Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: EyljnF1tGPHbeuokS9khtmqIakc3AhsL6fTAjFPgyZo=
Subject key identifier: 8C:CB:F6:00:08:12:DF:22:3A:F0:2C:0A:83:50:59:5E:8F:60:BD:E8
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019F90C7AF98066717EF92BE8E19DB136209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: P2B766sld6YbwOxda85NHhDsjNc.roa (hash: Rh+n3/ugGLGil4AXCXWWDwwftkzN5fZJ5lMUe38d6gg=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: 1fy51+/XrGE0rrZ3NdlncVivl5kv4A2k5/ePMNq5FH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:af:98:06:67:17:ef:92:be:8e:19:db:13:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=8ccbf6000812df223af02c0a8350595e8f60bde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:f7:1f:cd:f1:c6:42:09:c0:48:55:49:60:
b2:a2:c3:d9:41:90:87:4d:dc:c2:02:f5:ca:e0:b5:
15:96:f6:67:51:66:2a:ff:a6:26:df:2a:66:6a:a3:
b6:a5:95:f3:c0:e4:e9:57:63:2f:e7:e7:4e:7b:d7:
4f:85:28:5e:06:0c:53:df:d2:61:c9:04:97:19:15:
74:63:cb:f2:50:43:d1:3d:e5:28:63:0e:aa:41:5c:
8d:b8:26:bf:3b:24:fe:cc:28:ec:c3:c6:a7:3d:ff:
7d:57:78:bb:16:1e:77:b9:24:f3:f7:74:37:5d:13:
b6:23:42:f2:dc:14:3e:ac:fe:67:92:6d:f8:4d:8c:
44:4c:88:9b:1f:e7:3e:fa:b0:b2:38:37:b7:d6:9f:
37:71:62:75:68:5a:21:f3:f0:11:0f:7e:b1:40:bf:
ed:51:eb:cf:42:77:88:87:42:5f:49:74:a1:a8:68:
3e:d4:36:05:39:1a:4a:af:6c:de:ef:d7:19:58:d8:
0a:bd:c7:af:00:11:41:fa:f4:a1:1c:eb:36:78:47:
4b:77:a9:85:48:3f:a4:38:4b:d1:77:c8:c9:61:7a:
49:55:b8:d0:28:3a:bb:89:da:b0:0d:81:b8:2d:35:
40:6b:d1:c4:f5:9a:05:c5:c0:db:7f:10:fe:cb:8c:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:F6:00:08:12:DF:22:3A:F0:2C:0A:83:50:59:5E:8F:60:BD:E8
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:7c:3a:ad:43:23:44:a2:5b:9d:a8:cb:d0:f8:98:40:06:
a7:6a:ce:55:5a:e4:49:d1:f9:aa:d1:e2:72:ed:ec:dc:a0:ea:
56:28:55:38:8a:59:dc:2d:be:fa:2d:24:32:43:ad:01:50:80:
df:86:85:74:68:3d:c8:e8:8a:c4:43:8a:f3:61:fb:b9:b0:b4:
0b:3b:51:d5:38:6d:2a:af:aa:1f:ac:76:59:8a:68:46:f2:4f:
96:44:52:f5:33:54:ca:d0:2a:3e:49:24:2c:cb:e4:be:ab:ee:
cb:f3:ce:45:c7:57:c5:54:f1:61:0f:46:57:f8:61:88:bd:03:
24:c7:f5:cb:b5:84:c3:f5:1e:4c:10:72:00:00:2e:7d:46:02:
39:6e:0e:1f:f4:b5:02:b0:e9:88:ea:be:01:00:5f:cf:e9:92:
2c:b7:cf:b3:d5:8f:43:d4:be:af:ea:3c:f1:bf:f4:8f:d2:0e:
fd:14:8a:8b:f6:9d:2f:ee:b2:12:ba:04:32:ea:28:f7:32:58:
bd:ab:94:38:d4:be:a8:9a:53:91:7f:fd:e1:53:97:f8:ee:95:
91:70:47:14:e7:ba:a4:0b:0a:83:77:26:12:a2:51:d7:24:2b:
39:2a:12:47:5a:d3:3f:fe:1f:c9:86:26:51:88:08:34:7b:4e:
04:68:f1:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx6+YBmcX75K+jhnbE2IJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTZhYTBlMjE1NThjOTJhNDg2NTQyNDRlMDU5NjFhMWZj
ZmEwZjIwHhcNMjYwNzIzMjEwMDMzWhcNMjYwNzI0MjEwMDMzWjAzMTEwLwYDVQQD
Eyg4Y2NiZjYwMDA4MTJkZjIyM2FmMDJjMGE4MzUwNTk1ZThmNjBiZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcH3H83xxkIJwEhVSWCyosPZQZCH
TdzCAvXK4LUVlvZnUWYq/6Ym3ypmaqO2pZXzwOTpV2Mv5+dOe9dPhSheBgxT39Jh
yQSXGRV0Y8vyUEPRPeUoYw6qQVyNuCa/OyT+zCjsw8anPf99V3i7Fh53uSTz93Q3
XRO2I0Ly3BQ+rP5nkm34TYxETIibH+c++rCyODe31p83cWJ1aFoh8/ARD36xQL/t
UevPQneIh0JfSXShqGg+1DYFORpKr2ze79cZWNgKvcevABFB+vShHOs2eEdLd6mF
SD+kOEvRd8jJYXpJVbjQKDq7idqwDYG4LTVAa9HE9ZoFxcDbfxD+y4zsHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzL9gAIEt8iOvAsCoNQWV6PYL3oMB8GA1UdIwQY
MBaAFM5Wqg4hVYySpIZUJE4Flhofz6DyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wNzQ3NmMtMmM1Yi00MGU5LWI1NjIt
NTRmYTMwODY0YzIxLzEvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wNzQ3NmMtMmM1Yi00MGU5LWI1NjItNTRmYTMwODY0YzIx
LzEvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP98Oq1D
I0SiW52oy9D4mEAGp2rOVVrkSdH5qtHicu3s3KDqVihVOIpZ3C2++i0kMkOtAVCA
34aFdGg9yOiKxEOK82H7ubC0CztR1ThtKq+qH6x2WYpoRvJPlkRS9TNUytAqPkkk
LMvkvqvuy/PORcdXxVTxYQ9GV/hhiL0DJMf1y7WEw/UeTBByAAAufUYCOW4OH/S1
ArDpiOq+AQBfz+mSLLfPs9WPQ9S+r+o88b/0j9IO/RSKi/adL+6yEroEMuoo9zJY
vauUONS+qJpTkX/94VOX+O6VkXBHFOe6pAsKg3cmEqJR1yQrOSoSR1rTP/4fyYYm
UYgINHtOBGjxog==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:53 2026 by rpki-client