
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier: TVL4F773LchJcQb/Wj62nMHK3xdl9ZwTgmmrChoVRL4=
Subject key identifier: 8E:CB:E9:89:3D:49:57:99:E4:E4:A6:8E:93:7B:B1:C0:96:F3:47:FF
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019F826725E8E1D7F74F2F2F3130EBBA1074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number: 0C77
Signing time: Tue 21 Jul 2026 02:00:25 +0000
Manifest this update: Tue 21 Jul 2026 02:00:25 +0000
Manifest next update: Wed 22 Jul 2026 02:00:25 +0000
Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
2: 0hivMId7QyV_J-baQe-LpP04A_E.roa (hash: 4wskR4bGB2kTBEPb3U0Ndo9Z+ReWqtwzIpeVVcyolq4=)
3: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
4: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
5: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
6: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
7: BLbEGnHlodnp79q9soB7X47HKdw.roa (hash: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=)
8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
14: P7ZgWKI1Wrjsz9VU4DTzCLAgheI.roa (hash: x5YukDSUF+4txhRHDoxZY/oWruu1mketabTf55p1uXU=)
15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: lLLte61kzD8YLS+kqo+c4aaUw5qBOFCV8RrV4cTU90E=)
20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
24: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
28: r5xSrq13TBSiblkLCkk6aKWkSPM.roa (hash: Jqrbgb6N2ntUjpORqhuL9e7bWx13rYWpNNGtwo5PVmQ=)
29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:25:e8:e1:d7:f7:4f:2f:2f:31:30:eb:ba:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 21 02:00:25 2026 GMT
Not After : Jul 22 02:00:25 2026 GMT
Subject: CN=8ecbe9893d495799e4e4a68e937bb1c096f347ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:fb:63:80:d8:75:5f:55:0f:8f:63:de:c5:
c4:e8:f9:a8:96:20:29:c2:45:45:0b:15:06:45:31:
9c:6a:c1:fc:81:0f:b8:f6:1e:fb:8f:57:88:2f:4f:
ea:a2:33:9f:c7:5d:88:9c:03:04:1b:b3:93:53:dc:
6d:03:28:a3:f3:69:46:c3:e2:5d:a1:2e:f0:13:70:
d1:29:6b:18:d3:e5:bf:2d:dc:8e:23:79:35:e8:e1:
1c:b7:c3:bc:4a:93:6e:f1:00:5a:e3:dc:14:89:da:
f2:3a:7a:0b:bb:52:5e:77:02:c6:ca:a4:6a:9a:b7:
10:da:32:c0:7d:c8:d4:f5:94:52:26:64:88:00:f1:
7e:f9:e7:71:07:ce:60:63:d0:b7:86:26:60:2d:25:
88:f9:b6:d5:ed:61:13:b8:58:d6:1e:4a:8a:bf:a7:
81:08:5e:30:bc:61:7a:06:62:98:50:ea:71:af:10:
86:4f:49:66:bb:a9:52:42:7a:3a:9e:b2:0f:73:bf:
0b:97:05:3d:3d:d7:a9:5d:bb:6f:78:fc:ec:09:7b:
d7:28:d7:ff:78:98:2a:42:40:84:0d:99:90:8e:93:
46:cd:62:5e:90:30:6f:8a:e9:5c:e7:53:d1:8d:dc:
46:8b:b5:8e:60:5d:d3:b9:d5:89:03:7d:c6:9c:b4:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CB:E9:89:3D:49:57:99:E4:E4:A6:8E:93:7B:B1:C0:96:F3:47:FF
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:6a:3b:20:d4:ab:bf:94:79:c8:47:f2:dc:78:21:e2:53:
c7:9c:e8:c5:0d:38:31:78:3d:c9:57:39:87:d8:b1:00:c1:ac:
bc:a8:da:ad:1f:49:d3:81:1d:ed:bb:0a:2c:e2:b7:bb:63:31:
b6:c0:bf:1e:4f:5b:ad:50:20:73:a2:b9:7f:28:a6:39:35:e0:
84:eb:68:8b:86:ad:b0:fb:96:ad:12:f7:9c:9f:d7:b3:3c:37:
37:5f:c2:a6:41:c4:d5:9f:2f:b2:5a:02:38:de:ac:95:e8:ab:
47:27:3f:fe:31:85:e8:dc:78:9d:b2:75:3d:6b:9d:db:d3:da:
a3:53:37:40:37:dc:f4:87:5b:0f:8b:33:c8:79:ba:18:b4:5a:
48:e7:5c:c9:f0:f5:93:92:48:43:e6:ca:29:8c:0e:bb:9a:36:
31:e2:78:24:98:64:c3:94:ae:1b:68:27:ff:18:40:98:da:41:
e8:41:b9:69:16:a3:ce:56:fc:5b:b3:b0:e4:f7:87:d2:57:9a:
78:48:3b:be:d0:ac:59:9a:6d:d1:ac:1f:da:71:6c:b9:4f:5a:
9f:ba:bb:65:79:a2:09:cb:84:b2:79:9c:07:ab:02:c7:3e:40:
5c:96:4a:2b:9e:1c:6d:32:3e:25:1c:3c:17:94:15:80:c4:8f:
02:18:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:00:06 2026 by rpki-client