Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: dFVsGCmILbI910ic2YcxM4W5I36Q0RQLy7nCDlwT+LA=
Subject key identifier: F4:04:2F:39:0E:7C:F9:28:2C:A2:63:64:42:FB:EF:B5:44:90:A0:3D
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019FA0A915587E40D060AC1269728DB20767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 12CA
Signing time: Sun 26 Jul 2026 23:01:03 +0000
Manifest this update: Sun 26 Jul 2026 23:01:03 +0000
Manifest next update: Mon 27 Jul 2026 23:01:03 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: zJDntNhLpcgt/uDlDGYjvrCBD+1iXgzxIzlTm8L+vTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:15:58:7e:40:d0:60:ac:12:69:72:8d:b2:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jul 26 23:01:03 2026 GMT
Not After : Jul 27 23:01:03 2026 GMT
Subject: CN=f4042f390e7cf9282ca2636442fbefb54490a03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:8d:6c:38:1e:61:a1:fe:31:8e:84:a3:ac:
41:55:15:7e:60:78:55:17:fe:bd:31:10:1b:30:a8:
ee:8f:0f:87:af:8b:db:dd:85:a2:52:26:fa:b9:7c:
78:38:ec:bd:fc:da:34:08:58:30:56:d9:42:a4:cd:
19:b4:b0:78:6d:23:0a:d2:84:e6:6f:c8:81:11:61:
25:a7:63:02:e1:f4:a3:f0:7d:2e:72:97:66:9e:6c:
0f:81:26:3d:5c:8f:52:f8:ab:02:ee:13:62:06:57:
3d:41:f4:fa:ef:91:0e:74:53:54:87:8f:78:bd:d0:
85:87:98:b1:e3:7d:cd:78:5c:a2:8e:d5:d6:4e:87:
a1:14:c5:f1:e4:e3:c9:c6:7b:9c:f5:ee:f5:49:bf:
83:ec:cf:5b:8e:8d:65:fb:60:5f:37:c5:00:74:f2:
9e:83:db:d1:b2:d4:50:8e:51:0a:6d:b3:ac:be:53:
c8:77:80:d8:8a:c1:b4:b5:6e:a2:91:0a:54:8a:31:
de:a3:e1:09:82:54:e8:72:b9:33:c2:81:d0:23:6c:
96:e3:41:1a:2b:6d:4e:71:30:b4:42:9f:ea:99:6c:
66:f5:c4:f1:2a:52:e7:d9:c3:ff:72:e0:4c:af:a4:
80:6d:08:64:3d:4e:69:fb:03:df:f2:3e:47:f8:cc:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:2F:39:0E:7C:F9:28:2C:A2:63:64:42:FB:EF:B5:44:90:A0:3D
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f2:b1:02:36:05:cd:f2:82:5a:2d:1b:e6:e7:30:5d:9a:68:
2a:d1:62:21:9e:ce:50:d9:8d:49:f5:1c:bf:f7:1a:ba:fe:0e:
9a:ec:e7:a2:9b:5f:19:2f:1b:9d:5e:3e:85:d5:78:46:26:a1:
f8:9d:3c:81:94:50:9b:44:ca:8e:52:e5:3f:7e:70:d2:cd:6e:
42:91:69:68:28:79:f9:8d:76:c5:d3:9f:02:6f:c0:53:bf:1f:
ee:5a:79:b4:8a:68:09:80:6a:b3:ae:61:2d:49:2d:52:63:e2:
67:4f:03:18:8d:e9:f4:01:a1:e4:3b:32:c3:72:1c:25:20:8f:
b5:7e:40:86:90:c0:57:2b:8c:7c:20:8e:7a:d2:cb:91:33:9f:
66:39:4e:80:e7:c7:7c:b5:7c:9f:27:a0:f2:de:cf:41:8a:24:
74:10:81:75:aa:9a:29:53:4e:70:35:cb:76:d4:ed:ed:73:8d:
c8:86:c0:45:49:2d:c6:4c:6c:5e:f5:d5:0d:a5:6b:e5:25:06:
43:6f:c9:71:fe:bb:e0:81:b1:63:be:68:76:7b:23:d0:6f:84:
25:27:44:08:fe:03:99:7b:86:ed:26:b8:64:33:d4:05:89:9d:
a7:8c:3e:41:b9:94:29:70:91:1f:9b:1e:73:25:41:3e:40:bc:
48:b4:95:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqRVYfkDQYKwSaXKNsgdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz
NGUzZDgwHhcNMjYwNzI2MjMwMTAzWhcNMjYwNzI3MjMwMTAzWjAzMTEwLwYDVQQD
EyhmNDA0MmYzOTBlN2NmOTI4MmNhMjYzNjQ0MmZiZWZiNTQ0OTBhMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa6NbDgeYaH+MY6Eo6xBVRV+YHhV
F/69MRAbMKjujw+Hr4vb3YWiUib6uXx4OOy9/No0CFgwVtlCpM0ZtLB4bSMK0oTm
b8iBEWElp2MC4fSj8H0ucpdmnmwPgSY9XI9S+KsC7hNiBlc9QfT675EOdFNUh494
vdCFh5ix433NeFyijtXWToehFMXx5OPJxnuc9e71Sb+D7M9bjo1l+2BfN8UAdPKe
g9vRstRQjlEKbbOsvlPId4DYisG0tW6ikQpUijHeo+EJglTocrkzwoHQI2yW40Ea
K21OcTC0Qp/qmWxm9cTxKlLn2cP/cuBMr6SAbQhkPU5p+wPf8j5H+Mzq5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQELzkOfPkoLKJjZEL777VEkKA9MB8GA1UdIwQY
MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt
MTY3M2FkOGM0MDEyLzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy
LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/KxAjYF
zfKCWi0b5ucwXZpoKtFiIZ7OUNmNSfUcv/cauv4OmuznoptfGS8bnV4+hdV4Riah
+J08gZRQm0TKjlLlP35w0s1uQpFpaCh5+Y12xdOfAm/AU78f7lp5tIpoCYBqs65h
LUktUmPiZ08DGI3p9AGh5Dsyw3IcJSCPtX5AhpDAVyuMfCCOetLLkTOfZjlOgOfH
fLV8nyeg8t7PQYokdBCBdaqaKVNOcDXLdtTt7XONyIbARUktxkxsXvXVDaVr5SUG
Q2/Jcf674IGxY75odnsj0G+EJSdECP4DmXuG7Sa4ZDPUBYmdp4w+QbmUKXCRH5se
cyVBPkC8SLSVFQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:53 2026 by rpki-client