Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: DuC11OwzSa7OHaC4qU4Tuy1x8/neeSXP2crBOl7S364=
Subject key identifier: 19:53:DF:3E:A2:BF:EC:F6:48:F0:FC:A4:19:27:B1:D8:B7:B9:18:16
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 019F9FCD1C275981E0F269252EAA9D1078F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 170E
Signing time: Sun 26 Jul 2026 19:00:47 +0000
Manifest this update: Sun 26 Jul 2026 19:00:47 +0000
Manifest next update: Mon 27 Jul 2026 19:00:47 +0000
Files and hashes: 1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: +3gO0FbZTdLxNlL8oEJ3ol4gjfNsectntz56YxXzDVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:1c:27:59:81:e0:f2:69:25:2e:aa:9d:10:78:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jul 26 19:00:47 2026 GMT
Not After : Jul 27 19:00:47 2026 GMT
Subject: CN=1953df3ea2bfecf648f0fca41927b1d8b7b91816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:62:6c:3d:70:f5:cb:c5:03:8a:86:22:5f:
39:f4:55:dd:70:8f:c5:8e:ad:76:6a:a8:95:07:b0:
b7:bd:86:e0:73:22:39:df:01:4a:83:42:e4:48:73:
0d:d6:91:73:95:6a:e7:6b:c8:c6:e9:56:e3:21:4f:
04:94:41:f4:77:a5:4f:86:3a:d0:f1:75:09:25:9b:
04:29:fd:74:7c:6f:ca:9f:73:14:7f:9a:84:13:15:
9b:c2:13:bc:ab:fe:2a:c3:e3:fb:69:22:cd:a8:43:
c8:f2:1a:40:4c:55:91:72:42:0f:bd:4c:20:7a:9d:
18:09:30:39:d7:be:96:9c:ae:78:74:28:7e:53:b7:
5a:5a:cd:0c:ce:57:d0:b6:d3:e0:75:de:1e:0a:c4:
3a:f0:6d:42:4b:06:09:4c:04:5e:b8:9e:4c:65:cb:
00:c2:4a:9e:fa:cf:b0:ba:9f:c2:9c:c0:ab:01:ea:
9e:ae:67:6f:69:06:1e:58:3f:ce:75:10:3f:00:d2:
16:60:fc:9a:0f:38:3f:23:57:d9:44:6a:ab:d6:df:
56:3d:8f:35:3a:41:67:5e:b0:38:66:ee:69:29:19:
62:cc:12:2f:39:47:a1:77:e5:0f:f9:b7:87:1d:6c:
62:41:6a:92:d8:99:50:a0:f7:1f:df:1b:5e:7f:54:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:DF:3E:A2:BF:EC:F6:48:F0:FC:A4:19:27:B1:D8:B7:B9:18:16
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:9d:0f:d2:de:18:e8:8e:b9:79:54:b3:3e:6e:ac:d3:00:
27:10:97:3d:b1:fa:68:4f:c0:52:e1:92:d4:f4:e0:b7:8e:54:
dc:64:e5:3a:9e:17:76:07:bb:bd:1e:26:8c:35:e1:3d:97:02:
ce:cb:8b:78:94:56:2c:1a:e9:b3:7e:f4:79:fd:dc:cb:76:41:
08:82:35:09:e0:c5:28:92:35:ac:c8:88:22:bd:2d:99:e7:e6:
09:f5:07:97:c5:73:14:b7:84:b4:14:f5:65:35:bd:cc:0c:55:
d8:ac:b6:81:40:66:51:51:57:3e:a5:b5:eb:7b:d1:ac:79:75:
eb:70:89:f1:3a:31:be:c3:5e:5f:4b:c5:18:b7:3b:07:cc:f8:
e3:0f:52:1d:3c:89:83:34:d0:38:1f:78:0d:df:43:2f:77:0f:
cf:6a:1d:de:14:73:82:c8:93:2d:4e:d3:21:f4:ba:aa:3f:43:
19:82:66:63:a8:13:2d:b7:4f:1d:17:ac:b2:a4:d2:f5:36:4d:
c4:cc:8e:f2:fe:bd:e4:68:27:f9:71:b8:4c:05:91:93:e3:31:
9b:e1:bf:8b:43:a1:c1:8b:22:f2:8a:0e:c3:13:96:7c:b2:58:
42:7e:eb:2c:4c:ee:37:04:29:10:1f:34:0f:4d:f4:59:ea:db:
ff:6d:c8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzRwnWYHg8mklLqqdEHj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx
YjRhMjAwHhcNMjYwNzI2MTkwMDQ3WhcNMjYwNzI3MTkwMDQ3WjAzMTEwLwYDVQQD
EygxOTUzZGYzZWEyYmZlY2Y2NDhmMGZjYTQxOTI3YjFkOGI3YjkxODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZpibD1w9cvFA4qGIl859FXdcI/F
jq12aqiVB7C3vYbgcyI53wFKg0LkSHMN1pFzlWrna8jG6VbjIU8ElEH0d6VPhjrQ
8XUJJZsEKf10fG/Kn3MUf5qEExWbwhO8q/4qw+P7aSLNqEPI8hpATFWRckIPvUwg
ep0YCTA5176WnK54dCh+U7daWs0MzlfQttPgdd4eCsQ68G1CSwYJTAReuJ5MZcsA
wkqe+s+wup/CnMCrAeqermdvaQYeWD/OdRA/ANIWYPyaDzg/I1fZRGqr1t9WPY81
OkFnXrA4Zu5pKRlizBIvOUehd+UP+beHHWxiQWqS2JlQoPcf3xtef1SSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlT3z6iv+z2SPD8pBknsdi3uRgWMB8GA1UdIwQY
MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt
ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl
LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYGdD9Le
GOiOuXlUsz5urNMAJxCXPbH6aE/AUuGS1PTgt45U3GTlOp4Xdge7vR4mjDXhPZcC
zsuLeJRWLBrps370ef3cy3ZBCII1CeDFKJI1rMiIIr0tmefmCfUHl8VzFLeEtBT1
ZTW9zAxV2Ky2gUBmUVFXPqW163vRrHl163CJ8ToxvsNeX0vFGLc7B8z44w9SHTyJ
gzTQOB94Dd9DL3cPz2od3hRzgsiTLU7TIfS6qj9DGYJmY6gTLbdPHRessqTS9TZN
xMyO8v695Ggn+XG4TAWRk+Mxm+G/i0OhwYsi8ooOwxOWfLJYQn7rLEzuNwQpEB80
D030Werb/23IwQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:36:10 2026 by rpki-client