Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: dq12m0E6Q6x0BQyLLn/lPRibPuo8FUkTODhZpmPPm4k=
Subject key identifier: 4D:92:54:6C:8E:45:D6:E9:A2:3F:57:20:43:7A:E4:1A:F5:5C:60:9F
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 019FA0DF869A128B3C33AA67E8EC56A8905D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 09AC
Signing time: Mon 27 Jul 2026 00:00:31 +0000
Manifest this update: Mon 27 Jul 2026 00:00:31 +0000
Manifest next update: Tue 28 Jul 2026 00:00:31 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: FIw6xNGeHKwbcJVmD+prDnAlZDQ+kywWggBzktgejGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:86:9a:12:8b:3c:33:aa:67:e8:ec:56:a8:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Jul 27 00:00:31 2026 GMT
Not After : Jul 28 00:00:31 2026 GMT
Subject: CN=4d92546c8e45d6e9a23f5720437ae41af55c609f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:07:4a:1c:58:bb:3e:34:36:35:eb:d7:16:
c6:35:27:a3:20:d1:58:2e:54:ea:bf:e4:61:71:fd:
6c:fc:0b:31:21:d7:b2:99:01:e4:f0:2d:e4:07:ae:
b6:1f:0d:48:9d:8e:4b:57:23:03:33:b5:d6:e7:55:
a9:af:24:f0:d7:80:48:cb:16:a6:e6:be:a3:45:c7:
29:2b:50:66:d2:82:10:76:95:aa:af:54:94:16:e3:
2d:05:4d:fc:75:50:2f:42:36:43:e6:89:05:63:6e:
46:ab:71:b6:9d:f9:ba:ab:d3:49:c1:7d:c6:48:fa:
73:69:37:0e:7c:6b:a2:31:68:69:2e:15:05:f6:80:
6a:4c:08:b3:98:af:b7:cf:6c:89:75:d1:51:47:3b:
ae:65:21:d6:80:6b:87:41:74:a3:5f:74:2c:96:21:
a1:b2:9c:29:b0:ae:c4:20:8c:3c:dc:68:46:e9:38:
71:4b:94:72:d9:b1:8c:81:52:37:c4:06:ae:7e:3e:
ad:62:a5:70:10:af:be:a3:67:4f:ef:bd:15:fb:0f:
27:e8:48:a3:ab:ee:31:07:3d:60:16:13:ed:b3:6a:
fd:27:a4:bb:9f:7d:eb:2a:80:77:b7:24:32:87:eb:
84:35:87:07:03:47:51:46:51:42:75:69:76:fb:4b:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:54:6C:8E:45:D6:E9:A2:3F:57:20:43:7A:E4:1A:F5:5C:60:9F
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:83:e7:11:ec:42:b1:af:11:8e:87:00:9b:33:62:f7:bd:ef:
05:36:c3:b9:ea:54:29:ba:23:30:6a:dc:45:92:fa:24:6d:77:
3b:6c:5e:e2:40:a4:1e:3b:15:41:1b:a7:cd:3a:b7:c2:5b:d2:
9d:1d:07:2a:63:bb:5a:fa:40:02:db:1c:9f:92:f3:25:17:16:
f5:30:6a:fa:65:95:9f:86:97:ee:34:b0:cb:7f:13:57:14:ce:
45:0d:61:1b:51:8f:17:71:5b:bf:58:36:a0:fa:33:f4:9b:c7:
f4:5a:e7:82:83:60:59:cb:8a:af:3c:32:e5:f4:23:f2:64:85:
88:67:fa:74:4f:94:70:dd:de:bc:46:5b:2f:69:0b:fa:ab:fd:
7a:fa:f5:9d:ce:82:e9:b1:31:f5:7a:20:61:e5:25:f3:fe:fd:
aa:ba:96:18:ff:6d:34:bb:1e:06:87:d7:4d:c8:4e:5e:48:eb:
68:5d:65:e2:ec:e5:ac:56:cb:3f:04:7b:18:13:bf:c2:32:52:
b0:79:db:c9:19:ae:58:ca:0f:d0:36:35:d4:df:0b:2c:2e:be:
22:e1:7e:de:0b:8c:1f:fb:a5:6b:a8:23:27:51:4f:f9:2b:eb:
3f:5c:85:17:f9:58:02:49:69:a7:6d:69:f1:fe:35:c0:31:8b:
56:87:bc:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g34aaEos8M6pn6OxWqJBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzZiOWIzZDQ3MWY5M2Y4ZWE5ZmVkMGM0NTE0YzJjMzc0
ZDIzZjYwHhcNMjYwNzI3MDAwMDMxWhcNMjYwNzI4MDAwMDMxWjAzMTEwLwYDVQQD
Eyg0ZDkyNTQ2YzhlNDVkNmU5YTIzZjU3MjA0MzdhZTQxYWY1NWM2MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wHShxYuz40NjXr1xbGNSejINFY
LlTqv+Rhcf1s/AsxIdeymQHk8C3kB662Hw1InY5LVyMDM7XW51WpryTw14BIyxam
5r6jRccpK1Bm0oIQdpWqr1SUFuMtBU38dVAvQjZD5okFY25Gq3G2nfm6q9NJwX3G
SPpzaTcOfGuiMWhpLhUF9oBqTAizmK+3z2yJddFRRzuuZSHWgGuHQXSjX3QsliGh
spwpsK7EIIw83GhG6ThxS5Ry2bGMgVI3xAaufj6tYqVwEK++o2dP770V+w8n6Eij
q+4xBz1gFhPts2r9J6S7n33rKoB3tyQyh+uENYcHA0dRRlFCdWl2+0sbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2SVGyORdbpoj9XIEN65Br1XGCfMB8GA1UdIwQY
MBaAFGU2ubPUcfk/jqn+0MRRTCw3TSP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2It
MTU5OTJiMmM1NGNhLzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2ItMTU5OTJiMmM1NGNh
LzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4PnEexC
sa8RjocAmzNi973vBTbDuepUKbojMGrcRZL6JG13O2xe4kCkHjsVQRunzTq3wlvS
nR0HKmO7WvpAAtscn5LzJRcW9TBq+mWVn4aX7jSwy38TVxTORQ1hG1GPF3Fbv1g2
oPoz9JvH9FrngoNgWcuKrzwy5fQj8mSFiGf6dE+UcN3evEZbL2kL+qv9evr1nc6C
6bEx9XogYeUl8/79qrqWGP9tNLseBofXTchOXkjraF1l4uzlrFbLPwR7GBO/wjJS
sHnbyRmuWMoP0DY11N8LLC6+IuF+3guMH/ula6gjJ1FP+SvrP1yFF/lYAklpp21p
8f41wDGLVoe8CQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:58:48 2026 by rpki-client