Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: IqaHet+/NKc9IkJogpDwSU/un0CQ2MLJbOPTmkKsyfY=
Subject key identifier: 4E:52:37:D1:4C:60:41:BF:0C:01:F7:2C:D8:6D:7D:95:08:C7:C6:9F
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 019F91DB2EE46EC4B4B65B64D861828FA1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 124D
Signing time: Fri 24 Jul 2026 02:01:28 +0000
Manifest this update: Fri 24 Jul 2026 02:01:28 +0000
Manifest next update: Sat 25 Jul 2026 02:01:28 +0000
Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: ZFA14pFQrB5I0PauXLRny1qfi+ajLDbATGDERhqHwno=)
2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2e:e4:6e:c4:b4:b6:5b:64:d8:61:82:8f:a1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Jul 24 02:01:28 2026 GMT
Not After : Jul 25 02:01:28 2026 GMT
Subject: CN=4e5237d14c6041bf0c01f72cd86d7d9508c7c69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:58:52:fa:21:ff:c3:e7:8c:0b:2f:78:14:
32:d6:fe:98:52:ef:98:ba:e7:44:26:80:3a:5d:1d:
79:0d:80:de:b0:7a:f5:1e:39:42:ff:e1:3e:c2:e1:
ca:9d:9d:e2:46:85:c8:44:fa:67:5b:83:21:c6:a0:
f1:b3:7b:bc:4a:fd:f9:9f:c8:67:5d:34:40:ee:cf:
c3:74:dc:45:fe:51:34:cc:7c:75:1b:ac:38:0f:45:
48:03:cd:7e:ca:90:88:5d:01:2a:b4:60:69:48:13:
0c:75:19:de:b7:56:71:a8:e8:8e:87:66:af:c9:93:
0a:68:3a:af:6d:72:d9:cc:28:a8:7a:04:ae:6c:c0:
92:44:93:09:f3:da:07:0e:99:e5:2b:b4:72:07:88:
54:6d:db:44:cb:70:14:52:57:31:ce:66:75:8c:62:
10:1a:7d:9f:1d:c0:85:df:4a:0d:33:cd:2f:ec:c4:
db:9c:95:c3:57:08:fe:48:94:dd:95:30:a5:7b:b2:
be:dd:df:ab:51:eb:cb:07:e0:ec:52:1a:16:03:59:
75:00:a6:f0:df:d5:b9:fd:d3:7d:18:fa:ac:ff:c7:
bc:28:dc:24:b4:b6:f5:9d:37:cc:9b:7e:3f:bb:cf:
13:ba:c8:59:6a:3d:10:08:6a:0f:00:19:db:da:86:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:37:D1:4C:60:41:BF:0C:01:F7:2C:D8:6D:7D:95:08:C7:C6:9F
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5f:80:9b:6e:7e:98:4b:68:c3:8e:33:5b:de:69:f0:f0:cd:
5f:a9:7c:da:2c:c5:9a:b7:95:8c:02:c7:17:8f:eb:2f:de:72:
d6:c9:90:78:d2:04:09:a3:74:af:a6:30:2a:9b:37:aa:ab:81:
90:68:a0:dc:6c:7a:bd:67:0c:8a:5e:66:b5:8a:11:5e:da:4d:
fc:5c:e1:92:ef:e8:15:f4:38:79:1b:73:02:4d:51:48:7c:d2:
b7:b5:62:1b:9f:53:d1:6b:ce:ab:16:4f:55:e5:94:f1:2c:cb:
1b:73:6a:66:e9:0b:35:ee:00:20:53:ac:1e:2a:a5:11:9d:dd:
dc:fe:59:49:d7:2a:6d:d0:09:d1:27:16:b6:b5:a5:53:4d:3e:
5b:b2:be:c3:52:2d:69:ec:e7:84:27:e1:6d:33:38:33:3e:68:
93:60:22:59:b1:28:c7:7e:d6:e5:f4:56:27:4b:a1:19:74:c2:
9f:d5:a8:6b:95:ef:91:c2:0b:d6:a9:67:35:0c:8c:02:c6:76:
e8:90:59:16:6e:0f:67:97:6d:09:aa:c6:f7:79:86:be:31:20:
66:33:4b:e1:03:a7:1e:dd:4f:8b:d4:7e:de:6c:09:f9:1d:f4:
58:b1:c0:9a:a0:6e:15:d4:d9:16:e5:70:9e:7f:15:81:97:71:
28:61:fd:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2y7kbsS0tltk2GGCj6HhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli
YzA1YTcwHhcNMjYwNzI0MDIwMTI4WhcNMjYwNzI1MDIwMTI4WjAzMTEwLwYDVQQD
Eyg0ZTUyMzdkMTRjNjA0MWJmMGMwMWY3MmNkODZkN2Q5NTA4YzdjNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRRYUvoh/8PnjAsveBQy1v6YUu+Y
uudEJoA6XR15DYDesHr1HjlC/+E+wuHKnZ3iRoXIRPpnW4MhxqDxs3u8Sv35n8hn
XTRA7s/DdNxF/lE0zHx1G6w4D0VIA81+ypCIXQEqtGBpSBMMdRnet1ZxqOiOh2av
yZMKaDqvbXLZzCioegSubMCSRJMJ89oHDpnlK7RyB4hUbdtEy3AUUlcxzmZ1jGIQ
Gn2fHcCF30oNM80v7MTbnJXDVwj+SJTdlTCle7K+3d+rUevLB+DsUhoWA1l1AKbw
39W5/dN9GPqs/8e8KNwktLb1nTfMm34/u88TushZaj0QCGoPABnb2obzgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5SN9FMYEG/DAH3LNhtfZUIx8afMB8GA1UdIwQY
MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt
MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2
LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1+Am25+
mEtow44zW95p8PDNX6l82izFmreVjALHF4/rL95y1smQeNIECaN0r6YwKps3qquB
kGig3Gx6vWcMil5mtYoRXtpN/Fzhku/oFfQ4eRtzAk1RSHzSt7ViG59T0WvOqxZP
VeWU8SzLG3NqZukLNe4AIFOsHiqlEZ3d3P5ZSdcqbdAJ0ScWtrWlU00+W7K+w1It
aeznhCfhbTM4Mz5ok2AiWbEox37W5fRWJ0uhGXTCn9Woa5XvkcIL1qlnNQyMAsZ2
6JBZFm4PZ5dtCarG93mGvjEgZjNL4QOnHt1Pi9R+3mwJ+R30WLHAmqBuFdTZFuVw
nn8VgZdxKGH9nw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:18:00 2026 by rpki-client