Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: PJ4E+7rzue9VSCurCbXSe+4Uln/FO+o+8e1BOk1KlBI=
Subject key identifier: 09:E0:E9:18:4F:36:80:89:B0:2F:8A:2F:3E:D0:DD:15:23:79:2B:C1
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019F921199EABE0C29542D0C038FE7BBE68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 096D
Signing time: Fri 24 Jul 2026 03:00:54 +0000
Manifest this update: Fri 24 Jul 2026 03:00:54 +0000
Manifest next update: Sat 25 Jul 2026 03:00:54 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: 9qUgwY8jt92K7eq84Nxjwu2KUrieZ7vUO/V68LejroI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:99:ea:be:0c:29:54:2d:0c:03:8f:e7:bb:e6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Jul 24 03:00:54 2026 GMT
Not After : Jul 25 03:00:54 2026 GMT
Subject: CN=09e0e9184f368089b02f8a2f3ed0dd1523792bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:36:9b:01:27:74:67:af:c6:93:33:98:dd:
86:c4:ec:21:8d:9f:95:e0:94:e0:e7:c3:33:71:ec:
08:bf:16:f9:06:fb:30:6b:11:bc:63:32:da:b7:b9:
ad:9e:cb:3b:56:3f:6e:44:cd:2f:f6:b7:5d:ca:97:
bb:e1:79:80:4a:3a:53:26:ba:09:15:c5:2f:28:03:
ca:0c:88:3a:20:11:66:a8:a4:42:7d:1e:0a:9b:4c:
05:5c:a7:21:fe:e9:16:3a:0e:dd:29:e2:02:ab:db:
32:bd:88:c6:4a:13:5f:b1:33:0f:45:b0:53:d2:f0:
7a:53:f8:a3:24:61:79:e8:09:52:fb:eb:ba:92:f8:
b5:d4:65:05:ce:7a:0d:20:ac:04:79:e9:81:14:f1:
bf:01:c7:17:db:4a:5b:79:31:b4:71:2c:7c:6e:91:
4b:f7:88:6f:e3:27:35:f7:d9:4f:08:7a:bd:c2:6b:
1b:bc:80:f4:83:7f:3c:40:18:bb:d8:22:fd:b6:25:
2e:5d:ab:2d:8c:05:b6:98:5c:5c:fe:21:2d:d0:65:
ca:16:47:3d:21:e3:57:e7:50:5b:45:04:71:6a:6d:
b6:65:93:58:10:99:39:c0:41:6c:12:a5:f4:ea:ad:
03:ac:50:53:78:e5:e9:f8:7a:22:3a:ee:ad:22:ba:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:E9:18:4F:36:80:89:B0:2F:8A:2F:3E:D0:DD:15:23:79:2B:C1
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1d:3d:15:c2:75:68:74:62:77:8c:8d:29:49:11:58:c7:33:
e4:60:43:f6:b5:2e:3f:35:32:c2:db:97:6f:13:9e:c3:30:20:
3d:1f:28:48:72:55:48:ba:3d:30:16:7c:df:06:4a:db:53:ab:
01:75:05:39:46:ad:e9:d6:cc:c0:84:1a:74:88:38:dd:48:08:
78:ed:cc:fa:50:e3:1f:40:c3:4e:2e:83:e2:d7:0f:e9:00:f2:
0e:50:c2:27:c5:d1:06:47:3b:57:24:a1:55:b7:68:88:1d:2c:
37:98:31:e2:05:60:d8:54:dc:e5:00:04:7f:9a:ee:95:e7:49:
cc:40:7e:cc:74:4f:0f:66:4c:76:8f:52:45:b0:aa:f3:81:05:
3e:2a:6a:34:c2:ef:c5:f3:1b:1b:e0:de:4d:95:57:23:9c:bf:
a2:e8:f8:dc:5a:96:24:98:d9:cb:ce:7e:bd:11:4b:9f:c4:c7:
e9:f9:93:39:05:4d:6d:d5:88:b2:1d:db:ed:b8:01:b4:15:93:
44:e1:1e:ac:eb:21:9e:e5:1c:70:23:3a:45:37:77:bf:fb:6b:
3e:27:62:38:8a:67:87:b6:8a:8a:38:f5:3c:aa:1b:bb:12:2f:
e3:20:dc:96:f0:d0:21:17:16:cc:9a:62:7b:65:d5:57:16:14:
f4:d0:72:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZnqvgwpVC0MA4/nu+aKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2RiZDVmYzZmOTFiODA3YjdiYzRjZjZlNjQ2ZTM0NTg2
MmFmM2UwHhcNMjYwNzI0MDMwMDU0WhcNMjYwNzI1MDMwMDU0WjAzMTEwLwYDVQQD
EygwOWUwZTkxODRmMzY4MDg5YjAyZjhhMmYzZWQwZGQxNTIzNzkyYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGU2mwEndGevxpMzmN2GxOwhjZ+V
4JTg58MzcewIvxb5BvswaxG8YzLat7mtnss7Vj9uRM0v9rddype74XmASjpTJroJ
FcUvKAPKDIg6IBFmqKRCfR4Km0wFXKch/ukWOg7dKeICq9syvYjGShNfsTMPRbBT
0vB6U/ijJGF56AlS++u6kvi11GUFznoNIKwEeemBFPG/AccX20pbeTG0cSx8bpFL
94hv4yc199lPCHq9wmsbvID0g388QBi72CL9tiUuXastjAW2mFxc/iEt0GXKFkc9
IeNX51BbRQRxam22ZZNYEJk5wEFsEqX06q0DrFBTeOXp+HoiOu6tIrotKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAng6RhPNoCJsC+KLz7Q3RUjeSvBMB8GA1UdIwQY
MBaAFM09vV/G+RuAe3vEz25kbjRYYq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUt
OGNhYWQzZTMxYWRjLzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUtOGNhYWQzZTMxYWRj
LzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArh09FcJ1
aHRid4yNKUkRWMcz5GBD9rUuPzUywtuXbxOewzAgPR8oSHJVSLo9MBZ83wZK21Or
AXUFOUat6dbMwIQadIg43UgIeO3M+lDjH0DDTi6D4tcP6QDyDlDCJ8XRBkc7VySh
VbdoiB0sN5gx4gVg2FTc5QAEf5ruledJzEB+zHRPD2ZMdo9SRbCq84EFPipqNMLv
xfMbG+DeTZVXI5y/ouj43FqWJJjZy85+vRFLn8TH6fmTOQVNbdWIsh3b7bgBtBWT
ROEerOshnuUccCM6RTd3v/trPidiOIpnh7aKijj1PKobuxIv4yDclvDQIRcWzJpi
e2XVVxYU9NByfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:50 2026 by rpki-client