Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: MHNQhDEMtWmKfUj8N3N82r6Lqv+PPulYZPVpqqjYByo=
Subject key identifier: 17:52:C6:2F:22:D8:AA:1D:39:7C:14:5E:4F:1A:E5:62:38:73:82:54
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019F8F7DE5EB948A7B84224E50D87CC041AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 19D5
Signing time: Thu 23 Jul 2026 15:00:20 +0000
Manifest this update: Thu 23 Jul 2026 15:00:20 +0000
Manifest next update: Fri 24 Jul 2026 15:00:20 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: b3rIh5WvIHftlWGTS1Vci+JN8uVjdz1hui17HUU299E=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e5:eb:94:8a:7b:84:22:4e:50:d8:7c:c0:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jul 23 15:00:20 2026 GMT
Not After : Jul 24 15:00:20 2026 GMT
Subject: CN=1752c62f22d8aa1d397c145e4f1ae56238738254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:ab:f8:32:a9:45:59:84:72:9d:41:4d:9d:
08:f8:0a:e6:19:3c:5b:58:93:86:e6:81:c1:c2:c5:
a1:1e:19:c2:44:e9:05:6e:c7:1c:4e:2e:26:1f:31:
6b:1f:39:1c:c9:d5:18:02:ba:b4:73:ff:4d:8e:bc:
38:fb:bd:a0:ce:4e:f9:c0:44:12:20:c1:bf:a3:27:
50:6f:49:2e:9a:2c:d6:e8:3e:1c:d8:0a:bb:d7:42:
97:66:6e:d9:11:46:8f:65:64:b8:6a:e4:c0:47:5e:
d0:00:e2:f3:7d:2e:c3:ce:c4:82:d8:ce:e2:85:4f:
19:5f:f6:5e:3f:aa:1b:0d:8b:e7:d1:3b:84:dd:6f:
d4:16:ff:07:e4:89:c6:f1:f4:87:ba:a2:2f:50:bd:
c9:e5:ca:d4:47:99:48:22:d8:bd:76:c6:15:af:4d:
c4:56:6c:8f:07:63:c0:94:45:80:bb:e5:db:97:f6:
fb:e7:6f:3e:c9:15:2b:16:96:f5:fe:bd:8d:17:f7:
30:16:6b:09:fd:3e:42:df:2c:7b:7a:43:78:21:1d:
47:93:a2:04:df:b5:bf:fa:92:3c:d1:fd:37:66:08:
ac:e1:18:0f:7b:de:98:09:d1:5e:d4:a7:40:49:28:
c8:4d:16:ac:60:0e:d5:fa:6e:61:c2:1a:d2:80:ef:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:C6:2F:22:D8:AA:1D:39:7C:14:5E:4F:1A:E5:62:38:73:82:54
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fd:1b:74:57:c0:8c:0e:7b:db:14:43:97:e9:59:cb:cd:67:
2d:0f:25:97:18:74:a6:80:b2:33:b8:0d:0e:37:58:fc:b0:be:
de:f3:f4:5f:c1:89:0f:99:78:5f:7a:9f:a3:6c:49:89:0c:16:
49:41:37:68:27:82:1b:19:ef:f1:06:ff:01:15:4b:7f:1a:6f:
f0:47:7a:bf:95:cb:4f:79:97:4b:26:b4:d2:76:87:37:63:00:
be:3a:e0:58:86:2e:5f:8a:75:bf:1b:b8:5a:61:1e:33:f7:09:
99:85:cc:0c:e6:5f:0c:33:3d:c7:ff:9f:02:27:1f:91:6f:d9:
ba:37:1e:76:74:f1:a3:2f:79:aa:e8:d0:79:46:f2:0b:46:98:
f0:27:78:a4:65:17:91:f0:d5:25:53:d6:fb:f9:15:df:72:52:
71:52:ad:f5:56:fc:c3:35:5d:e9:58:f8:5b:2a:5d:9e:a2:51:
0c:a1:8f:2d:85:bb:4d:8b:6e:6b:6a:5a:a2:e0:c5:a3:86:92:
ef:fb:81:8f:07:d3:4c:82:de:d3:04:d2:62:39:02:3d:b1:35:
ee:3c:bd:a0:5c:82:15:4b:b0:1c:47:ed:c9:75:99:a6:ef:da:
74:94:51:41:f5:30:74:a9:28:56:42:64:e9:5a:49:de:dc:69:
31:2c:da:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfeXrlIp7hCJOUNh8wEGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh
OWI4OGIwHhcNMjYwNzIzMTUwMDIwWhcNMjYwNzI0MTUwMDIwWjAzMTEwLwYDVQQD
EygxNzUyYzYyZjIyZDhhYTFkMzk3YzE0NWU0ZjFhZTU2MjM4NzM4MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA+r+DKpRVmEcp1BTZ0I+ArmGTxb
WJOG5oHBwsWhHhnCROkFbsccTi4mHzFrHzkcydUYArq0c/9Njrw4+72gzk75wEQS
IMG/oydQb0kumizW6D4c2Aq710KXZm7ZEUaPZWS4auTAR17QAOLzfS7DzsSC2M7i
hU8ZX/ZeP6obDYvn0TuE3W/UFv8H5InG8fSHuqIvUL3J5crUR5lIIti9dsYVr03E
VmyPB2PAlEWAu+Xbl/b7528+yRUrFpb1/r2NF/cwFmsJ/T5C3yx7ekN4IR1Hk6IE
37W/+pI80f03Zgis4RgPe96YCdFe1KdASSjITRasYA7V+m5hwhrSgO/j4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdSxi8i2KodOXwUXk8a5WI4c4JUMB8GA1UdIwQY
MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt
MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3
LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/0bdFfA
jA572xRDl+lZy81nLQ8llxh0poCyM7gNDjdY/LC+3vP0X8GJD5l4X3qfo2xJiQwW
SUE3aCeCGxnv8Qb/ARVLfxpv8Ed6v5XLT3mXSya00naHN2MAvjrgWIYuX4p1vxu4
WmEeM/cJmYXMDOZfDDM9x/+fAicfkW/ZujcednTxoy95qujQeUbyC0aY8Cd4pGUX
kfDVJVPW+/kV33JScVKt9Vb8wzVd6Vj4WypdnqJRDKGPLYW7TYtua2paouDFo4aS
7/uBjwfTTILe0wTSYjkCPbE17jy9oFyCFUuwHEftyXWZpu/adJRRQfUwdKkoVkJk
6VpJ3txpMSzaag==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:34 2026 by rpki-client