcFaVVCHg1+kPVbMhq6NnwA
5zK6rIfq+DgoWQDjxoTUefNaRP56yiIR7MLERQylByQVLejyA9QdrfVprWA2/R8k
ZqA2R3dnMCt8mg0Bz07D+KA/bjHg0k9lh8yPkvYl76Zdv/dfJ14MXsCXkSh3MhdI
EMpbrV2k2CQyKjtK6MQSP3C/kckTaRmPTH2pDJTJQiA+YkJK/3frqbffdn1x55Lc
ykCkSURqm4AiN7z6WV3SWfFeckj2uqo7tBhiceBobMKNFikhdy56fkewUpvjw8E8
9dDfgNGobZilK0Vg42/A5+vOCp64iea+SKNIYiHrBUy3ragpljHhOisw0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLaIZvUU/dGpU/UKJdY6DQ378gzMB8GA1UdIwQY
MBaAFMzR4okw13p+uYkbb6u7KRXuOIWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMt
YzEzYjFmOTc3ZDU3LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMtYzEzYjFmOTc3ZDU3
LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlwTWvP2
9+ysSM5sQ4AlWp7zFDNcZEkYX5nDe8isb7dDFzX0LE/J2rMjxIyYRC5U77ztAGVD
BEHGW/5mMsb5oiQEBjmB/F+YEshyGKjHeAh6Mj9HsJoYiBfQfgEmuk/3suJxUl8m
1yN+I68ZIjaRJ0JBjRad7k+oBhG8rNUjY8RTyvK8jaMZdZD0oSE3NS0xZA/9+Skq
K1HK1bp/gHjY0aDVF0LnRBBLzSym0FmphH8GcZ2m6qE+7E5/ZEHogV25bSnwLsyh
EgCOcQHabJrnto2shI52/BisQSuN4nP406CT8+ErgdHPc5Q8uvGdQ3I1NgPTYXLk
8qYKWA8F080ErQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:59:09 2026 by rpki-client