Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: ojTun/HLOKmtc4Vyr3RBhR5m8weNYSPQ9yQzGBrai/c=
Subject key identifier: 33:AF:81:96:22:1D:2D:51:BA:05:7E:3B:BF:BA:B9:0F:C7:BF:00:0F
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019F75F60FB0259E4C4E76AA6540662FD4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 19B9
Signing time: Sat 18 Jul 2026 16:01:27 +0000
Manifest this update: Sat 18 Jul 2026 16:01:27 +0000
Manifest next update: Sun 19 Jul 2026 16:01:27 +0000
Files and hashes: 1: ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa (hash: a0wsPiri9N8v0Qf4OIW+s20J9vgPW/O4uUqTrgadEUg=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: +1qv2hWawty+lnjLjMnNH3+kbiGSKKCYpkoWiMaVSEg=)
3: huyceIHVnvQkvqjpwCiPSV0-omg.roa (hash: iUSoYSpkqD2GKh9pN5QDirlx+fKKFecxfJ2ArcTf/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:f6:0f:b0:25:9e:4c:4e:76:aa:65:40:66:2f:d4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jul 18 16:01:27 2026 GMT
Not After : Jul 19 16:01:27 2026 GMT
Subject: CN=33af8196221d2d51ba057e3bbfbab90fc7bf000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:6b:61:ff:bf:93:fd:00:f8:7d:31:c7:06:
d3:96:a9:98:05:36:0b:60:99:7f:7f:63:c9:41:b2:
a4:be:3c:a3:16:89:46:f7:94:9b:9d:fc:cd:96:d5:
70:36:bc:55:6c:15:fd:43:da:45:92:3c:59:c3:1b:
c4:88:f9:81:48:76:30:5a:24:29:49:46:20:70:bf:
31:93:d9:eb:87:d6:69:f6:5a:9d:90:22:c5:d9:3f:
5d:5e:fd:8c:2f:de:58:a1:7f:73:21:d4:65:ed:02:
a2:11:03:6e:24:57:2a:fa:cf:46:8e:df:e1:54:8d:
2f:66:29:9e:13:f8:26:ca:0b:7a:af:99:b8:b3:8f:
bd:c8:1d:a9:97:11:b0:0b:0f:8b:0b:5c:d1:c5:b2:
ae:38:30:38:e5:a5:a1:de:3f:e9:c6:11:dc:59:2d:
49:85:ab:48:c7:c6:7c:b2:6d:b6:65:fe:e9:e8:fa:
a5:3b:89:e9:02:7b:c2:da:15:99:79:2a:fe:37:b9:
20:fd:c5:bc:a3:14:9e:82:e1:f1:01:c5:69:47:5f:
21:95:f1:d0:6b:43:94:fb:ed:41:6f:ab:bd:bf:03:
d0:98:5d:e7:8e:a9:86:13:a3:39:a5:1a:19:2c:f5:
f5:4d:de:c3:ff:70:fc:d2:0a:c6:51:c4:8e:2f:88:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:81:96:22:1D:2D:51:BA:05:7E:3B:BF:BA:B9:0F:C7:BF:00:0F
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a4:94:65:d6:ab:af:35:25:7e:45:49:c0:b2:24:59:6d:cc:
e0:93:a0:af:cb:cf:d5:e4:15:a8:4a:ac:5f:f5:13:94:80:48:
f4:25:49:ad:99:08:c6:94:18:b4:c7:4d:8d:41:e5:cb:ee:d5:
af:94:f7:19:12:9c:46:bd:85:12:77:a3:9f:87:cc:d3:ec:78:
ac:84:1c:74:32:f6:e3:02:bd:39:2c:d3:66:b4:d0:6f:b6:aa:
34:4c:c2:71:1d:2b:96:2a:8a:41:54:20:f6:99:13:ba:53:2c:
3c:d0:71:48:5a:af:71:36:03:f8:61:80:9c:13:b9:c8:b5:f3:
12:a1:35:a2:3b:4e:78:ba:d4:01:cd:f3:6a:b0:f9:d0:31:b2:
24:02:d7:4e:17:74:1d:4a:24:ed:9f:53:ca:0e:29:24:9f:4e:
da:09:00:22:98:d6:12:22:e6:17:ac:12:fd:0d:ac:e9:4c:09:
66:eb:91:69:d9:46:5b:45:82:63:ee:88:89:21:54:1e:80:0b:
54:89:6f:63:fe:5b:a4:86:16:c5:f7:8a:34:5b:7c:3b:c8:91:
cd:3e:6a:f2:d3:41:c3:69:e9:8d:6a:b2:81:7f:ce:75:0b:d7:
a5:bd:09:36:bf:b3:ef:98:e0:70:da:fd:71:dc:a7:08:b1:3d:
a5:96:9b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ919g+wJZ5MTnaqZUBmL9TtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1
NjY2YWIwHhcNMjYwNzE4MTYwMTI3WhcNMjYwNzE5MTYwMTI3WjAzMTEwLwYDVQQD
EygzM2FmODE5NjIyMWQyZDUxYmEwNTdlM2JiZmJhYjkwZmM3YmYwMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lVrYf+/k/0A+H0xxwbTlqmYBTYL
YJl/f2PJQbKkvjyjFolG95SbnfzNltVwNrxVbBX9Q9pFkjxZwxvEiPmBSHYwWiQp
SUYgcL8xk9nrh9Zp9lqdkCLF2T9dXv2ML95YoX9zIdRl7QKiEQNuJFcq+s9Gjt/h
VI0vZimeE/gmygt6r5m4s4+9yB2plxGwCw+LC1zRxbKuODA45aWh3j/pxhHcWS1J
hatIx8Z8sm22Zf7p6PqlO4npAnvC2hWZeSr+N7kg/cW8oxSeguHxAcVpR18hlfHQ
a0OU++1Bb6u9vwPQmF3njqmGE6M5pRoZLPX1Td7D/3D80grGUcSOL4jR0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOvgZYiHS1RugV+O7+6uQ/HvwAPMB8GA1UdIwQY
MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt
MzM2ZTViM2RkMDcxLzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx
LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqSUZdar
rzUlfkVJwLIkWW3M4JOgr8vP1eQVqEqsX/UTlIBI9CVJrZkIxpQYtMdNjUHly+7V
r5T3GRKcRr2FEnejn4fM0+x4rIQcdDL24wK9OSzTZrTQb7aqNEzCcR0rliqKQVQg
9pkTulMsPNBxSFqvcTYD+GGAnBO5yLXzEqE1ojtOeLrUAc3zarD50DGyJALXThd0
HUok7Z9Tyg4pJJ9O2gkAIpjWEiLmF6wS/Q2s6UwJZuuRadlGW0WCY+6IiSFUHoAL
VIlvY/5bpIYWxfeKNFt8O8iRzT5q8tNBw2npjWqygX/OdQvXpb0JNr+z75jgcNr9
cdynCLE9pZabfA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 17:04:33 2026 by rpki-client