Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: 0gvMTNaQ5Rh+5cpbl6I3U+cMXRU2gSp6aYm/RDz6Dxs=
Subject key identifier: 9B:FD:4A:B1:B1:D0:61:7E:1A:7B:04:98:1B:FD:98:E9:7F:23:4C:A6
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 019FA44E45EF1CF183B3AA750A67F67E2E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 014D
Signing time: Mon 27 Jul 2026 16:00:20 +0000
Manifest this update: Mon 27 Jul 2026 16:00:20 +0000
Manifest next update: Tue 28 Jul 2026 16:00:20 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: +vctlMeGUCeVSvzk+q1gJNcOmhztStQHaWHVbmGuQ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:45:ef:1c:f1:83:b3:aa:75:0a:67:f6:7e:2e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Jul 27 16:00:20 2026 GMT
Not After : Jul 28 16:00:20 2026 GMT
Subject: CN=9bfd4ab1b1d0617e1a7b04981bfd98e97f234ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:65:1a:7c:94:3f:55:18:c2:e2:3a:9a:68:
51:ca:05:08:84:8f:76:4c:a5:2d:17:1f:11:f6:bc:
f1:8f:47:f8:15:f7:88:cd:f2:2e:0f:56:68:0f:21:
4b:6a:e0:88:1d:33:02:6a:21:33:b0:11:56:7a:6b:
59:3a:bd:22:23:c3:3a:bb:59:67:bf:f5:5c:5d:5a:
14:c3:96:b2:9f:7d:5b:6f:86:25:82:c9:3b:d6:85:
b0:45:6e:ff:5f:1e:66:e3:c7:c0:1b:9b:7f:b0:ad:
78:ac:f8:60:8a:59:2d:0e:e4:58:69:66:0f:5b:60:
67:80:2c:0e:88:12:eb:e9:23:f8:4b:f3:e3:a9:55:
04:d0:3b:c7:98:d1:73:ff:f2:ca:3d:54:a7:7e:fa:
ef:fc:20:35:69:d4:66:37:59:b0:f3:4c:4c:81:3e:
bd:77:bd:34:61:d1:bd:67:02:71:83:76:a5:0e:2e:
d6:70:79:d5:83:9e:25:5a:b3:bc:31:27:c8:42:6d:
cb:5b:bd:e2:3a:68:b7:29:c8:f9:4e:66:41:ee:63:
31:89:7c:d9:20:07:59:4d:3e:b3:20:09:49:ab:cf:
f4:d0:c2:4b:c5:1f:3e:72:c5:92:77:24:49:5a:6a:
53:e2:ff:45:6c:8a:f9:84:03:16:79:c2:af:47:45:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FD:4A:B1:B1:D0:61:7E:1A:7B:04:98:1B:FD:98:E9:7F:23:4C:A6
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3b:a5:37:a0:10:45:83:0f:dc:8c:8d:9e:67:1c:10:93:d5:
23:57:c5:ad:05:87:da:41:03:c2:33:5d:f5:b1:58:71:a8:61:
89:32:bc:49:f2:a5:7f:13:09:b5:fa:c5:b1:3c:f2:27:84:f6:
6e:3c:a9:c2:c7:c0:2e:57:30:4c:4c:03:82:c6:51:6b:78:ff:
2d:23:63:f2:82:8c:6a:ec:43:92:0c:84:4a:cd:e3:b9:12:8a:
24:88:72:d5:8d:42:27:94:1b:ed:1f:a0:fd:75:c8:a9:03:cc:
68:70:9b:4b:b0:5b:8d:50:02:d6:ea:e5:2a:11:8c:5c:2b:bc:
8d:b5:5e:4a:f1:21:b4:09:38:41:3b:1d:0a:31:e3:06:99:0b:
d8:5b:14:7d:e4:cb:9f:49:a0:23:32:70:95:18:94:d3:5a:59:
28:fa:d2:87:ef:87:fc:14:94:4a:ab:ca:0a:75:7c:9e:3f:e1:
33:12:c2:ba:62:48:1b:df:6d:a1:87:b3:60:6f:9e:90:aa:c3:
82:ef:d3:a3:80:75:82:89:d2:ae:cd:d4:24:ea:1e:96:e6:2f:
94:13:76:ca:32:90:8c:48:c2:85:d5:c2:0a:2f:0a:8d:ee:89:
35:4e:00:69:59:63:39:25:bd:fd:08:e0:55:c7:30:70:00:72:
ca:4f:18:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kTkXvHPGDs6p1Cmf2fi4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTk2NDg1ZTY3Mzk0OGQ1NTUwNWRiNzUxMGYzYjk1Nzdj
ZDNhZGIwHhcNMjYwNzI3MTYwMDIwWhcNMjYwNzI4MTYwMDIwWjAzMTEwLwYDVQQD
Eyg5YmZkNGFiMWIxZDA2MTdlMWE3YjA0OTgxYmZkOThlOTdmMjM0Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+plGnyUP1UYwuI6mmhRygUIhI92
TKUtFx8R9rzxj0f4FfeIzfIuD1ZoDyFLauCIHTMCaiEzsBFWemtZOr0iI8M6u1ln
v/VcXVoUw5ayn31bb4Ylgsk71oWwRW7/Xx5m48fAG5t/sK14rPhgilktDuRYaWYP
W2BngCwOiBLr6SP4S/PjqVUE0DvHmNFz//LKPVSnfvrv/CA1adRmN1mw80xMgT69
d700YdG9ZwJxg3alDi7WcHnVg54lWrO8MSfIQm3LW73iOmi3Kcj5TmZB7mMxiXzZ
IAdZTT6zIAlJq8/00MJLxR8+csWSdyRJWmpT4v9FbIr5hAMWecKvR0UPxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv9SrGx0GF+GnsEmBv9mOl/I0ymMB8GA1UdIwQY
MBaAFMwZZIXmc5SNVVBdt1EPO5V3zTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xY2ZjZWItYjQwOS00ZTg5LWJjYjAt
MmZlMTRkZDM4ZDVkLzEvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xY2ZjZWItYjQwOS00ZTg5LWJjYjAtMmZlMTRkZDM4ZDVk
LzEvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTulN6AQ
RYMP3IyNnmccEJPVI1fFrQWH2kEDwjNd9bFYcahhiTK8SfKlfxMJtfrFsTzyJ4T2
bjypwsfALlcwTEwDgsZRa3j/LSNj8oKMauxDkgyESs3juRKKJIhy1Y1CJ5Qb7R+g
/XXIqQPMaHCbS7BbjVAC1urlKhGMXCu8jbVeSvEhtAk4QTsdCjHjBpkL2FsUfeTL
n0mgIzJwlRiU01pZKPrSh++H/BSUSqvKCnV8nj/hMxLCumJIG99toYezYG+ekKrD
gu/To4B1gonSrs3UJOoeluYvlBN2yjKQjEjChdXCCi8Kje6JNU4AaVljOSW9/Qjg
VccwcAByyk8YYQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:33:50 2026 by rpki-client