Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
File: mZKB6H1em4dY8kDnju9xAsQBIYk.mft (raw, json)
Hash identifier: FsnWCZ3P9wfQOBILInzVqbS+y1t0iezXUsYqpaWCEHQ=
Subject key identifier: 31:FF:12:F9:38:98:3A:9E:49:E4:07:43:E3:1D:68:0E:43:0E:F9:BB
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 019FA0A896E9F1B378AE013B046BC11773A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
Manifest number: 1960
Signing time: Sun 26 Jul 2026 23:00:30 +0000
Manifest this update: Sun 26 Jul 2026 23:00:30 +0000
Manifest next update: Mon 27 Jul 2026 23:00:30 +0000
Files and hashes: 1: 84a_5dunO5tT13Gn8_j3cCElA5U.roa (hash: myvurQJ8o/9M7JEPK/Rdbm3h4MrG2xioG91InHNEhRU=)
2: mZKB6H1em4dY8kDnju9xAsQBIYk.crl (hash: cXfmhDsPk2pISwm9mNFfRDHmtrp9hvLaGxAr0FwmSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:96:e9:f1:b3:78:ae:01:3b:04:6b:c1:17:73:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jul 26 23:00:30 2026 GMT
Not After : Jul 27 23:00:30 2026 GMT
Subject: CN=31ff12f938983a9e49e40743e31d680e430ef9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:62:32:64:29:dd:19:3d:20:06:ed:5b:a8:
18:90:9b:64:89:e2:16:d4:9a:6b:be:68:0d:8f:f7:
ab:8f:0e:31:de:b1:b4:25:32:1b:ec:8f:ce:8b:94:
d0:7f:0b:f6:12:5c:ba:d4:44:78:24:3f:be:21:79:
69:d7:d3:b9:68:f3:48:1c:ce:4e:d5:fb:ab:91:c0:
24:15:22:5e:2c:ef:ef:5d:e8:a8:c7:9c:2d:a5:98:
a2:51:e7:54:98:a6:cb:c9:ba:c8:4f:d4:f9:31:73:
0d:3a:f5:80:8a:78:44:a6:28:e5:13:bb:b5:2e:f2:
98:24:b9:3a:e1:bb:98:21:78:7a:77:b2:7c:82:cf:
4d:76:45:df:cb:ac:ae:b8:ca:e9:a4:a0:9c:09:6f:
c1:2a:68:37:55:af:bc:94:77:f2:a3:f8:83:44:e7:
9c:ce:89:8d:65:ee:05:72:90:ec:ce:5d:f0:37:6c:
bf:cc:ba:2a:51:b8:c3:3c:9c:75:aa:44:49:b0:52:
75:71:11:7d:5a:ec:6b:77:3d:75:b6:c3:ea:0e:6d:
5d:f3:af:d2:9b:71:f2:11:71:d7:0b:97:d9:6b:d3:
b3:7b:17:a2:1a:d4:4b:69:a2:f4:8b:26:1d:ce:ee:
42:ea:72:b1:5a:5d:4d:23:a5:93:b6:f4:37:21:4f:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FF:12:F9:38:98:3A:9E:49:E4:07:43:E3:1D:68:0E:43:0E:F9:BB
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d3:fb:4c:58:ab:b9:f1:42:26:14:67:ef:90:7b:02:cb:46:
8c:20:d7:24:5e:92:aa:44:d4:d2:d0:93:40:bd:45:fb:28:c3:
eb:39:ed:bb:84:5a:25:71:5b:4e:3b:79:bb:a3:ee:81:8e:70:
3e:17:ec:f0:9e:ad:32:6e:93:83:0b:69:1a:bc:a7:9c:bc:92:
3f:4a:f4:31:b1:2a:6b:4c:c5:5d:55:f9:49:6f:8c:89:6c:d6:
d4:3d:fb:bb:39:27:be:c2:15:ef:15:6f:5b:a5:c3:2f:25:c5:
d5:37:1b:e2:4b:06:ff:7f:83:6c:0a:e4:af:c5:bf:25:76:6c:
eb:21:9f:47:2c:6f:44:eb:91:16:0b:5c:aa:92:a2:54:ff:12:
ff:b7:78:7b:ad:b6:2f:2a:8e:3d:2f:6f:02:26:1f:03:00:4d:
4a:76:20:fa:43:69:05:27:48:41:43:71:4c:65:e7:ed:b5:47:
5c:c0:44:9d:cc:fd:9b:a5:45:c6:ad:2f:d8:6a:56:85:62:ea:
cd:32:20:4e:e2:20:a8:ba:66:dc:53:c2:c6:de:c9:97:3e:8b:
5a:72:06:e7:c4:11:0f:4d:8e:25:44:61:9c:a7:ed:2f:c8:a0:
83:35:b4:23:c8:01:b0:de:57:da:d9:b3:0c:73:b4:7f:3d:53:
8e:9b:b6:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqJbp8bN4rgE7BGvBF3OhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTI4MWU4N2Q1ZTliODc1OGYyNDBlNzhlZWY3MTAyYzQw
MTIxODkwHhcNMjYwNzI2MjMwMDMwWhcNMjYwNzI3MjMwMDMwWjAzMTEwLwYDVQQD
EygzMWZmMTJmOTM4OTgzYTllNDllNDA3NDNlMzFkNjgwZTQzMGVmOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXZiMmQp3Rk9IAbtW6gYkJtkieIW
1JprvmgNj/erjw4x3rG0JTIb7I/Oi5TQfwv2Ely61ER4JD++IXlp19O5aPNIHM5O
1furkcAkFSJeLO/vXeiox5wtpZiiUedUmKbLybrIT9T5MXMNOvWAinhEpijlE7u1
LvKYJLk64buYIXh6d7J8gs9NdkXfy6yuuMrppKCcCW/BKmg3Va+8lHfyo/iDROec
zomNZe4FcpDszl3wN2y/zLoqUbjDPJx1qkRJsFJ1cRF9Wuxrdz11tsPqDm1d86/S
m3HyEXHXC5fZa9OzexeiGtRLaaL0iyYdzu5C6nKxWl1NI6WTtvQ3IU+APQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH/Evk4mDqeSeQHQ+MdaA5DDvm7MB8GA1UdIwQY
MBaAFJmSgeh9XpuHWPJA547vcQLEASGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpLQjZIMWVtNGRZOGtEbmp1OXhBc1FCSVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iODM4NjMtNWY0Yi00MmUzLWI4MjIt
YTBmMDBiZTNiY2UxLzEvbVpLQjZIMWVtNGRZOGtEbmp1OXhBc1FCSVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iODM4NjMtNWY0Yi00MmUzLWI4MjItYTBmMDBiZTNiY2Ux
LzEvbVpLQjZIMWVtNGRZOGtEbmp1OXhBc1FCSVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtP7TFir
ufFCJhRn75B7AstGjCDXJF6SqkTU0tCTQL1F+yjD6zntu4RaJXFbTjt5u6PugY5w
Phfs8J6tMm6TgwtpGrynnLySP0r0MbEqa0zFXVX5SW+MiWzW1D37uzknvsIV7xVv
W6XDLyXF1Tcb4ksG/3+DbArkr8W/JXZs6yGfRyxvROuRFgtcqpKiVP8S/7d4e622
LyqOPS9vAiYfAwBNSnYg+kNpBSdIQUNxTGXn7bVHXMBEncz9m6VFxq0v2GpWhWLq
zTIgTuIgqLpm3FPCxt7Jlz6LWnIG58QRD02OJURhnKftL8iggzW0I8gBsN5X2tmz
DHO0fz1Tjpu29Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:28 2026 by rpki-client