Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: pCKvEiHw3nGx36jGCI+2qgMF7OjJxHnbU+hXVodrYnQ=
Subject key identifier: 74:4E:0B:D6:C0:65:0B:1C:B4:BC:9D:79:7B:B2:F7:ED:72:4A:44:9F
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019F8FB59859CF987870F3BAC211F3F90ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 143D
Signing time: Thu 23 Jul 2026 16:01:10 +0000
Manifest this update: Thu 23 Jul 2026 16:01:10 +0000
Manifest next update: Fri 24 Jul 2026 16:01:10 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: +E9Rwad1GsWWInSOlhZbwDGI5UHJBcRfQtKLUewB5I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:98:59:cf:98:78:70:f3:ba:c2:11:f3:f9:0e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jul 23 16:01:10 2026 GMT
Not After : Jul 24 16:01:10 2026 GMT
Subject: CN=744e0bd6c0650b1cb4bc9d797bb2f7ed724a449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:18:98:21:93:32:1d:95:36:47:01:21:1f:
2c:5e:84:2e:7c:8a:f3:f0:bd:25:ea:30:9e:12:14:
e9:6a:4f:d1:e7:65:54:67:65:8d:7b:98:76:a5:0b:
e8:65:1b:fe:50:ce:f0:9d:02:15:5c:2d:30:a6:db:
f7:3a:bd:b1:f8:28:3e:17:4d:27:b3:0b:ae:ae:ed:
73:12:aa:4f:01:28:93:ae:23:76:7a:3e:61:76:1d:
9e:d6:24:51:0a:be:b8:74:75:0e:1f:1e:2c:5a:31:
14:2c:d1:31:50:1e:8e:fa:8b:e8:d5:06:1b:5f:0b:
cc:08:8f:85:78:65:0a:3c:f7:f7:33:8f:44:d7:3f:
94:8d:29:75:26:c3:73:b6:75:1c:b2:5e:a6:9e:42:
65:b3:6b:fa:6f:02:ad:30:01:aa:1c:05:9f:0d:c2:
6a:3c:ca:13:f9:ab:eb:66:f2:21:7c:e6:ff:8c:db:
71:ff:71:40:14:51:d3:d0:eb:ff:4f:f0:0b:90:00:
b6:44:03:ec:44:ba:d3:1d:76:79:f9:32:52:69:51:
6f:5b:6f:5b:64:57:be:8d:29:99:9e:17:3f:1a:09:
70:8d:a2:6c:19:92:23:d3:4b:0c:1b:da:a9:a1:f5:
2f:87:97:88:4a:e5:27:ad:84:26:5f:69:38:f7:58:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:0B:D6:C0:65:0B:1C:B4:BC:9D:79:7B:B2:F7:ED:72:4A:44:9F
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:fd:3c:51:4c:20:d9:33:2d:33:a5:ee:ec:fd:5c:a2:c7:
e1:de:be:30:63:82:8e:b4:15:e6:9f:ed:55:4b:02:68:96:2b:
83:bc:86:8e:69:cb:25:38:ec:61:6e:9d:33:a5:d0:c6:77:46:
a8:eb:41:d3:9a:b5:93:21:6e:0a:13:07:0f:fd:aa:74:29:09:
a3:3f:8e:fc:df:95:51:b8:15:52:be:c3:2b:0a:bd:a0:18:80:
c9:0a:da:b4:a9:9a:0a:45:bb:f8:8e:39:29:3c:2b:74:6f:f8:
c3:5b:be:a2:85:f8:c2:8d:93:d5:a3:87:3b:e6:f5:2a:84:2c:
b1:21:1e:d5:3c:1b:e1:30:47:6a:3b:26:e2:c5:ff:3f:4e:ea:
12:19:f3:69:ba:7c:04:67:a5:d4:44:21:e2:5a:5f:13:d1:a8:
17:ea:00:f8:69:cd:72:7d:bc:3c:17:1c:09:c5:3e:1a:3c:6f:
32:1d:28:25:18:30:d7:2b:40:49:d3:a4:cb:e2:21:d7:08:e8:
47:fb:8b:89:37:f2:56:16:83:1a:e1:db:ae:fd:2a:78:03:22:
82:a6:a6:ba:1f:7d:0d:d6:93:47:14:24:84:1e:cd:59:d5:f4:
ba:2f:0f:75:68:51:ce:67:d8:e3:d9:9c:26:60:72:4a:17:0b:
45:09:f3:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtZhZz5h4cPO6whHz+Q7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjYwNzIzMTYwMTEwWhcNMjYwNzI0MTYwMTEwWjAzMTEwLwYDVQQD
Eyg3NDRlMGJkNmMwNjUwYjFjYjRiYzlkNzk3YmIyZjdlZDcyNGE0NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYgYmCGTMh2VNkcBIR8sXoQufIrz
8L0l6jCeEhTpak/R52VUZ2WNe5h2pQvoZRv+UM7wnQIVXC0wptv3Or2x+Cg+F00n
swuuru1zEqpPASiTriN2ej5hdh2e1iRRCr64dHUOHx4sWjEULNExUB6O+ovo1QYb
XwvMCI+FeGUKPPf3M49E1z+UjSl1JsNztnUcsl6mnkJls2v6bwKtMAGqHAWfDcJq
PMoT+avrZvIhfOb/jNtx/3FAFFHT0Ov/T/ALkAC2RAPsRLrTHXZ5+TJSaVFvW29b
ZFe+jSmZnhc/GglwjaJsGZIj00sMG9qpofUvh5eISuUnrYQmX2k491hTPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHROC9bAZQsctLydeXuy9+1ySkSfMB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp39PFFM
INkzLTOl7uz9XKLH4d6+MGOCjrQV5p/tVUsCaJYrg7yGjmnLJTjsYW6dM6XQxndG
qOtB05q1kyFuChMHD/2qdCkJoz+O/N+VUbgVUr7DKwq9oBiAyQratKmaCkW7+I45
KTwrdG/4w1u+ooX4wo2T1aOHO+b1KoQssSEe1Twb4TBHajsm4sX/P07qEhnzabp8
BGel1EQh4lpfE9GoF+oA+GnNcn28PBccCcU+GjxvMh0oJRgw1ytASdOky+Ih1wjo
R/uLiTfyVhaDGuHbrv0qeAMigqamuh99DdaTRxQkhB7NWdX0ui8PdWhRzmfY49mc
JmByShcLRQnzxA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:23 2026 by rpki-client