Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
File: z9tEWe8iRa2EkR7v4IdafZM1xdg.mft (raw, json)
Hash identifier: NrcvINNEAevM5KqyqsWIy5hl/AeHCl2nPUsSoSQGm2o=
Subject key identifier: 3C:59:62:2A:5F:E3:E7:2C:9C:68:5F:F4:E1:89:F6:37:97:C7:D3:59
Authority key identifier: CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
Certificate issuer: /CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Certificate serial: 019FF9B65DE9713CE446D3E7EE469DB35A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:01:46 +0000
Manifest this update: Thu 13 Aug 2026 06:01:46 +0000
Manifest next update: Fri 14 Aug 2026 06:01:46 +0000
Files and hashes: 1: 5Ne0J2AnsBb3KqrsSaZmYRS_sJ8.asa (hash: tSOxg/159dhYNU00jXQeCM0SgZ81uaakuIVv4gHhNvQ=)
2: z9tEWe8iRa2EkR7v4IdafZM1xdg.crl (hash: HsikeTpCFpl69B3uua5I7kRQV2acSHHio3q69CFIjKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:5d:e9:71:3c:e4:46:d3:e7:ee:46:9d:b3:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb4459ef2245ad84911eefe0875a7d9335c5d8
Validity
Not Before: Aug 13 06:01:46 2026 GMT
Not After : Aug 14 06:01:46 2026 GMT
Subject: CN=3c59622a5fe3e72c9c685ff4e189f63797c7d359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:cd:e7:93:55:1b:b9:01:9a:6a:0b:0d:62:
84:8a:c6:25:a9:95:a2:b2:5b:24:cd:d6:66:05:f5:
4f:12:65:19:12:fd:bc:53:ec:3e:d0:63:d9:40:e7:
2c:5b:51:da:ec:74:c0:7c:d3:ad:1a:0f:49:6f:5e:
de:a6:ed:49:7f:99:37:65:e0:76:b9:4a:42:a1:7e:
54:e5:1e:72:27:29:1c:4d:f5:60:de:42:92:82:d4:
a7:98:eb:d4:d8:10:a6:cd:c4:f6:0e:e0:7b:61:16:
74:ab:d5:a1:82:3d:8f:6c:63:86:c3:6e:4f:5f:45:
bb:be:7b:83:95:cd:32:e8:d9:75:d8:cb:c4:3b:42:
48:2b:3a:df:7b:50:bd:9c:87:e3:31:91:32:57:e2:
23:07:aa:71:e4:9c:97:0a:b8:be:ba:e5:7e:3b:c5:
c5:35:5a:c6:2a:4d:2e:db:b5:1e:55:f2:77:6a:89:
d1:e9:b2:6b:7f:a1:ce:ee:f4:2b:39:fa:d8:8e:ad:
ff:c3:68:a8:81:64:58:42:59:3c:76:5c:3a:38:31:
64:6f:28:4a:c1:57:29:fa:e3:d0:1d:4c:b3:4b:ff:
3b:fa:3f:f8:37:6c:9f:a8:73:47:61:c7:3b:5a:71:
62:15:01:32:c2:28:6b:af:2e:db:e1:df:c9:79:2c:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:62:2A:5F:E3:E7:2C:9C:68:5F:F4:E1:89:F6:37:97:C7:D3:59
X509v3 Authority Key Identifier:
keyid:CF:DB:44:59:EF:22:45:AD:84:91:1E:EF:E0:87:5A:7D:93:35:C5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9tEWe8iRa2EkR7v4IdafZM1xdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/z9tEWe8iRa2EkR7v4IdafZM1xdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:53:f5:78:05:3f:c5:e5:4d:a0:8f:e8:00:26:24:7c:00:
89:5c:49:d8:9d:dd:9d:d2:d4:57:e5:69:6d:6f:c3:cc:e9:40:
0c:31:68:65:be:07:b7:a4:5a:b9:86:52:88:f1:31:98:30:84:
8b:23:74:25:c9:1b:2c:1e:ea:e7:0e:36:40:27:12:ca:de:35:
12:de:e7:8e:55:8f:88:bf:84:27:2f:09:bf:44:3e:21:1c:7a:
fd:50:a2:d2:9f:40:d5:85:5b:b5:01:aa:78:e6:d9:78:3c:cc:
eb:0e:94:3c:3a:b4:0b:75:23:96:b1:8e:5f:d8:82:e4:f4:b3:
91:8f:70:6b:c4:d8:de:76:1c:3d:32:e6:22:3f:2f:27:7d:d5:
5b:04:e7:eb:8c:c1:66:0c:26:0e:c9:eb:1a:d3:0e:7a:4a:88:
2d:d5:67:a2:5a:e6:d7:a3:24:dd:d2:17:1b:0c:c2:05:a5:b8:
f5:7e:9e:36:db:ff:82:91:2c:24:6d:93:0f:f4:e5:70:b8:76:
75:6f:48:81:33:8d:01:fa:2f:c1:52:be:e2:8e:a3:c9:f0:a3:
ea:79:54:fe:d8:9a:ec:ca:44:08:9d:22:ed:32:61:ef:e3:e3:
6e:9c:d4:a5:3e:e0:b8:12:14:a1:9a:30:fb:d2:e5:31:0c:67:
a5:83:7c:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5tl3pcTzkRtPn7kads1qKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGI0NDU5ZWYyMjQ1YWQ4NDkxMWVlZmUwODc1YTdkOTMz
NWM1ZDgwHhcNMjYwODEzMDYwMTQ2WhcNMjYwODE0MDYwMTQ2WjAzMTEwLwYDVQQD
EygzYzU5NjIyYTVmZTNlNzJjOWM2ODVmZjRlMTg5ZjYzNzk3YzdkMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCPN55NVG7kBmmoLDWKEisYlqZWi
slskzdZmBfVPEmUZEv28U+w+0GPZQOcsW1Ha7HTAfNOtGg9Jb17epu1Jf5k3ZeB2
uUpCoX5U5R5yJykcTfVg3kKSgtSnmOvU2BCmzcT2DuB7YRZ0q9Whgj2PbGOGw25P
X0W7vnuDlc0y6Nl12MvEO0JIKzrfe1C9nIfjMZEyV+IjB6px5JyXCri+uuV+O8XF
NVrGKk0u27UeVfJ3aonR6bJrf6HO7vQrOfrYjq3/w2iogWRYQlk8dlw6ODFkbyhK
wVcp+uPQHUyzS/87+j/4N2yfqHNHYcc7WnFiFQEywihrry7b4d/JeSyk/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxZYipf4+csnGhf9OGJ9jeXx9NZMB8GA1UdIwQY
MBaAFM/bRFnvIkWthJEe7+CHWn2TNcXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl0RVdlOGlSYTJFa1I3djRJZGFmWk0xeGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NmMwMjktNjhkZS00MzM0LWI5MmMt
NWUxN2E2MjIzMWI1LzEvejl0RVdlOGlSYTJFa1I3djRJZGFmWk0xeGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NmMwMjktNjhkZS00MzM0LWI5MmMtNWUxN2E2MjIzMWI1
LzEvejl0RVdlOGlSYTJFa1I3djRJZGFmWk0xeGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDZT9XgF
P8XlTaCP6AAmJHwAiVxJ2J3dndLUV+VpbW/DzOlADDFoZb4Ht6RauYZSiPExmDCE
iyN0JckbLB7q5w42QCcSyt41Et7njlWPiL+EJy8Jv0Q+IRx6/VCi0p9A1YVbtQGq
eObZeDzM6w6UPDq0C3UjlrGOX9iC5PSzkY9wa8TY3nYcPTLmIj8vJ33VWwTn64zB
ZgwmDsnrGtMOekqILdVnolrm16Mk3dIXGwzCBaW49X6eNtv/gpEsJG2TD/TlcLh2
dW9IgTONAfovwVK+4o6jyfCj6nlU/tia7MpECJ0i7TJh7+PjbpzUpT7guBIUoZow
+9LlMQxnpYN8tw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:26 2026 by rpki-client