Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: ljV8/4KCbwtJNCHySb9wuZF865JH4s0Ne+ZA5cr4TkE=
Subject key identifier: 11:07:8B:B7:24:A6:5C:FD:A6:4A:91:7B:C4:25:02:16:29:A1:0D:36
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 019F93FFC299F6C6A03D59CDBAC42DF20C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 15C1
Signing time: Fri 24 Jul 2026 12:00:39 +0000
Manifest this update: Fri 24 Jul 2026 12:00:39 +0000
Manifest next update: Sat 25 Jul 2026 12:00:39 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: z8uL3udquaZB+zdnC2igg9ucnxP/anDE9gPe2F3c0pE=)
2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:c2:99:f6:c6:a0:3d:59:cd:ba:c4:2d:f2:0c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jul 24 12:00:39 2026 GMT
Not After : Jul 25 12:00:39 2026 GMT
Subject: CN=11078bb724a65cfda64a917bc425021629a10d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:e9:49:21:52:3d:cc:83:00:69:c2:8f:2a:
d2:b4:87:a6:a9:9b:09:95:f6:52:43:66:18:d5:89:
91:21:d4:70:a1:74:a0:27:dc:2c:f6:26:d9:4b:d0:
8e:c0:52:cd:b2:f5:06:8b:07:62:0f:f0:14:22:6b:
5b:ea:17:00:e7:e5:d2:46:16:22:4d:47:f4:63:78:
7b:85:2b:a7:31:7e:4c:ee:41:e6:e1:e5:ac:75:8d:
28:2d:b6:2f:e4:54:ac:e3:92:cd:1b:a4:9e:23:22:
d8:b0:1a:9b:91:bc:0d:68:d9:7c:c0:8f:58:2f:93:
c8:20:b7:11:b4:96:f2:94:33:cf:dd:9f:3f:c1:4c:
93:b5:00:a7:6c:88:42:f4:2d:13:52:50:29:4b:7d:
f9:68:85:41:37:ad:74:ab:03:a4:5c:32:dd:68:06:
1c:04:a9:f6:41:22:9b:35:36:36:d3:bb:4b:c0:b1:
6d:13:f4:01:c0:14:d3:8b:8f:ed:10:a1:56:6c:58:
4b:44:95:4c:d9:a1:aa:15:d5:19:6f:4b:76:83:56:
10:b6:6f:00:d2:f9:14:0c:f6:14:8e:72:6a:87:d0:
be:70:68:11:49:a7:f1:c1:cf:79:f5:c8:e6:8b:dc:
0b:c4:8c:f2:64:26:38:ff:14:14:ac:32:f1:8e:58:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:8B:B7:24:A6:5C:FD:A6:4A:91:7B:C4:25:02:16:29:A1:0D:36
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:3c:a6:0d:aa:54:dd:7e:fc:df:6d:5a:db:d3:c8:d6:08:
5c:f8:33:4f:79:17:ae:c4:53:ad:57:24:2d:41:7b:a8:38:e1:
60:d9:24:ff:fd:cb:b4:f0:38:fe:db:f7:6a:3e:8a:6b:14:f0:
b9:d1:25:92:7a:f9:d0:37:f6:a5:20:01:62:c2:7f:ac:f0:5a:
2d:7b:93:d1:ba:48:20:80:cf:c5:9c:06:1d:b1:89:f8:4d:e7:
d9:20:30:6d:d3:e1:00:2f:c5:c3:13:95:26:6c:9a:d7:0d:b7:
10:1e:12:2c:e4:3d:58:ee:dd:2d:99:7f:9c:9e:62:31:b9:37:
d9:54:0c:9a:5a:60:6d:6e:7a:3c:f5:75:69:dd:66:60:c7:09:
81:83:5f:1d:5e:f1:4b:25:38:60:a9:b4:5b:0a:a4:a6:9b:92:
e9:1d:a6:ec:7b:26:3e:e6:e5:65:ea:fb:27:4b:56:1e:6b:71:
63:24:67:92:fb:7e:06:77:c9:8d:cc:31:b7:6a:97:c5:9a:11:
4b:08:61:f3:62:c1:66:4c:e4:d1:9e:c1:6d:6b:4f:66:0e:f7:
a7:dd:9f:bf:fc:45:b5:3e:d2:7b:50:9d:8a:5d:a7:75:ef:a1:
57:c3:dc:9f:b6:5b:9c:26:db:a3:61:d1:89:1d:b4:98:f7:7f:
3f:86:49:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/8KZ9sagPVnNusQt8gyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli
MmE1MDQwHhcNMjYwNzI0MTIwMDM5WhcNMjYwNzI1MTIwMDM5WjAzMTEwLwYDVQQD
EygxMTA3OGJiNzI0YTY1Y2ZkYTY0YTkxN2JjNDI1MDIxNjI5YTEwZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA3pSSFSPcyDAGnCjyrStIemqZsJ
lfZSQ2YY1YmRIdRwoXSgJ9ws9ibZS9COwFLNsvUGiwdiD/AUImtb6hcA5+XSRhYi
TUf0Y3h7hSunMX5M7kHm4eWsdY0oLbYv5FSs45LNG6SeIyLYsBqbkbwNaNl8wI9Y
L5PIILcRtJbylDPP3Z8/wUyTtQCnbIhC9C0TUlApS335aIVBN610qwOkXDLdaAYc
BKn2QSKbNTY207tLwLFtE/QBwBTTi4/tEKFWbFhLRJVM2aGqFdUZb0t2g1YQtm8A
0vkUDPYUjnJqh9C+cGgRSafxwc959cjmi9wLxIzyZCY4/xQUrDLxjlgmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEHi7ckplz9pkqRe8QlAhYpoQ02MB8GA1UdIwQY
MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct
ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz
LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSk8pg2q
VN1+/N9tWtvTyNYIXPgzT3kXrsRTrVckLUF7qDjhYNkk//3LtPA4/tv3aj6KaxTw
udElknr50Df2pSABYsJ/rPBaLXuT0bpIIIDPxZwGHbGJ+E3n2SAwbdPhAC/FwxOV
Jmya1w23EB4SLOQ9WO7dLZl/nJ5iMbk32VQMmlpgbW56PPV1ad1mYMcJgYNfHV7x
SyU4YKm0WwqkppuS6R2m7HsmPublZer7J0tWHmtxYyRnkvt+BnfJjcwxt2qXxZoR
Swhh82LBZkzk0Z7BbWtPZg73p92fv/xFtT7Se1Cdil2nde+hV8Pcn7ZbnCbbo2HR
iR20mPd/P4ZJSQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:23 2026 by rpki-client