Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: qMUpTJ712VdsGK/hG03fw6pGGVUu4rTbcHCgG84WriQ=
Subject key identifier: CA:10:00:04:25:CF:90:CD:CE:CD:53:83:B7:DE:20:4F:0B:25:52:5C
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019FA26007AB051F1046AA8746BE68EC1F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 01F8
Signing time: Mon 27 Jul 2026 07:00:30 +0000
Manifest this update: Mon 27 Jul 2026 07:00:30 +0000
Manifest next update: Tue 28 Jul 2026 07:00:30 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: Oyh7sBJ3Djc3GAPDD4RqFWyhPpJeay/VLu3lzMAdQbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:07:ab:05:1f:10:46:aa:87:46:be:68:ec:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Jul 27 07:00:30 2026 GMT
Not After : Jul 28 07:00:30 2026 GMT
Subject: CN=ca10000425cf90cdcecd5383b7de204f0b25525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:7b:d0:21:79:3b:32:52:21:2f:e2:db:aa:
d5:0b:5e:c3:68:d5:47:40:bc:b8:9f:85:3d:33:b4:
0a:3b:94:4d:64:16:d1:a7:c8:2b:56:d5:6d:5f:d1:
e2:2f:66:21:02:7a:43:3a:c4:7d:54:78:57:f9:f1:
c9:f0:2d:30:1b:3d:04:b8:61:0a:65:74:65:0b:f8:
45:65:56:0a:76:1b:40:4d:9c:51:00:57:a5:a9:51:
3c:51:33:31:93:a8:a5:d0:ea:15:08:14:71:4b:4d:
e3:c2:d2:0b:5a:ea:77:8c:a0:36:9c:28:94:40:2e:
7b:8b:e1:72:32:27:94:2e:5a:de:fa:a5:71:cb:3b:
87:35:ea:9c:59:cf:80:be:ac:44:f0:c7:49:f0:ea:
56:77:98:df:d8:88:f1:43:63:aa:15:5f:21:0a:24:
77:ec:7c:9a:c6:af:d7:d0:a6:e3:bc:42:d1:5f:44:
d7:44:b4:59:3c:cb:06:06:e6:ad:e7:d1:d9:fc:a6:
9d:25:92:64:9f:8d:61:fd:84:82:ea:2a:85:28:b2:
3c:01:12:9d:92:44:24:3c:4d:ff:bb:b6:06:ae:da:
68:f8:95:11:f3:54:6e:6a:9b:15:47:ac:8c:ee:90:
7d:95:3f:c9:2d:bc:c6:69:c4:b2:ea:3d:78:fd:61:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:00:04:25:CF:90:CD:CE:CD:53:83:B7:DE:20:4F:0B:25:52:5C
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ad:0f:06:56:e5:90:f1:3d:1f:47:98:d1:9d:2e:76:05:90:
03:43:3a:d7:ec:97:98:dd:9f:42:0f:d5:91:df:5a:71:15:32:
27:e3:34:fb:6c:10:2b:a7:fe:83:ec:ab:f2:84:cb:42:58:21:
e1:39:c8:64:98:10:a7:e7:80:be:f1:56:03:05:26:8c:d1:02:
15:b2:37:7a:d2:de:19:de:d3:f8:70:74:72:73:5e:71:da:40:
86:e8:03:b2:09:86:87:21:51:18:b3:7e:e0:e1:78:b0:74:c6:
c0:44:62:0e:73:7d:32:a0:04:6e:dd:93:56:ca:ee:d7:75:85:
8b:18:d8:83:25:c9:ec:36:97:61:d5:70:9f:b7:64:08:ae:eb:
1b:a0:df:b3:ff:a9:3e:46:a6:f0:26:79:39:ce:c6:61:db:54:
b0:62:30:52:28:24:2d:74:37:d2:cd:fb:a1:01:2d:be:ba:d9:
4a:eb:78:9d:72:74:a6:43:6e:53:2d:2d:4b:a8:d5:89:bf:ae:
95:dc:b4:3c:a6:60:64:ef:89:8b:65:41:cd:e8:6f:30:51:d7:
5d:cc:22:92:a5:92:97:66:3a:a2:f2:f5:a9:66:7c:6a:f1:e8:
8e:2d:6b:c4:1d:c6:d1:81:63:4c:85:e0:09:3e:37:e8:27:de:
11:95:2a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYAerBR8QRqqHRr5o7B9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzA5ZWQ3MjIxZDRkNTJhZTIzNTEyYTBiZWE1MDBjNjc3
YTJlYTEwHhcNMjYwNzI3MDcwMDMwWhcNMjYwNzI4MDcwMDMwWjAzMTEwLwYDVQQD
EyhjYTEwMDAwNDI1Y2Y5MGNkY2VjZDUzODNiN2RlMjA0ZjBiMjU1MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eh70CF5OzJSIS/i26rVC17DaNVH
QLy4n4U9M7QKO5RNZBbRp8grVtVtX9HiL2YhAnpDOsR9VHhX+fHJ8C0wGz0EuGEK
ZXRlC/hFZVYKdhtATZxRAFelqVE8UTMxk6il0OoVCBRxS03jwtILWup3jKA2nCiU
QC57i+FyMieULlre+qVxyzuHNeqcWc+AvqxE8MdJ8OpWd5jf2IjxQ2OqFV8hCiR3
7Hyaxq/X0KbjvELRX0TXRLRZPMsGBuat59HZ/KadJZJkn41h/YSC6iqFKLI8ARKd
kkQkPE3/u7YGrtpo+JUR81RuapsVR6yM7pB9lT/JLbzGacSy6j14/WH4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoQAAQlz5DNzs1Tg7feIE8LJVJcMB8GA1UdIwQY
MBaAFGUwntciHU1SriNRKgvqUAxnei6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQt
ZDFkNTEyMGNmNmVlLzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQtZDFkNTEyMGNmNmVl
LzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvq0PBlbl
kPE9H0eY0Z0udgWQA0M61+yXmN2fQg/Vkd9acRUyJ+M0+2wQK6f+g+yr8oTLQlgh
4TnIZJgQp+eAvvFWAwUmjNECFbI3etLeGd7T+HB0cnNecdpAhugDsgmGhyFRGLN+
4OF4sHTGwERiDnN9MqAEbt2TVsru13WFixjYgyXJ7DaXYdVwn7dkCK7rG6Dfs/+p
Pkam8CZ5Oc7GYdtUsGIwUigkLXQ30s37oQEtvrrZSut4nXJ0pkNuUy0tS6jVib+u
ldy0PKZgZO+Ji2VBzehvMFHXXcwikqWSl2Y6ovL1qWZ8avHoji1rxB3G0YFjTIXg
CT436CfeEZUqfA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:18 2026 by rpki-client