Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: AX+bsJZ+ha4qPFZ5r6mSgYRRYNaxLt7AubGj4svWJOI=
Subject key identifier: 2E:10:E6:02:4C:7F:2D:51:5A:2B:FD:44:50:5F:D6:38:BE:CE:54:0D
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 019F95494F70A4F0FE7014A926C4B840A48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 1100
Signing time: Fri 24 Jul 2026 18:00:37 +0000
Manifest this update: Fri 24 Jul 2026 18:00:37 +0000
Manifest next update: Sat 25 Jul 2026 18:00:37 +0000
Files and hashes: 1: nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa (hash: qFZqmcvD3VdssLZWKysthIOIYoxtOvRq6+nL6RJRO2k=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: BfiON5ueJfyG5NzPB5sB8nOPCzd4J12Wtzjmi2FFj4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:4f:70:a4:f0:fe:70:14:a9:26:c4:b8:40:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Jul 24 18:00:37 2026 GMT
Not After : Jul 25 18:00:37 2026 GMT
Subject: CN=2e10e6024c7f2d515a2bfd44505fd638bece540d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:ee:ee:d4:f1:cc:9d:f2:75:1c:56:24:81:
10:88:14:ea:72:33:53:44:7b:1a:cd:67:52:17:5e:
59:4c:da:d0:9f:75:14:0e:8d:f4:5b:3e:99:bc:55:
c5:cc:62:22:fc:7e:2a:5e:13:fe:9d:a3:20:5e:3d:
b7:5d:38:67:5a:57:24:b6:f5:e4:99:e9:f7:85:3f:
99:1e:88:e2:8d:65:5a:e2:93:6b:95:f0:93:69:24:
47:1d:af:53:93:05:1c:ed:fb:09:d6:26:9f:d1:5f:
f6:1b:72:e1:56:1e:b9:ee:74:32:26:65:86:d7:59:
4c:4b:0a:8c:34:42:65:aa:09:a5:d8:37:a3:ed:40:
1e:cb:3d:0f:0a:0d:08:91:32:73:57:df:b3:c3:ca:
a8:1f:de:82:46:7d:ba:86:c7:41:1d:bf:c2:bf:b5:
51:52:b3:94:bf:f6:83:e3:80:c0:b7:d5:d9:99:b0:
ab:19:80:c1:6e:d9:dd:ba:34:96:73:b5:58:9b:f4:
b9:4a:97:24:f8:bb:26:05:43:d5:34:f4:aa:97:94:
6b:7d:d5:d5:42:04:70:4e:52:70:f5:a9:34:84:08:
3a:bd:60:b6:7f:b1:36:7a:e9:8e:e9:16:78:11:ae:
ce:39:de:d8:2a:7d:95:c7:94:e8:17:6b:d7:71:d6:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:E6:02:4C:7F:2D:51:5A:2B:FD:44:50:5F:D6:38:BE:CE:54:0D
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:f8:a5:c5:35:71:95:3f:84:25:5e:35:da:56:9a:00:ac:
53:d3:19:ac:37:0b:65:c0:ad:57:c2:f6:8b:8d:05:3b:de:ea:
4f:c7:eb:d5:0b:90:e3:88:f1:4f:e0:65:e1:63:ce:04:f6:a2:
fe:1a:e4:01:bc:1f:ff:04:cc:4a:31:e3:bd:fe:4b:7f:b6:36:
c8:a7:e5:cc:b7:65:4e:d2:96:a3:eb:fa:bb:3f:4b:c4:bd:7a:
35:a0:d2:d5:b6:a5:c9:b7:4a:f9:42:9e:7f:02:57:a8:7a:57:
f0:3c:f2:e4:dd:9f:ed:63:40:7b:a6:1d:54:d6:b6:0f:16:57:
f3:38:da:5d:df:20:67:2c:89:db:97:f8:70:3c:05:9c:4a:8d:
99:c6:38:be:8a:83:f2:c3:a0:d0:bc:85:ea:30:0d:2f:c1:ac:
b2:e6:a3:bc:6d:21:cc:3b:e5:8f:9f:30:2f:94:2c:2e:53:23:
f5:94:6e:88:4c:e8:b8:5f:4f:e6:5b:15:ab:16:bf:c8:a9:04:
e5:9b:43:25:7a:7d:c8:c1:b6:0b:27:be:d7:3d:8c:20:73:21:
df:9b:4b:28:87:9f:11:21:d3:12:5f:02:5b:7c:23:f2:ed:6b:
98:2d:9c:c1:7d:b6:67:fe:b4:89:6f:e5:33:04:14:4f:b2:b7:
b4:13:d7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSU9wpPD+cBSpJsS4QKSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjYzZWZhMjY5YTE0MTE3NTRlMWNkYWFiODQ4ZmIwNmZh
MDg0MTEwHhcNMjYwNzI0MTgwMDM3WhcNMjYwNzI1MTgwMDM3WjAzMTEwLwYDVQQD
EygyZTEwZTYwMjRjN2YyZDUxNWEyYmZkNDQ1MDVmZDYzOGJlY2U1NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOru7tTxzJ3ydRxWJIEQiBTqcjNT
RHsazWdSF15ZTNrQn3UUDo30Wz6ZvFXFzGIi/H4qXhP+naMgXj23XThnWlcktvXk
men3hT+ZHojijWVa4pNrlfCTaSRHHa9TkwUc7fsJ1iaf0V/2G3LhVh657nQyJmWG
11lMSwqMNEJlqgml2Dej7UAeyz0PCg0IkTJzV9+zw8qoH96CRn26hsdBHb/Cv7VR
UrOUv/aD44DAt9XZmbCrGYDBbtndujSWc7VYm/S5Spck+LsmBUPVNPSql5RrfdXV
QgRwTlJw9ak0hAg6vWC2f7E2eumO6RZ4Ea7OOd7YKn2Vx5ToF2vXcdaqoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4Q5gJMfy1RWiv9RFBf1ji+zlQNMB8GA1UdIwQY
MBaAFM22PvommhQRdU4c2quEj7BvoIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYt
NDM4ODM0ODdlNDkyLzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYtNDM4ODM0ODdlNDky
LzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClr4pcU1
cZU/hCVeNdpWmgCsU9MZrDcLZcCtV8L2i40FO97qT8fr1QuQ44jxT+Bl4WPOBPai
/hrkAbwf/wTMSjHjvf5Lf7Y2yKflzLdlTtKWo+v6uz9LxL16NaDS1balybdK+UKe
fwJXqHpX8Dzy5N2f7WNAe6YdVNa2DxZX8zjaXd8gZyyJ25f4cDwFnEqNmcY4voqD
8sOg0LyF6jANL8GssuajvG0hzDvlj58wL5QsLlMj9ZRuiEzouF9P5lsVqxa/yKkE
5ZtDJXp9yMG2Cye+1z2MIHMh35tLKIefESHTEl8CW3wj8u1rmC2cwX22Z/60iW/l
MwQUT7K3tBPXOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:16 2026 by rpki-client