Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: f78NR5qrffn2Dt+GZ5EZGFLDzYO0kgheJb/znuKrwLs=
Subject key identifier: A3:E5:B7:B4:5E:5F:6B:66:3D:C1:1B:57:7C:64:3F:EE:FF:58:01:FD
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019F93922F5A8F36428CEC1D8E6CA47D334E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 1260
Signing time: Fri 24 Jul 2026 10:00:58 +0000
Manifest this update: Fri 24 Jul 2026 10:00:58 +0000
Manifest next update: Sat 25 Jul 2026 10:00:58 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: JgFpCDIGdIWDtm+VC7RbmbC6NomsiykcfARUmmd1Fto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:2f:5a:8f:36:42:8c:ec:1d:8e:6c:a4:7d:33:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Jul 24 10:00:58 2026 GMT
Not After : Jul 25 10:00:58 2026 GMT
Subject: CN=a3e5b7b45e5f6b663dc11b577c643feeff5801fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:37:60:91:0a:df:f9:b4:d4:be:65:b7:06:
78:4e:4e:b8:c4:fe:5a:a1:4c:59:f5:2e:5f:50:8b:
c3:b8:8b:89:f6:4e:fc:6f:f9:05:e8:48:a4:91:a1:
3a:d2:a8:9a:db:15:04:f2:b6:aa:e2:29:93:9b:ab:
14:75:7b:26:ee:b7:f6:a8:ee:bc:59:8a:b5:12:4e:
1d:f9:c5:77:ae:de:b0:12:bc:72:09:04:e9:fb:b7:
e8:93:b8:22:03:fd:dc:10:fc:41:e2:80:36:41:87:
45:9d:d3:e9:f1:a9:03:5c:59:8c:97:c5:95:26:9f:
a7:2a:8e:ab:a6:b3:4c:17:8f:74:aa:b3:28:3a:6f:
58:1f:b6:71:80:06:73:97:65:34:27:65:fe:04:d8:
16:8d:cc:b9:35:2c:d0:42:a5:68:ea:68:1f:12:c6:
67:b0:20:13:c1:89:23:a1:df:c1:ab:0e:5f:91:6d:
e6:53:65:53:7c:9d:d4:cd:b3:cb:8f:92:da:1e:50:
2a:c2:5b:f6:5e:a9:d2:96:9f:d4:fc:71:0f:fb:f9:
7a:f2:fc:97:90:cd:5a:9a:1a:35:d6:46:ce:69:8f:
34:8b:f3:22:ea:1f:97:89:27:7a:5f:9b:1f:e0:bf:
1c:56:ea:a3:96:f7:5b:bb:43:8b:cc:d5:e2:46:d5:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:B7:B4:5E:5F:6B:66:3D:C1:1B:57:7C:64:3F:EE:FF:58:01:FD
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c4:e6:a6:68:69:26:37:19:bf:79:c1:a5:16:cb:0c:e8:54:
ec:a2:03:79:2e:f5:29:3f:94:ac:8d:70:0c:cd:22:a2:56:b5:
19:53:26:98:86:f7:ae:b8:e5:dc:bd:5a:a2:df:fb:ae:a8:91:
56:89:7f:52:4d:ff:87:5c:05:ef:60:0b:0c:7f:12:cb:21:c3:
d7:9e:24:fd:ab:3b:ee:1d:80:d2:c6:50:29:99:e3:9b:bd:7a:
e1:91:4e:f7:ec:94:99:b7:ff:54:c3:25:92:06:eb:8a:00:b6:
45:98:ba:a2:41:67:61:56:77:f5:2c:23:d0:51:72:98:30:ac:
7f:3a:24:a0:57:2a:2c:ee:50:98:e7:a1:0c:df:ed:59:7e:a1:
06:9a:65:e9:4c:23:5e:10:fa:71:7b:a0:a3:f2:86:d4:ba:2c:
70:cc:66:85:93:9a:d9:ee:46:54:0e:06:79:c9:ef:8a:df:aa:
69:c5:47:ba:ac:8e:c8:d5:90:88:37:e5:c9:31:61:d3:8b:02:
4d:40:a3:a6:f3:73:48:ae:ee:dd:11:da:da:6b:71:04:3a:cb:
b1:a0:a7:1c:78:25:a2:11:63:cf:44:9b:1e:70:af:09:f5:5c:
ea:1a:84:40:76:5f:58:be:c9:bd:f1:8c:12:20:8e:e9:58:e4:
e8:03:c1:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tki9ajzZCjOwdjmykfTNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw
Yzg4N2QwHhcNMjYwNzI0MTAwMDU4WhcNMjYwNzI1MTAwMDU4WjAzMTEwLwYDVQQD
EyhhM2U1YjdiNDVlNWY2YjY2M2RjMTFiNTc3YzY0M2ZlZWZmNTgwMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+k3YJEK3/m01L5ltwZ4Tk64xP5a
oUxZ9S5fUIvDuIuJ9k78b/kF6EikkaE60qia2xUE8raq4imTm6sUdXsm7rf2qO68
WYq1Ek4d+cV3rt6wErxyCQTp+7fok7giA/3cEPxB4oA2QYdFndPp8akDXFmMl8WV
Jp+nKo6rprNMF490qrMoOm9YH7ZxgAZzl2U0J2X+BNgWjcy5NSzQQqVo6mgfEsZn
sCATwYkjod/Bqw5fkW3mU2VTfJ3UzbPLj5LaHlAqwlv2XqnSlp/U/HEP+/l68vyX
kM1amho11kbOaY80i/Mi6h+XiSd6X5sf4L8cVuqjlvdbu0OLzNXiRtVXUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPlt7ReX2tmPcEbV3xkP+7/WAH9MB8GA1UdIwQY
MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt
NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw
LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcTmpmhp
JjcZv3nBpRbLDOhU7KIDeS71KT+UrI1wDM0iola1GVMmmIb3rrjl3L1aot/7rqiR
Vol/Uk3/h1wF72ALDH8SyyHD154k/as77h2A0sZQKZnjm7164ZFO9+yUmbf/VMMl
kgbrigC2RZi6okFnYVZ39Swj0FFymDCsfzokoFcqLO5QmOehDN/tWX6hBppl6Uwj
XhD6cXugo/KG1LoscMxmhZOa2e5GVA4Gecnvit+qacVHuqyOyNWQiDflyTFh04sC
TUCjpvNzSK7u3RHa2mtxBDrLsaCnHHglohFjz0SbHnCvCfVc6hqEQHZfWL7JvfGM
EiCO6Vjk6APB9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:25 2026 by rpki-client