
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: 5+maGsqeh24xucCGnEAsnJAiG7NmqQj+ahN1+IjNPF4=
Subject key identifier: 91:61:B9:33:FD:DD:7F:21:B3:12:85:22:AE:F6:69:21:31:70:3E:8B
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 019F94DC7B2AEBE1E97AE2EB7518A2D2B517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 0573
Signing time: Fri 24 Jul 2026 16:01:45 +0000
Manifest this update: Fri 24 Jul 2026 16:01:45 +0000
Manifest next update: Sat 25 Jul 2026 16:01:45 +0000
Files and hashes: 1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: Zdrw0QuXFOAEyQTqi+xs6y1weT04gpWw1c1nqb24tGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:7b:2a:eb:e1:e9:7a:e2:eb:75:18:a2:d2:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Jul 24 16:01:45 2026 GMT
Not After : Jul 25 16:01:45 2026 GMT
Subject: CN=9161b933fddd7f21b3128522aef6692131703e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:b5:a1:bc:64:15:cf:e0:5b:19:db:bf:3a:
5f:16:67:fc:87:c3:ea:c1:67:7b:9c:5a:f0:ac:d1:
46:7b:ab:26:3d:0a:aa:7c:e2:7c:92:c7:a5:e1:ff:
1a:98:07:9c:fb:6e:88:12:ab:70:4a:b1:74:a2:de:
c0:b0:6b:99:86:be:b6:a6:12:26:57:aa:4a:63:d8:
20:be:35:24:dd:93:bb:41:ef:bd:cf:4c:af:d6:47:
74:3e:e3:b7:4d:b5:48:53:ed:51:06:b9:74:68:94:
fd:df:e9:2e:1c:25:d0:6e:9b:60:4a:c2:8a:5a:63:
88:67:9e:2c:7f:fa:60:0b:20:a3:3e:10:e4:c3:76:
ce:80:1f:86:11:80:4e:65:c0:22:f9:99:be:cf:05:
68:d8:88:c3:43:6c:d0:c9:1f:99:14:a4:b3:d8:b7:
74:45:fe:53:1f:e1:83:0a:0f:6e:7b:44:02:0d:e7:
62:b6:fb:c1:8c:80:3a:eb:0c:e1:1d:e5:c7:21:c6:
bb:e5:7a:a3:0b:94:02:d9:29:67:34:2a:ab:43:db:
d4:41:44:f0:43:99:33:04:d4:c4:05:5a:73:16:4a:
b0:3c:b9:39:e6:ce:05:11:5e:2e:8b:30:79:e9:c0:
73:5e:6c:ce:b2:28:0c:1f:0c:89:91:98:e6:6e:d7:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:B9:33:FD:DD:7F:21:B3:12:85:22:AE:F6:69:21:31:70:3E:8B
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:11:60:1a:4d:4c:4a:89:ed:9c:68:43:15:d2:6d:f6:ab:
15:8c:7c:12:c2:e9:7b:29:cd:d6:3d:35:36:cd:25:ef:2d:e8:
b3:04:0a:6b:9e:5d:99:9c:15:54:9c:d7:0a:4d:f2:9e:c0:bf:
68:99:37:c9:3f:92:68:1b:76:67:ae:b4:93:6b:08:19:e7:36:
89:81:7d:61:70:5d:72:bd:f4:98:5a:39:ba:0e:c7:03:b5:93:
8c:c7:44:54:69:a8:73:eb:3a:b7:4f:c6:d3:8b:73:0a:de:91:
1d:db:49:fb:a4:6b:ab:3e:a6:b3:54:8d:8b:c6:a0:14:aa:f4:
f9:ba:0b:92:94:8a:30:fd:0a:6b:78:d5:6a:da:90:bd:83:f2:
71:70:d3:92:96:f8:1f:79:c3:48:36:ae:78:a6:a7:63:1d:bb:
b0:11:80:0e:f8:a3:db:57:fe:ff:04:dd:f0:b5:18:61:dd:e2:
da:d5:f5:54:d0:a4:cd:89:2c:9f:a8:24:26:85:e1:a7:d7:f5:
2c:fe:df:41:c4:74:97:db:22:2c:f6:37:6d:6d:d5:be:01:4c:
2b:72:2a:a3:0b:a1:4c:f2:60:2c:61:8b:79:20:c9:84:b6:ed:
db:85:b8:80:8d:a6:0e:85:9a:28:59:9b:87:ab:66:d0:c8:94:
5f:09:99:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U3Hsq6+HpeuLrdRii0rUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGUyYmFjNTFkOWNiNzI5YjFhNzU2MjhlZTZiNGM5YzFl
OWZmYzgwHhcNMjYwNzI0MTYwMTQ1WhcNMjYwNzI1MTYwMTQ1WjAzMTEwLwYDVQQD
Eyg5MTYxYjkzM2ZkZGQ3ZjIxYjMxMjg1MjJhZWY2NjkyMTMxNzAzZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bu1obxkFc/gWxnbvzpfFmf8h8Pq
wWd7nFrwrNFGe6smPQqqfOJ8ksel4f8amAec+26IEqtwSrF0ot7AsGuZhr62phIm
V6pKY9ggvjUk3ZO7Qe+9z0yv1kd0PuO3TbVIU+1RBrl0aJT93+kuHCXQbptgSsKK
WmOIZ54sf/pgCyCjPhDkw3bOgB+GEYBOZcAi+Zm+zwVo2IjDQ2zQyR+ZFKSz2Ld0
Rf5TH+GDCg9ue0QCDeditvvBjIA66wzhHeXHIca75XqjC5QC2SlnNCqrQ9vUQUTw
Q5kzBNTEBVpzFkqwPLk55s4FEV4uizB56cBzXmzOsigMHwyJkZjmbtcbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFhuTP93X8hsxKFIq72aSExcD6LMB8GA1UdIwQY
MBaAFMxOK6xR2ctymxp1Yo7mtMnB6f/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNTg4MDMtMjRlNy00NmNmLWIyNDQt
OWRhNzg4N2Y2YTJmLzEvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNTg4MDMtMjRlNy00NmNmLWIyNDQtOWRhNzg4N2Y2YTJm
LzEvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOQRYBpN
TEqJ7ZxoQxXSbfarFYx8EsLpeynN1j01Ns0l7y3oswQKa55dmZwVVJzXCk3ynsC/
aJk3yT+SaBt2Z660k2sIGec2iYF9YXBdcr30mFo5ug7HA7WTjMdEVGmoc+s6t0/G
04tzCt6RHdtJ+6Rrqz6ms1SNi8agFKr0+boLkpSKMP0Ka3jVatqQvYPycXDTkpb4
H3nDSDaueKanYx27sBGADvij21f+/wTd8LUYYd3i2tX1VNCkzYksn6gkJoXhp9f1
LP7fQcR0l9siLPY3bW3VvgFMK3IqowuhTPJgLGGLeSDJhLbt24W4gI2mDoWaKFmb
h6tm0MiUXwmZ5g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:29 2026 by rpki-client