Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: CI8HuOLKKErcTyDsmxVIBWgwbpi2KXFRTAlnqxQiUZY=
Subject key identifier: F7:42:9B:E3:4E:CC:4F:2A:B6:09:1B:1D:AF:C1:E9:96:01:46:54:1D
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019F8FB5495F0DB71433EADD85219165A593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 1270
Signing time: Thu 23 Jul 2026 16:00:50 +0000
Manifest this update: Thu 23 Jul 2026 16:00:50 +0000
Manifest next update: Fri 24 Jul 2026 16:00:50 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: ojxE1dOq7YJXAkIs5EMdX1/73UDnEauXt3UBGuUBpq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:49:5f:0d:b7:14:33:ea:dd:85:21:91:65:a5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jul 23 16:00:50 2026 GMT
Not After : Jul 24 16:00:50 2026 GMT
Subject: CN=f7429be34ecc4f2ab6091b1dafc1e9960146541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:9c:15:f8:6f:98:61:c7:82:b5:17:fb:ed:
4b:04:d8:33:ac:f2:68:95:2d:db:09:9e:2d:98:dc:
9d:77:80:af:ca:96:e9:4f:29:b5:79:96:33:3a:96:
94:37:63:73:a7:d7:4d:12:6a:b7:08:44:d1:f9:69:
f5:cd:8c:ba:3c:a3:54:25:6b:92:3b:90:b0:eb:70:
a3:f7:db:99:a3:8d:bc:f7:fa:e1:ba:91:da:38:a5:
62:04:f9:e4:5a:58:81:e4:ee:4d:95:38:55:b8:ca:
3d:6c:4d:63:95:86:6e:15:c3:75:78:af:77:24:4b:
2d:44:b2:57:3d:5f:ca:c3:01:6c:da:35:96:d0:7e:
07:de:6f:ec:0f:ec:c1:2d:8a:c8:fe:86:89:a3:ea:
e5:d2:15:4c:c3:98:cd:85:61:cf:f1:77:c2:63:85:
4a:e8:87:6f:78:82:95:37:16:e1:02:cc:d5:19:b9:
ac:a8:00:8e:1f:5f:ab:fe:27:cb:1d:fd:6c:df:3f:
07:c1:8d:7e:82:c3:b0:be:cd:0b:39:62:62:ec:7c:
fc:5c:fe:84:60:17:00:4b:40:42:b8:c7:27:f8:d9:
08:f2:5d:53:68:fd:83:12:f1:09:1f:b1:7d:8d:fd:
0c:38:df:32:29:4d:b5:73:a4:dc:b1:02:55:df:e7:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:9B:E3:4E:CC:4F:2A:B6:09:1B:1D:AF:C1:E9:96:01:46:54:1D
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:7f:96:49:60:65:31:c1:8b:d9:57:97:06:2c:b3:2a:63:
fc:b0:5d:f7:0d:05:6c:33:ce:75:0a:60:4e:1e:ee:b4:a6:93:
2b:9f:89:20:7f:3a:d9:c8:72:2b:c2:8a:82:a6:b1:77:44:ae:
15:ef:fb:17:78:81:11:5c:55:30:b8:0c:fe:6a:aa:2f:79:94:
75:0c:f0:b4:3d:0a:de:41:51:a3:cd:ca:e6:ee:0f:55:79:80:
89:b9:d5:23:7a:c2:8f:53:21:40:8d:46:30:cb:ea:f4:38:85:
08:90:a7:8f:10:d0:11:21:5e:95:cc:35:07:03:af:96:2b:01:
db:d6:c9:0a:06:03:58:a1:ff:17:6e:ca:08:3e:0d:c8:3e:06:
46:94:0f:f4:fa:06:8e:27:b2:29:6a:50:13:35:fb:ae:ef:91:
15:cd:b7:da:3f:91:32:56:4e:ca:63:85:66:a0:79:ae:1d:20:
29:4a:0b:69:51:19:6f:7c:9b:3f:e5:6f:33:c5:d9:10:72:f5:
5f:6c:3d:73:fd:90:cd:bb:17:cd:32:d3:e3:3e:9b:9a:d3:05:
44:6d:84:89:1b:34:db:72:11:58:b5:a5:46:55:7e:82:8b:8c:
fe:32:7d:5b:2f:6c:ce:52:b4:ad:75:50:55:28:dc:03:23:e2:
07:b5:c0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtUlfDbcUM+rdhSGRZaWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1
ODUyMGMwHhcNMjYwNzIzMTYwMDUwWhcNMjYwNzI0MTYwMDUwWjAzMTEwLwYDVQQD
EyhmNzQyOWJlMzRlY2M0ZjJhYjYwOTFiMWRhZmMxZTk5NjAxNDY1NDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OOcFfhvmGHHgrUX++1LBNgzrPJo
lS3bCZ4tmNydd4CvypbpTym1eZYzOpaUN2Nzp9dNEmq3CETR+Wn1zYy6PKNUJWuS
O5Cw63Cj99uZo4289/rhupHaOKViBPnkWliB5O5NlThVuMo9bE1jlYZuFcN1eK93
JEstRLJXPV/KwwFs2jWW0H4H3m/sD+zBLYrI/oaJo+rl0hVMw5jNhWHP8XfCY4VK
6IdveIKVNxbhAszVGbmsqACOH1+r/ifLHf1s3z8HwY1+gsOwvs0LOWJi7Hz8XP6E
YBcAS0BCuMcn+NkI8l1TaP2DEvEJH7F9jf0MON8yKU21c6TcsQJV3+flswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdCm+NOzE8qtgkbHa/B6ZYBRlQdMB8GA1UdIwQY
MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt
MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4
LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNZ/lklg
ZTHBi9lXlwYssypj/LBd9w0FbDPOdQpgTh7utKaTK5+JIH862chyK8KKgqaxd0Su
Fe/7F3iBEVxVMLgM/mqqL3mUdQzwtD0K3kFRo83K5u4PVXmAibnVI3rCj1MhQI1G
MMvq9DiFCJCnjxDQESFelcw1BwOvlisB29bJCgYDWKH/F27KCD4NyD4GRpQP9PoG
jieyKWpQEzX7ru+RFc232j+RMlZOymOFZqB5rh0gKUoLaVEZb3ybP+VvM8XZEHL1
X2w9c/2QzbsXzTLT4z6bmtMFRG2EiRs023IRWLWlRlV+gouM/jJ9Wy9szlK0rXVQ
VSjcAyPiB7XABQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:35 2026 by rpki-client