Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
File: Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft (raw, json)
Hash identifier: Hn121jjzcYDzcxCNwLangR0hbkIedHRtze7YaNgUFK8=
Subject key identifier: 46:C0:ED:ED:2C:6C:DE:2B:6C:A0:2D:45:29:85:C0:D3:4A:83:DB:9A
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F916C90D510D87E066D41156A37709CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:38 +0000
Manifest this update: Fri 24 Jul 2026 00:00:38 +0000
Manifest next update: Sat 25 Jul 2026 00:00:38 +0000
Files and hashes: 1: 6LtQiSb78nDyjbmEiYfBW6K94lQ.roa (hash: J7MI4GNzgAtUYP9XKuJ4vcnnaKJ8K4FoSSPzAm0y+FY=)
2: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (hash: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=)
3: 8yzRL6UTfoY2UAWRhFfcY21aiw8.roa (hash: 9a1PcOeE8ZLKSk+KrqFMb26rK/NZVC1SSfxLpvqFg4A=)
4: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (hash: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=)
5: TAhJXyuaU-go54rMGjVHPRVQsF8.roa (hash: T2ctTiMfso19o9sCdUv1gT123PCz7JSAkNRApoDkkn8=)
6: Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl (hash: 4wG+d2iRA6VAiPDp3aEZt7GMquUc92U/B9t64TjvoBo=)
7: cP1pRSbGF2VydLggt4WcH_Io63k.roa (hash: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=)
8: lciHL8Z1BSH4tJKSK6v4VIpHQQQ.roa (hash: n7tikthFcj7M5HJ14fYaGIRaUsjAfU/R0n+U8AFO1ms=)
9: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (hash: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:90:d5:10:d8:7e:06:6d:41:15:6a:37:70:9c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 24 00:00:38 2026 GMT
Not After : Jul 25 00:00:38 2026 GMT
Subject: CN=46c0eded2c6cde2b6ca02d452985c0d34a83db9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:b4:05:74:f4:0b:36:08:b8:92:e4:23:78:
e4:4c:5a:a8:2f:76:52:ef:d8:62:fe:3a:31:ac:53:
e9:74:dc:dd:44:91:44:12:78:a7:7f:03:0c:7e:0d:
f9:42:8e:58:03:7c:ee:09:3c:7c:bc:3a:03:b0:2f:
3d:68:ca:86:72:4f:ca:28:4e:17:10:94:e9:d8:78:
aa:b8:d6:20:eb:a8:71:35:0b:b6:09:8e:6c:42:e7:
b3:17:33:c4:93:bf:8e:e1:b6:12:1d:5f:37:d4:70:
82:a0:5a:f2:7e:32:b1:b0:9e:de:8f:ff:9a:78:4c:
82:a0:46:89:e1:6d:4a:33:93:09:ee:7b:15:81:2c:
a9:e8:2b:47:ef:44:85:23:fc:97:26:70:cc:22:15:
79:52:1e:0d:42:49:05:93:fc:26:8e:6c:f1:d7:0e:
6d:97:d1:42:65:58:c2:5e:24:22:c8:55:d2:51:91:
ce:fd:9d:44:7d:f7:b6:67:9c:55:18:c2:53:b1:4e:
29:78:bc:b7:ae:5a:dd:e8:66:47:2a:ba:c3:1d:f3:
74:03:f7:6e:08:dc:98:4a:77:31:13:19:3d:8a:d5:
3c:de:9d:21:92:d3:7b:22:ca:cc:2f:61:50:09:9f:
6c:f4:97:81:30:3f:3a:7f:2d:03:22:12:7f:58:ac:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:ED:ED:2C:6C:DE:2B:6C:A0:2D:45:29:85:C0:D3:4A:83:DB:9A
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4c:49:81:a7:94:a0:e5:ec:6d:50:24:84:ac:22:45:60:ff:
fc:ba:37:54:70:d7:e8:88:78:15:cf:26:a5:c5:d7:a2:ee:29:
c7:22:14:1d:da:2a:23:a0:96:1e:3f:fb:e0:ec:02:10:57:f6:
0d:16:c0:cf:d0:bc:cd:d1:99:f3:62:db:bb:f7:dd:cf:67:7d:
f9:a6:47:89:42:8c:7e:be:eb:a7:f5:1c:e6:d2:1b:de:4b:61:
be:90:c8:b8:33:01:82:f9:ab:28:26:e5:71:88:f9:bf:99:d4:
56:fd:a8:90:fe:0b:b5:47:49:c4:d4:8b:9e:38:a4:26:de:24:
dc:bf:bc:82:8d:d6:0f:e2:2e:0c:19:45:78:6b:b2:d7:8b:4c:
9d:64:2a:48:18:65:0e:9f:26:94:54:ac:42:d1:7d:95:46:ae:
72:65:5e:43:8e:89:2a:e3:35:6a:27:32:16:d3:ba:ad:43:ef:
03:a4:c5:f0:a5:c8:04:10:bf:5f:aa:6f:6c:cd:4d:54:06:22:
68:69:dd:30:26:79:dd:00:6d:4d:f0:de:17:0f:b1:ca:f6:60:
f1:f9:64:ab:70:96:d0:89:bf:2b:53:cd:da:a2:8a:41:a6:ce:
ff:59:a5:13:1d:2d:5f:33:57:ed:5a:3a:9d:1a:b8:4d:a6:c7:
9f:c2:cb:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbJDVENh+Bm1BFWo3cJz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2ZhZDdjMjRlNWM2YjRhZjU4MWMzZGVjMGI5ZTJmYjBj
MTMxYzQwHhcNMjYwNzI0MDAwMDM4WhcNMjYwNzI1MDAwMDM4WjAzMTEwLwYDVQQD
Eyg0NmMwZWRlZDJjNmNkZTJiNmNhMDJkNDUyOTg1YzBkMzRhODNkYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzca0BXT0CzYIuJLkI3jkTFqoL3ZS
79hi/joxrFPpdNzdRJFEEninfwMMfg35Qo5YA3zuCTx8vDoDsC89aMqGck/KKE4X
EJTp2HiquNYg66hxNQu2CY5sQuezFzPEk7+O4bYSHV831HCCoFryfjKxsJ7ej/+a
eEyCoEaJ4W1KM5MJ7nsVgSyp6CtH70SFI/yXJnDMIhV5Uh4NQkkFk/wmjmzx1w5t
l9FCZVjCXiQiyFXSUZHO/Z1Effe2Z5xVGMJTsU4peLy3rlrd6GZHKrrDHfN0A/du
CNyYSncxExk9itU83p0hktN7IsrML2FQCZ9s9JeBMD86fy0DIhJ/WKwPEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbA7e0sbN4rbKAtRSmFwNNKg9uaMB8GA1UdIwQY
MBaAFGfPrXwk5ca0r1gcPewLni+wwTHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjgtdGZDVGx4clN2V0J3OTdBdWVMN0RCTWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvWjgtdGZDVGx4clN2V0J3OTdBdWVMN0RCTWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvWjgtdGZDVGx4clN2V0J3OTdBdWVMN0RCTWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUExJgaeU
oOXsbVAkhKwiRWD//Lo3VHDX6Ih4Fc8mpcXXou4pxyIUHdoqI6CWHj/74OwCEFf2
DRbAz9C8zdGZ82Lbu/fdz2d9+aZHiUKMfr7rp/Uc5tIb3kthvpDIuDMBgvmrKCbl
cYj5v5nUVv2okP4LtUdJxNSLnjikJt4k3L+8go3WD+IuDBlFeGuy14tMnWQqSBhl
Dp8mlFSsQtF9lUaucmVeQ46JKuM1aicyFtO6rUPvA6TF8KXIBBC/X6pvbM1NVAYi
aGndMCZ53QBtTfDeFw+xyvZg8flkq3CW0Im/K1PN2qKKQabO/1mlEx0tXzNX7Vo6
nRq4TabHn8LLNQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:45:58 2026 by rpki-client