Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: 4HTS39UEkn0FR2TvGrASpzQlEDTQpUaHTZIef96clRY=
Subject key identifier: F4:3B:54:00:92:7A:36:9A:04:22:62:E9:D0:16:AF:95:1C:B7:AC:0D
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019F92487FAAFE6F927D2CF8763425D1B241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 04:00:52 +0000
Manifest this update: Fri 24 Jul 2026 04:00:52 +0000
Manifest next update: Sat 25 Jul 2026 04:00:52 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: mvYKcJFwHFpslnns8uv0SC+WGbuh8pmV6Yakee3CUb4=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:7f:aa:fe:6f:92:7d:2c:f8:76:34:25:d1:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jul 24 04:00:52 2026 GMT
Not After : Jul 25 04:00:52 2026 GMT
Subject: CN=f43b5400927a369a042262e9d016af951cb7ac0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:ed:df:2b:57:10:7e:e5:2e:8b:c8:03:9c:
bb:ea:76:48:b4:a9:31:52:76:2d:45:38:03:4b:7b:
7c:26:6e:92:3c:33:10:bd:48:a3:d4:02:55:aa:26:
84:dc:37:d9:b7:61:f0:dd:97:05:0c:9f:2c:06:e4:
aa:1c:44:de:49:cc:6c:17:30:a0:cb:e0:05:8a:88:
85:2e:05:2a:82:14:3a:80:c3:d2:89:a9:57:48:0b:
b6:29:d2:52:ef:dc:0d:a0:3c:52:64:82:3c:9a:1d:
0b:38:4d:5e:37:3b:28:16:8a:38:27:f4:3a:62:a4:
0f:5c:df:57:60:a4:74:da:e8:2b:53:1d:8e:35:e8:
4a:e0:d4:71:21:3d:19:d0:6c:f0:44:66:bf:17:77:
38:93:3b:05:f0:ac:48:24:bc:ea:7f:3f:f4:6c:9a:
07:6f:81:f1:65:96:d4:8e:ce:0a:2a:23:2a:d6:bb:
d6:d4:ed:a1:8d:3d:4a:30:d9:cd:12:36:14:5c:99:
7e:2b:58:2f:d4:21:b8:de:44:62:30:14:cb:37:b9:
7e:3c:71:a3:84:5b:03:56:2e:38:af:c9:3a:e2:2c:
67:df:e4:df:25:7b:ce:3c:ff:78:b3:ec:8d:6a:6c:
73:c8:12:60:e6:bf:c8:09:30:97:48:0f:54:7b:4d:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3B:54:00:92:7A:36:9A:04:22:62:E9:D0:16:AF:95:1C:B7:AC:0D
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:22:84:b8:66:e0:7c:1c:2a:78:a8:17:64:aa:fa:65:a4:6d:
13:49:41:40:4c:c2:be:18:85:ea:ec:26:3b:60:b2:12:a7:2d:
ff:05:78:28:40:2f:ba:79:8c:1a:52:42:31:65:c4:e1:9e:9f:
26:97:e9:6c:a6:17:4d:8d:b7:ce:2e:8a:8a:86:16:2a:33:f0:
3f:fc:39:c9:23:52:00:d3:5e:54:20:a0:9e:ee:70:08:51:9f:
00:0e:33:bf:81:dd:02:31:d5:a7:2c:8f:41:39:56:96:0e:fd:
84:81:44:cd:d0:13:20:b7:d7:d0:4c:ad:e8:ab:8c:40:b4:9b:
c6:c2:1e:8f:07:62:f0:a4:ff:a4:ef:94:87:8c:ed:ec:77:92:
68:7a:a9:74:8f:62:9b:c8:0f:97:04:18:02:0a:6e:b6:b1:55:
38:59:78:98:6e:b2:92:f3:1b:fb:11:dc:d5:a8:11:f0:7d:33:
ce:18:2a:68:9d:07:34:d8:0c:50:02:2e:90:98:c6:6e:82:6b:
9d:dd:1b:6b:a4:2f:ff:6d:f1:39:4c:ca:df:df:e6:37:25:cd:
14:7a:0e:fd:78:e2:2e:20:6e:89:da:8c:60:4d:db:41:5d:36:
77:85:36:3b:37:06:e9:68:10:68:60:63:bb:b8:da:4e:29:7c:
96:7f:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:46 2026 by rpki-client