Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: tK10MUcFEAJgazb8qumYFettmDDL/fKnxyxrUh9LfQk=
Subject key identifier: D9:D0:42:9E:18:98:B1:90:D2:F8:32:C5:8F:C4:D8:EB:6A:33:F8:3D
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019F93C959995ACC8AB5C08E7E8ADC36F30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:01:14 +0000
Manifest this update: Fri 24 Jul 2026 11:01:14 +0000
Manifest next update: Sat 25 Jul 2026 11:01:14 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: o8fskVXdp6RxJ4JwmJaJLVke1xdxUaD+TZTujXF3MtE=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:59:99:5a:cc:8a:b5:c0:8e:7e:8a:dc:36:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jul 24 11:01:14 2026 GMT
Not After : Jul 25 11:01:14 2026 GMT
Subject: CN=d9d0429e1898b190d2f832c58fc4d8eb6a33f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:d4:13:5d:d8:78:87:44:6c:9a:26:2f:72:
d0:43:55:20:4f:2b:15:4e:d1:fb:0e:3a:ea:7f:e1:
02:2b:61:13:68:d4:7d:73:fb:d0:96:af:95:98:68:
a6:d7:ef:37:61:f0:b3:55:cd:19:49:35:68:7b:48:
8f:f2:cb:b1:cb:30:a8:2c:ed:b5:13:56:5a:71:8c:
a9:c8:87:b7:77:4a:4a:18:2a:c2:93:5f:cf:13:21:
9c:bb:d0:7e:18:88:b3:e5:7d:3f:a4:8e:e2:c1:a1:
bf:32:b4:0c:11:e8:4b:95:a1:af:02:e1:23:7c:75:
c9:2e:cc:42:3d:c5:02:19:b0:ef:63:79:d1:77:2e:
f1:ce:ac:c9:58:cb:cb:ec:7a:80:1d:f5:1b:ed:22:
3d:02:d5:e6:63:12:85:5a:51:6c:8a:e5:c8:53:0b:
55:a6:0d:b0:2a:6e:37:b1:86:68:e1:61:da:95:76:
2d:6f:26:e1:81:a2:61:1f:27:33:30:7d:8f:c6:9a:
15:34:37:60:2b:01:98:fb:50:18:f9:f4:20:02:28:
40:a6:5a:65:f1:b3:ab:1f:e5:ec:7a:3d:a2:44:00:
f3:3f:b3:2a:2c:ae:6f:d6:36:c2:09:4a:4f:83:ed:
d5:af:b2:6a:a0:df:c3:40:b5:30:c3:e5:c6:df:da:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:42:9E:18:98:B1:90:D2:F8:32:C5:8F:C4:D8:EB:6A:33:F8:3D
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bb:b4:ad:81:be:c8:98:a4:ce:f8:06:b6:e6:ea:92:98:81:
c3:e6:6c:92:66:a3:86:bc:7c:67:c2:3b:ea:cf:b0:5a:74:dc:
4b:7f:76:f0:82:f8:2b:81:49:6f:96:22:a2:bf:17:ea:f8:33:
75:b0:c9:05:82:3a:cd:80:bd:fa:28:ac:f7:0f:46:d3:1c:ed:
3f:d3:92:a1:20:d7:5a:77:88:e2:e7:b0:9a:30:fc:0d:1d:ab:
c7:35:37:7f:76:d5:b0:0f:54:ed:66:8f:45:7f:9e:fd:39:c8:
29:1b:f7:a6:15:1d:da:df:e8:b0:5d:88:5b:6a:ed:51:9c:68:
13:7e:75:cb:0f:42:05:5b:7e:aa:3d:56:32:68:c4:3d:8f:e4:
04:50:00:33:ef:82:98:9f:1f:0c:4c:53:6b:ef:e6:81:49:cb:
16:c5:24:f8:99:da:27:74:bc:a4:f8:ec:92:66:69:83:8e:90:
d0:b3:1b:89:5a:1a:e4:d3:a1:e4:09:4d:22:81:70:d4:2e:e1:
8d:24:62:d0:42:c2:96:b1:5a:b5:80:2c:ab:90:af:52:ca:96:
1d:04:02:e7:b6:b6:79:c9:13:d9:3a:6b:e5:98:a1:e8:c0:5c:
5c:2b:fc:9c:ed:03:3d:41:7d:b0:0b:a5:38:fe:ff:2c:d7:dc:
06:03:a6:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyVmZWsyKtcCOforcNvMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjYwNzI0MTEwMTE0WhcNMjYwNzI1MTEwMTE0WjAzMTEwLwYDVQQD
EyhkOWQwNDI5ZTE4OThiMTkwZDJmODMyYzU4ZmM0ZDhlYjZhMzNmODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cXUE13YeIdEbJomL3LQQ1UgTysV
TtH7Djrqf+ECK2ETaNR9c/vQlq+VmGim1+83YfCzVc0ZSTVoe0iP8suxyzCoLO21
E1ZacYypyIe3d0pKGCrCk1/PEyGcu9B+GIiz5X0/pI7iwaG/MrQMEehLlaGvAuEj
fHXJLsxCPcUCGbDvY3nRdy7xzqzJWMvL7HqAHfUb7SI9AtXmYxKFWlFsiuXIUwtV
pg2wKm43sYZo4WHalXYtbybhgaJhHyczMH2PxpoVNDdgKwGY+1AY+fQgAihAplpl
8bOrH+Xsej2iRADzP7MqLK5v1jbCCUpPg+3Vr7JqoN/DQLUww+XG39rqGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnQQp4YmLGQ0vgyxY/E2OtqM/g9MB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbu0rYG+
yJikzvgGtubqkpiBw+Zskmajhrx8Z8I76s+wWnTcS3928IL4K4FJb5Yior8X6vgz
dbDJBYI6zYC9+iis9w9G0xztP9OSoSDXWneI4uewmjD8DR2rxzU3f3bVsA9U7WaP
RX+e/TnIKRv3phUd2t/osF2IW2rtUZxoE351yw9CBVt+qj1WMmjEPY/kBFAAM++C
mJ8fDExTa+/mgUnLFsUk+JnaJ3S8pPjskmZpg46Q0LMbiVoa5NOh5AlNIoFw1C7h
jSRi0ELClrFatYAsq5CvUsqWHQQC57a2eckT2Tpr5Zih6MBcXCv8nO0DPUF9sAul
OP7/LNfcBgOm1g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:43 2026 by rpki-client