Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: NNNeVmmx3siizS4tpuiumBpGTfR1RQ5U2+MSBsVSJqw=
Subject key identifier: BC:DE:A6:B2:EA:C4:03:C0:3A:D3:3E:60:FF:B1:9D:3B:04:13:E0:C4
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 01A00281B9EE8F6220D72C50774677241C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 1A07
Signing time: Fri 14 Aug 2026 23:00:51 +0000
Manifest this update: Fri 14 Aug 2026 23:00:51 +0000
Manifest next update: Sat 15 Aug 2026 23:00:51 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: WvH3emdMFBltvFzWsVfjkPJBnH2elrzwpLgRCv3z/SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:b9:ee:8f:62:20:d7:2c:50:77:46:77:24:1c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Aug 14 23:00:51 2026 GMT
Not After : Aug 15 23:00:51 2026 GMT
Subject: CN=bcdea6b2eac403c03ad33e60ffb19d3b0413e0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:d3:a0:72:f9:71:9b:b2:01:cc:e8:b7:31:
39:5e:ea:13:50:02:15:3d:99:71:bd:fa:94:8f:03:
bf:76:fc:89:03:fc:14:2b:45:af:d5:48:fc:31:1e:
43:5b:d4:2a:4f:45:ad:79:48:27:55:8d:e4:80:bf:
08:ff:9b:3f:b3:88:35:20:6d:36:bf:a1:94:89:22:
f2:26:7a:be:45:1c:3b:2c:13:8b:e7:ad:d1:ca:92:
fd:d3:63:4a:c2:61:9f:63:6a:4c:11:48:f1:f0:de:
f6:71:63:b3:e5:42:d6:3c:4e:06:e3:7f:f8:00:87:
0d:cb:8f:ee:84:83:0b:57:52:8e:df:a6:82:3d:cd:
14:4c:a3:cd:25:8b:75:4a:0d:d4:cb:4b:b2:d0:a0:
25:1f:0a:31:0d:78:e5:63:f8:7d:78:a5:6f:95:cd:
86:57:96:fb:3b:54:aa:01:75:c5:b7:a7:87:b9:d7:
63:8b:fb:d1:a1:45:e8:68:8d:90:d1:e4:2a:02:eb:
09:22:63:c7:b1:36:37:e1:ed:1f:ce:32:54:54:68:
50:38:8b:79:35:0b:7d:12:8e:9f:ec:29:3a:e9:33:
0c:fe:0a:f1:09:1d:c5:4d:bb:ac:e1:11:f1:a0:a7:
de:bd:95:be:dd:e2:9b:73:03:71:a5:f6:33:1f:a7:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:A6:B2:EA:C4:03:C0:3A:D3:3E:60:FF:B1:9D:3B:04:13:E0:C4
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3b:ad:b9:d9:0f:f7:01:f1:c2:96:c1:82:29:6e:15:2c:d6:
7e:90:8e:23:5d:54:00:3b:d5:f0:ff:24:dd:c6:ea:1d:3a:43:
1c:7a:ae:82:a7:1a:43:bb:d0:e3:bf:db:8e:31:46:e5:78:10:
3f:fc:fe:66:5c:42:ca:dd:48:ae:9b:fe:7a:5a:6b:19:a8:7b:
c5:c5:93:34:b9:a7:80:58:ad:93:7f:61:65:5d:0d:45:a7:20:
ba:0d:bf:8e:36:72:5c:2d:c0:23:27:25:e9:20:14:43:75:7f:
84:79:42:84:03:6a:5c:cc:63:b2:c1:78:f4:52:55:d0:ea:a9:
54:4f:19:cc:6f:44:66:07:c7:19:56:65:f2:67:32:4c:a1:3e:
b5:9c:89:4f:7d:92:9a:80:b5:53:a6:34:3b:05:e9:c8:ca:7a:
e2:20:c0:e3:fe:1f:99:40:a9:ba:f5:24:e1:3f:d7:8c:f2:ae:
c6:74:4d:29:e2:6b:aa:dc:d2:3a:f9:b2:c3:42:b7:76:1e:b5:
4e:8d:b5:74:ba:a6:39:f5:b4:52:49:ef:5e:ea:cc:08:dd:09:
83:ff:b4:ef:9b:b0:29:85:92:36:5c:c8:ad:3b:18:07:5b:d4:
42:ed:e0:d8:8e:8d:39:f2:47:db:20:ff:3a:58:a3:9e:e9:31:
bf:c5:31:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgbnuj2Ig1yxQd0Z3JBwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNThjYmM0YWFlM2Y4MGM0OWIzNzI5MTFhOGQ0NDg2MWNk
ZmVlY2IwHhcNMjYwODE0MjMwMDUxWhcNMjYwODE1MjMwMDUxWjAzMTEwLwYDVQQD
EyhiY2RlYTZiMmVhYzQwM2MwM2FkMzNlNjBmZmIxOWQzYjA0MTNlMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mHToHL5cZuyAczotzE5XuoTUAIV
PZlxvfqUjwO/dvyJA/wUK0Wv1Uj8MR5DW9QqT0WteUgnVY3kgL8I/5s/s4g1IG02
v6GUiSLyJnq+RRw7LBOL563RypL902NKwmGfY2pMEUjx8N72cWOz5ULWPE4G43/4
AIcNy4/uhIMLV1KO36aCPc0UTKPNJYt1Sg3Uy0uy0KAlHwoxDXjlY/h9eKVvlc2G
V5b7O1SqAXXFt6eHuddji/vRoUXoaI2Q0eQqAusJImPHsTY34e0fzjJUVGhQOIt5
NQt9Eo6f7Ck66TMM/grxCR3FTbus4RHxoKfevZW+3eKbcwNxpfYzH6cPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzeprLqxAPAOtM+YP+xnTsEE+DEMB8GA1UdIwQY
MBaAFM9Yy8Sq4/gMSbNykRqNRIYc3+7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEt
NTBkN2Q5NGUyYjlmLzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81Y2EzMjgtZjExNC00YjNmLWI4YmEtNTBkN2Q5NGUyYjlm
LzEvejFqTHhLcmotQXhKczNLUkdvMUVoaHpmN3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTutudkP
9wHxwpbBgiluFSzWfpCOI11UADvV8P8k3cbqHTpDHHqugqcaQ7vQ47/bjjFG5XgQ
P/z+ZlxCyt1Irpv+elprGah7xcWTNLmngFitk39hZV0NRacgug2/jjZyXC3AIycl
6SAUQ3V/hHlChANqXMxjssF49FJV0OqpVE8ZzG9EZgfHGVZl8mcyTKE+tZyJT32S
moC1U6Y0OwXpyMp64iDA4/4fmUCpuvUk4T/XjPKuxnRNKeJrqtzSOvmyw0K3dh61
To21dLqmOfW0UknvXurMCN0Jg/+075uwKYWSNlzIrTsYB1vUQu3g2I6NOfJH2yD/
Olijnukxv8UxHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:39:54 2026 by rpki-client