Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: j4F6Z4EUx4zOegXkj659/pxn2xA+/1zVFOkv7gpodoI=
Subject key identifier: 09:12:17:B9:8C:8C:5E:55:0D:20:D8:0B:C7:0A:4F:5D:9D:90:1A:ED
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019F281270499AC1AD2EC7450D268B0D0751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1999
Signing time: Fri 03 Jul 2026 13:02:04 +0000
Manifest this update: Fri 03 Jul 2026 13:02:04 +0000
Manifest next update: Sat 04 Jul 2026 13:02:04 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: WeLUde9wiREYuThK4VFQnmw9hB2XPbMYxn7BDiWDkUw=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:70:49:9a:c1:ad:2e:c7:45:0d:26:8b:0d:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jul 3 13:02:04 2026 GMT
Not After : Jul 4 13:02:04 2026 GMT
Subject: CN=091217b98c8c5e550d20d80bc70a4f5d9d901aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:84:f5:7d:5a:7a:e8:2a:78:5b:7a:97:0c:
0f:a5:f1:ae:0f:b9:35:f3:68:bb:bf:46:11:89:cc:
df:eb:55:05:90:71:7f:29:58:6f:20:53:d5:ed:7f:
d8:70:2c:45:aa:a1:d9:b3:5c:f1:d5:1b:a7:73:d1:
8d:0f:a8:89:cc:b7:e7:c7:9b:5e:80:41:c6:3c:fd:
fd:f6:43:d1:c2:a1:42:ff:8a:46:8f:a0:4b:7f:d6:
a0:1f:00:70:6b:5d:6b:13:6a:04:ff:2b:8e:f2:6c:
8b:29:53:9a:5b:8a:77:ab:6e:68:b8:a5:b3:22:64:
6a:7d:6f:f5:13:1c:b8:2d:b8:23:de:07:c5:2b:6b:
0d:cd:ae:b9:50:5a:1a:b1:58:c6:72:ed:cd:2b:b8:
be:a3:0d:82:e4:ee:41:18:58:cd:a6:b0:7c:a0:e8:
26:76:fc:aa:2b:b7:d3:b3:c3:9b:86:b8:ac:6a:5d:
85:8f:53:03:ca:c3:4f:45:3f:e9:58:e8:e3:92:a0:
78:1e:77:5d:fd:7b:5d:9d:0c:f0:56:4f:1a:53:4f:
8d:93:24:0b:6d:d7:8c:ec:e1:3a:b2:9e:9b:65:00:
d4:9b:a1:2f:8a:01:5c:47:c5:7f:ca:38:a5:27:a5:
27:e2:39:df:8a:54:49:a6:62:e2:88:19:66:11:79:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:17:B9:8C:8C:5E:55:0D:20:D8:0B:C7:0A:4F:5D:9D:90:1A:ED
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:84:74:a5:bb:38:51:7d:0b:99:9e:7c:66:34:56:dd:58:0e:
d6:9f:39:de:1e:81:e2:b1:20:5d:a3:28:91:ea:53:d1:a2:20:
77:dd:3f:26:1d:e6:b1:f7:64:c6:ba:0a:d7:4e:43:64:c7:1f:
3a:e8:de:e2:f2:77:44:87:65:45:31:63:8c:08:b7:8f:7d:df:
bb:20:86:42:98:25:bf:1e:45:85:50:21:12:d1:74:cc:f4:10:
fa:06:eb:62:c5:5b:78:7b:07:30:a5:84:49:a0:b7:c8:48:6d:
ba:ae:d1:ac:7e:18:67:b3:d3:06:00:92:d7:11:c9:ac:71:3a:
5d:a3:7e:51:6b:3b:b9:b4:42:9b:02:e3:e9:15:09:83:01:ff:
12:71:2c:4a:31:2f:5c:1d:4d:81:ed:b2:96:ec:74:93:e6:5f:
53:70:2f:e4:bd:0c:84:7f:9b:72:de:e7:c4:ea:33:98:ac:61:
ed:c3:ec:48:9e:cb:1b:b4:d0:59:3a:34:86:73:fc:ae:a3:a6:
4e:3e:5a:ee:37:cb:24:db:66:aa:84:ce:1d:a2:82:5f:b0:9e:
5a:29:ad:d3:ca:cd:48:68:47:26:0a:94:e6:e2:32:e7:e1:c6:
c6:23:51:8d:71:39:6b:ac:4f:b8:d9:68:36:49:0c:04:e9:1c:
7f:2b:bb:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8oEnBJmsGtLsdFDSaLDQdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjYwNzAzMTMwMjA0WhcNMjYwNzA0MTMwMjA0WjAzMTEwLwYDVQQD
EygwOTEyMTdiOThjOGM1ZTU1MGQyMGQ4MGJjNzBhNGY1ZDlkOTAxYWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbiE9X1aeugqeFt6lwwPpfGuD7k1
82i7v0YRiczf61UFkHF/KVhvIFPV7X/YcCxFqqHZs1zx1Runc9GND6iJzLfnx5te
gEHGPP399kPRwqFC/4pGj6BLf9agHwBwa11rE2oE/yuO8myLKVOaW4p3q25ouKWz
ImRqfW/1Exy4Lbgj3gfFK2sNza65UFoasVjGcu3NK7i+ow2C5O5BGFjNprB8oOgm
dvyqK7fTs8Obhrisal2Fj1MDysNPRT/pWOjjkqB4Hndd/XtdnQzwVk8aU0+NkyQL
bdeM7OE6sp6bZQDUm6EvigFcR8V/yjilJ6Un4jnfilRJpmLiiBlmEXkMMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkSF7mMjF5VDSDYC8cKT12dkBrtMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4R0pbs4
UX0LmZ58ZjRW3VgO1p853h6B4rEgXaMokepT0aIgd90/Jh3msfdkxroK105DZMcf
Ouje4vJ3RIdlRTFjjAi3j33fuyCGQpglvx5FhVAhEtF0zPQQ+gbrYsVbeHsHMKWE
SaC3yEhtuq7RrH4YZ7PTBgCS1xHJrHE6XaN+UWs7ubRCmwLj6RUJgwH/EnEsSjEv
XB1Nge2ylux0k+ZfU3Av5L0MhH+bct7nxOozmKxh7cPsSJ7LG7TQWTo0hnP8rqOm
Tj5a7jfLJNtmqoTOHaKCX7CeWimt08rNSGhHJgqU5uIy5+HGxiNRjXE5a6xPuNlo
NkkMBOkcfyu7Uw==
-----END CERTIFICATE-----
Generated at Fri Jul 3 17:42:25 2026 by rpki-client