Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: l7sIvAYL30YMJZJY1cwPfi5v4EYNR1e8F/y5iYAVLjk=
Subject key identifier: 54:3D:E8:3A:E5:B4:E3:39:3B:A4:AA:B5:6B:EA:CC:4D:52:0B:5E:45
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019F94A4E953383E40BA928EC751A9173AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 15:01:03 +0000
Manifest this update: Fri 24 Jul 2026 15:01:03 +0000
Manifest next update: Sat 25 Jul 2026 15:01:03 +0000
Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: +M57ZWG1so4i3O6qrDN29v2ze/pPrVJqIwzuY0NKh2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:e9:53:38:3e:40:ba:92:8e:c7:51:a9:17:3a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Jul 24 15:01:03 2026 GMT
Not After : Jul 25 15:01:03 2026 GMT
Subject: CN=543de83ae5b4e3393ba4aab56beacc4d520b5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:bc:46:99:24:ea:4b:26:9b:00:a0:93:11:
1b:c3:95:1a:ec:07:a7:b3:e8:00:d2:ff:38:8e:48:
f7:c6:f6:fa:6e:bc:bf:8d:e9:9e:45:ab:51:28:92:
2c:d0:c1:b8:ba:2f:74:52:f0:d4:48:45:cb:00:40:
da:a1:b3:ca:62:2f:77:52:8f:ae:0d:46:bb:e8:d4:
e4:c9:02:25:de:e4:df:93:fc:ca:83:8d:73:16:1b:
29:1c:ef:3a:96:7e:52:5a:8a:2f:00:db:68:85:21:
f1:23:ac:c8:1a:b3:00:08:57:5d:0d:e0:fc:9c:65:
36:72:c0:7b:96:d1:d6:0f:bb:d7:1d:df:49:0b:63:
66:63:53:e6:ae:97:b7:06:f6:b4:8c:8f:db:1f:a6:
ff:37:6c:44:24:ec:ed:35:d8:ee:06:d1:cf:04:63:
ec:57:f1:9a:16:af:b9:20:ba:ba:ff:d0:f5:50:c5:
20:63:43:22:05:11:6d:d6:06:68:36:51:06:45:f6:
96:48:f3:fa:64:03:da:93:f3:69:cc:6f:60:55:8b:
a9:5c:ce:75:79:d1:19:37:ac:08:53:0f:91:39:62:
84:a6:e0:00:66:2a:84:a1:1b:ff:48:53:44:f0:c3:
d0:ed:2b:ac:9d:ef:fc:40:25:0a:f4:76:eb:73:ce:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:E8:3A:E5:B4:E3:39:3B:A4:AA:B5:6B:EA:CC:4D:52:0B:5E:45
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:12:2f:6c:7c:db:32:93:0b:d4:47:4a:40:05:9a:8a:fd:
82:05:4c:16:6a:47:ab:36:6f:08:1b:80:15:85:ed:3a:9f:a0:
48:ad:46:d2:d2:b6:98:d9:eb:68:93:b8:13:34:3d:67:bc:85:
4c:05:47:7f:5d:3f:36:09:c1:5a:93:a3:fc:46:c4:54:2c:87:
f1:95:3a:be:9d:ce:57:c8:32:20:22:23:95:a3:ff:d4:c3:5a:
fe:b9:e9:a3:64:17:71:c1:2e:5b:62:3a:44:d9:18:64:78:5c:
db:cc:e8:c5:a9:f8:86:05:a4:af:66:e9:e2:66:d6:9d:ab:82:
2b:b5:bc:29:2b:c1:48:00:cf:4c:09:ce:f4:11:f2:f5:50:09:
e5:f0:8e:9d:da:82:a3:13:1a:79:d0:07:4b:7e:54:ba:d3:09:
36:88:22:30:ac:d1:86:22:c1:62:c5:5c:e5:b1:d4:f0:e5:05:
21:63:ca:eb:22:dc:ae:af:00:e4:14:f2:42:31:29:13:28:8c:
e0:c5:43:0c:cb:a9:36:71:b2:72:b0:ae:c8:bf:c6:1c:15:ad:
c3:22:87:8a:c7:c4:40:16:75:e9:79:0f:2d:ef:ce:0e:d7:5f:
c8:3d:cb:16:00:c2:bd:ca:ac:52:0c:1c:7e:64:bb:9a:51:b3:
b9:2d:2a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpOlTOD5AupKOx1GpFzrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2
Y2QyMzAwHhcNMjYwNzI0MTUwMTAzWhcNMjYwNzI1MTUwMTAzWjAzMTEwLwYDVQQD
Eyg1NDNkZTgzYWU1YjRlMzM5M2JhNGFhYjU2YmVhY2M0ZDUyMGI1ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2q8Rpkk6ksmmwCgkxEbw5Ua7Aen
s+gA0v84jkj3xvb6bry/jemeRatRKJIs0MG4ui90UvDUSEXLAEDaobPKYi93Uo+u
DUa76NTkyQIl3uTfk/zKg41zFhspHO86ln5SWoovANtohSHxI6zIGrMACFddDeD8
nGU2csB7ltHWD7vXHd9JC2NmY1Pmrpe3Bva0jI/bH6b/N2xEJOztNdjuBtHPBGPs
V/GaFq+5ILq6/9D1UMUgY0MiBRFt1gZoNlEGRfaWSPP6ZAPak/NpzG9gVYupXM51
edEZN6wIUw+ROWKEpuAAZiqEoRv/SFNE8MPQ7Susne/8QCUK9Hbrc86t8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ96DrltOM5O6SqtWvqzE1SC15FMB8GA1UdIwQY
MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt
ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0
LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblMSL2x8
2zKTC9RHSkAFmor9ggVMFmpHqzZvCBuAFYXtOp+gSK1G0tK2mNnraJO4EzQ9Z7yF
TAVHf10/NgnBWpOj/EbEVCyH8ZU6vp3OV8gyICIjlaP/1MNa/rnpo2QXccEuW2I6
RNkYZHhc28zoxan4hgWkr2bp4mbWnauCK7W8KSvBSADPTAnO9BHy9VAJ5fCOndqC
oxMaedAHS35UutMJNogiMKzRhiLBYsVc5bHU8OUFIWPK6yLcrq8A5BTyQjEpEyiM
4MVDDMupNnGycrCuyL/GHBWtwyKHisfEQBZ16XkPLe/ODtdfyD3LFgDCvcqsUgwc
fmS7mlGzuS0q+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:04 2026 by rpki-client