Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: +FRCQqjAMJzBvoGxJoE/vuujNzaRlI1NoVpLUGICypA=
Subject key identifier: 2A:F1:00:0B:34:97:57:55:8F:F0:B0:C6:50:1B:96:8E:A2:29:95:EE
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019F93919F9693726404C83F41D55F204691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 16D5
Signing time: Fri 24 Jul 2026 10:00:22 +0000
Manifest this update: Fri 24 Jul 2026 10:00:22 +0000
Manifest next update: Sat 25 Jul 2026 10:00:22 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: axSeMfrJxHi5dtCFbMAsoeILqGqZdVHVfsO317J3NHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9f:96:93:72:64:04:c8:3f:41:d5:5f:20:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Jul 24 10:00:22 2026 GMT
Not After : Jul 25 10:00:22 2026 GMT
Subject: CN=2af1000b349757558ff0b0c6501b968ea22995ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:52:e7:c5:32:af:f9:70:9e:e1:df:8b:1c:
34:95:86:81:db:cc:23:89:45:e7:c0:93:5f:29:13:
27:d6:0a:46:46:9e:67:4c:17:78:5a:4e:2a:ff:51:
11:8c:b5:dc:24:a0:3f:d4:9d:b5:91:c6:31:33:82:
87:bd:80:36:18:be:da:5d:db:95:7f:6d:c6:58:a1:
fc:d1:24:db:7f:ef:b4:bf:0f:56:62:9e:48:e7:b7:
fa:c3:cc:f6:ff:8c:ba:5e:bc:00:ea:e2:a4:94:8d:
fd:3d:d5:cd:f3:79:47:07:e0:b8:80:da:88:2e:7d:
c1:52:2c:47:23:d4:62:87:5c:91:82:a7:7d:28:a8:
e5:cc:62:7f:33:e3:87:1f:63:da:bb:0f:b5:ed:09:
25:cc:e4:1d:3d:f1:7b:bc:02:e2:9a:1b:10:3c:0e:
3b:48:ae:4d:09:5c:1b:fc:a3:dd:af:d5:7b:b7:0e:
01:4c:38:03:58:62:e2:2a:c1:dd:af:5a:a3:7b:2b:
3e:49:ae:da:eb:ec:94:05:f8:dc:a8:da:4d:b1:8e:
03:0c:16:c2:c4:0f:49:44:61:c2:c6:35:24:f0:19:
ce:e4:52:15:6f:6e:1e:ba:70:cb:ed:3d:af:16:0f:
5c:db:e2:28:eb:a8:35:e8:74:7b:9a:a0:a8:e4:8a:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:00:0B:34:97:57:55:8F:F0:B0:C6:50:1B:96:8E:A2:29:95:EE
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c7:18:b1:f0:b9:69:67:89:a1:3c:65:86:3c:ad:f0:a0:02:
3a:b4:b5:6c:ff:90:50:35:19:46:c5:56:f1:ed:ad:e2:e8:79:
ca:69:a4:7a:75:83:96:49:95:c1:de:2f:5a:cc:60:49:5e:61:
20:66:b3:26:4f:a3:94:4d:55:e1:0b:01:70:bb:93:ea:7d:c2:
a1:6f:f8:62:80:89:ff:8c:e3:68:9e:16:59:b0:58:46:4e:f1:
67:3b:db:46:0c:3f:56:79:06:68:86:a8:54:3b:1d:a4:60:01:
4d:fd:bb:5e:2c:df:a8:a6:3a:8d:4d:4b:8d:61:a0:ea:1f:b0:
9e:d8:4d:e5:23:aa:d7:5d:03:40:58:11:ec:91:5f:5c:18:37:
74:8d:9e:93:ca:df:33:1e:b3:bb:24:8e:22:c9:d8:27:b4:0d:
d1:de:b0:5c:de:93:95:e0:a1:3f:e0:e0:44:5d:b8:6c:e0:18:
8d:3e:71:24:bc:05:28:f9:19:f3:6d:dc:38:a9:c6:7e:cf:dc:
3f:4b:56:f8:dd:79:93:ea:01:04:b5:d8:4e:a6:21:fd:64:1f:
ec:d3:88:56:31:e1:3b:77:27:2f:a5:19:d0:e0:b8:19:36:40:
84:51:c7:a3:f1:e5:3e:2e:be:7b:ee:81:f2:c4:b1:a3:d0:87:
05:d0:0e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkZ+Wk3JkBMg/QdVfIEaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjYwNzI0MTAwMDIyWhcNMjYwNzI1MTAwMDIyWjAzMTEwLwYDVQQD
EygyYWYxMDAwYjM0OTc1NzU1OGZmMGIwYzY1MDFiOTY4ZWEyMjk5NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEJS58Uyr/lwnuHfixw0lYaB28wj
iUXnwJNfKRMn1gpGRp5nTBd4Wk4q/1ERjLXcJKA/1J21kcYxM4KHvYA2GL7aXduV
f23GWKH80STbf++0vw9WYp5I57f6w8z2/4y6XrwA6uKklI39PdXN83lHB+C4gNqI
Ln3BUixHI9Rih1yRgqd9KKjlzGJ/M+OHH2Pauw+17QklzOQdPfF7vALimhsQPA47
SK5NCVwb/KPdr9V7tw4BTDgDWGLiKsHdr1qjeys+Sa7a6+yUBfjcqNpNsY4DDBbC
xA9JRGHCxjUk8BnO5FIVb24eunDL7T2vFg9c2+Io66g16HR7mqCo5IplNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrxAAs0l1dVj/CwxlAblo6iKZXuMB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjscYsfC5
aWeJoTxlhjyt8KACOrS1bP+QUDUZRsVW8e2t4uh5ymmkenWDlkmVwd4vWsxgSV5h
IGazJk+jlE1V4QsBcLuT6n3CoW/4YoCJ/4zjaJ4WWbBYRk7xZzvbRgw/VnkGaIao
VDsdpGABTf27XizfqKY6jU1LjWGg6h+wnthN5SOq110DQFgR7JFfXBg3dI2ek8rf
Mx6zuySOIsnYJ7QN0d6wXN6TleChP+DgRF24bOAYjT5xJLwFKPkZ823cOKnGfs/c
P0tW+N15k+oBBLXYTqYh/WQf7NOIVjHhO3cnL6UZ0OC4GTZAhFHHo/HlPi6+e+6B
8sSxo9CHBdAOpg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:39:14 2026 by rpki-client