Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: GWMHcIq19C36cLNAFxxdkK1nIIJILtO9TtXi3KJBUXs=
Subject key identifier: E8:9D:AF:91:CA:87:65:B4:D0:2B:9B:7A:5B:B9:A9:CD:21:67:28:12
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019F3D8716A42952AB8F3D3457E44D93A11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 0531
Signing time: Tue 07 Jul 2026 17:01:30 +0000
Manifest this update: Tue 07 Jul 2026 17:01:30 +0000
Manifest next update: Wed 08 Jul 2026 17:01:30 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: GKIpAgpVv1o3+CLUgtet1Fh5tqm4ktOM6ZHzFePfTUM=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:87:16:a4:29:52:ab:8f:3d:34:57:e4:4d:93:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Jul 7 17:01:30 2026 GMT
Not After : Jul 8 17:01:30 2026 GMT
Subject: CN=e89daf91ca8765b4d02b9b7a5bb9a9cd21672812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:71:31:35:bb:7b:8e:d4:cd:0b:38:23:c1:
c1:b7:90:d0:8d:14:3e:1d:da:6e:98:62:6f:22:c6:
f8:ff:54:6e:a4:b8:2f:bd:57:e0:6f:d0:bc:78:f9:
81:9a:f4:9e:5e:a0:76:29:85:e3:e2:ca:fa:88:60:
83:67:2f:0c:28:0f:21:cd:87:a3:fd:60:d2:e6:05:
59:0f:6f:19:5d:22:87:3a:a7:3a:a6:a0:9b:5d:a7:
0e:91:76:ae:ba:65:df:59:a9:f4:14:db:a4:e0:8a:
5b:21:69:8e:53:11:a7:9d:54:29:a6:a9:30:81:88:
66:be:4d:81:00:a4:7d:56:b5:a3:f0:a9:aa:a0:b2:
64:84:5d:dd:ae:bd:07:87:e8:02:43:ac:21:c0:d2:
5f:d2:11:4c:77:a7:11:c5:7b:4c:3e:a7:d0:43:94:
ff:24:cb:a1:15:d8:7a:9b:bf:71:e0:f5:30:79:5a:
f1:85:8b:d5:cd:bd:cc:25:33:04:56:ee:b0:bf:97:
34:d1:96:d8:16:4d:0b:46:68:72:26:16:ed:d5:f0:
bc:6a:5c:97:c1:65:03:6b:40:a3:96:6c:06:8a:b5:
c8:cb:56:3d:aa:25:5d:09:fa:24:5a:f2:5b:aa:75:
0a:19:59:37:32:da:fc:a2:48:a2:ef:77:da:d6:ac:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:AF:91:CA:87:65:B4:D0:2B:9B:7A:5B:B9:A9:CD:21:67:28:12
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:7e:d9:05:06:52:03:bb:96:89:71:e4:9e:f7:2a:02:f2:
4e:8d:17:b7:0f:c7:4a:5b:67:a8:0a:8d:0b:71:58:73:91:08:
8f:77:6b:82:13:5b:6b:9b:44:df:2d:1a:80:c0:a0:5b:84:16:
60:1c:75:09:79:03:3e:ff:e2:73:de:5b:98:9e:de:bb:a9:5a:
a1:f4:71:09:c3:ec:e1:e1:35:6d:06:cb:15:38:6f:78:22:cb:
1f:78:1f:bb:6f:ce:ed:4f:bd:1a:8c:9d:6b:34:db:6e:ab:bc:
db:3a:1f:b0:f0:ae:39:62:c7:f9:58:f7:7f:de:2f:30:7b:7a:
d2:98:56:de:2a:30:08:4c:97:dd:66:8e:18:84:32:0b:cb:1d:
0a:95:00:d6:7f:b1:33:52:92:aa:70:37:2b:8f:73:19:1d:4c:
1e:2c:8c:65:ce:0e:a1:7d:93:e8:8c:4d:34:cf:50:ce:0f:99:
95:92:b0:b4:93:c4:fc:bd:e1:1e:23:d6:91:02:e6:f9:2f:cd:
a3:f4:11:c9:64:df:96:84:08:3a:60:ab:9d:1c:56:6d:55:1d:
b5:1c:5c:60:01:4b:ff:ef:04:e3:60:a0:66:fe:17:00:02:3c:
89:50:38:26:ca:9c:13:76:90:be:fd:de:a7:43:43:b1:09:20:
7a:d6:15:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ89hxakKVKrjz00V+RNk6EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj
NTQ1YzMwHhcNMjYwNzA3MTcwMTMwWhcNMjYwNzA4MTcwMTMwWjAzMTEwLwYDVQQD
EyhlODlkYWY5MWNhODc2NWI0ZDAyYjliN2E1YmI5YTljZDIxNjcyODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsVxMTW7e47UzQs4I8HBt5DQjRQ+
HdpumGJvIsb4/1RupLgvvVfgb9C8ePmBmvSeXqB2KYXj4sr6iGCDZy8MKA8hzYej
/WDS5gVZD28ZXSKHOqc6pqCbXacOkXauumXfWan0FNuk4IpbIWmOUxGnnVQppqkw
gYhmvk2BAKR9VrWj8KmqoLJkhF3drr0Hh+gCQ6whwNJf0hFMd6cRxXtMPqfQQ5T/
JMuhFdh6m79x4PUweVrxhYvVzb3MJTMEVu6wv5c00ZbYFk0LRmhyJhbt1fC8alyX
wWUDa0CjlmwGirXIy1Y9qiVdCfokWvJbqnUKGVk3Mtr8okii73fa1qwvlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOidr5HKh2W00Cubelu5qc0hZygSMB8GA1UdIwQY
MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt
MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex
LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3J+2QUG
UgO7lolx5J73KgLyTo0Xtw/HSltnqAqNC3FYc5EIj3drghNba5tE3y0agMCgW4QW
YBx1CXkDPv/ic95bmJ7eu6laofRxCcPs4eE1bQbLFThveCLLH3gfu2/O7U+9Goyd
azTbbqu82zofsPCuOWLH+Vj3f94vMHt60phW3iowCEyX3WaOGIQyC8sdCpUA1n+x
M1KSqnA3K49zGR1MHiyMZc4OoX2T6IxNNM9Qzg+ZlZKwtJPE/L3hHiPWkQLm+S/N
o/QRyWTfloQIOmCrnRxWbVUdtRxcYAFL/+8E42CgZv4XAAI8iVA4JsqcE3aQvv3e
p0NDsQkgetYV1A==
-----END CERTIFICATE-----
Generated at Tue Jul 7 19:52:27 2026 by rpki-client