Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: nY7LjG11BvmO0c9042ukr77o1ZK0Y3eTSEmoobsXXYU=
Subject key identifier: 80:73:30:BF:A1:0A:3D:EF:1D:F6:7E:0C:C7:4D:42:01:23:EB:35:56
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 019F9135AD67FA154B2873FCEDB627282A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 23:00:41 +0000
Manifest this update: Thu 23 Jul 2026 23:00:41 +0000
Manifest next update: Fri 24 Jul 2026 23:00:41 +0000
Files and hashes: 1: WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (hash: R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=)
2: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: fR0xw1DEq0xwim7rCSx6TsCtDlfmwVEb930LLtUzW98=)
3: zmOplfT1YKhLKnx8WielhvBrOFw.roa (hash: eaJL0aLY76J5n+3Hq2EQSn+31eGw4xT4GWelS0Nf5Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:ad:67:fa:15:4b:28:73:fc:ed:b6:27:28:2a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jul 23 23:00:41 2026 GMT
Not After : Jul 24 23:00:41 2026 GMT
Subject: CN=807330bfa10a3def1df67e0cc74d420123eb3556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:6d:1c:2f:8c:ae:bd:6f:64:24:06:63:74:
b2:4a:0f:2a:ae:3d:44:0e:17:f0:3b:6c:56:5c:9f:
58:2d:0a:ec:fd:43:b4:72:f6:fa:3b:9a:fe:d5:49:
3c:aa:42:8b:0e:b2:2c:20:27:6b:9a:46:aa:49:3a:
62:8e:37:29:c7:ee:f9:e8:24:c8:c8:20:8e:88:30:
53:bd:17:a5:50:7a:fc:b2:77:ec:59:ad:9f:1b:1a:
fd:62:8d:29:d4:74:97:d0:87:1c:73:de:78:a8:70:
e4:72:d7:04:82:5f:e7:aa:03:b1:07:c8:00:fb:e1:
c4:7a:00:ef:bb:91:12:7b:5b:c3:6a:6e:d3:bb:66:
d6:95:32:22:4d:ee:16:b5:66:34:ff:89:ac:47:a0:
1b:48:dc:07:97:ef:a2:ae:62:70:ae:1d:7c:c4:0f:
a1:13:18:89:c7:68:de:de:58:4e:60:fe:cf:9e:6d:
d5:f5:aa:2c:e5:f5:c4:04:11:bf:c5:21:23:fa:03:
02:64:1c:19:e4:b5:82:95:c3:bb:23:12:d8:0d:65:
d0:dc:a5:a0:89:58:16:18:dc:34:f5:70:3a:c8:d5:
28:ba:37:7f:df:d5:c4:a0:39:d0:dc:40:86:1f:5c:
8a:af:c7:86:b1:6a:47:75:66:2a:63:78:64:fc:4c:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:30:BF:A1:0A:3D:EF:1D:F6:7E:0C:C7:4D:42:01:23:EB:35:56
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:df:ad:28:2f:06:28:36:75:10:d8:a1:81:9d:ac:dc:4d:
6c:d4:0a:03:f7:21:53:7c:98:90:11:d3:be:1a:77:fb:fb:32:
ef:03:11:04:70:2a:41:f6:b9:f2:83:bd:15:fb:47:c3:65:db:
61:13:50:9a:6b:15:8b:f7:2c:f3:15:6b:d8:00:78:60:f9:c2:
33:b3:c1:f9:c4:f5:1f:9a:9e:68:fc:85:0e:d3:07:22:c6:0c:
b7:bc:55:4c:58:1d:87:9f:c3:d4:f6:77:c2:c7:4d:6b:27:d3:
96:e6:be:f1:5a:c8:54:37:81:19:a7:0f:6f:c0:cf:d3:ad:b4:
c6:96:71:ea:1f:f7:cd:a7:e7:dc:6a:35:b3:f5:8b:33:d5:d8:
9a:b5:6e:e4:bf:ee:05:90:22:c5:c0:56:f4:0b:b8:74:16:97:
44:19:51:b3:95:17:40:dd:58:00:f4:a5:fe:92:f5:0b:9a:eb:
91:11:a9:43:19:07:08:0c:ba:23:0c:2b:ce:ca:65:98:35:05:
f8:3b:d9:83:3c:70:f8:16:c1:c1:55:8e:f2:df:9e:e8:1a:de:
b0:aa:76:f1:09:26:34:e6:83:aa:c7:0f:cf:7a:5c:08:ff:f0:
6c:24:77:c7:74:02:db:ee:2d:90:38:b1:23:0b:60:c0:67:65:
0f:78:97:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNa1n+hVLKHP87bYnKCowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTIwNDIwZjcyMmY3ZDdmM2M0YjI1YTgwZTE3ZDcyOTAx
NzExODAwHhcNMjYwNzIzMjMwMDQxWhcNMjYwNzI0MjMwMDQxWjAzMTEwLwYDVQQD
Eyg4MDczMzBiZmExMGEzZGVmMWRmNjdlMGNjNzRkNDIwMTIzZWIzNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVtHC+Mrr1vZCQGY3SySg8qrj1E
DhfwO2xWXJ9YLQrs/UO0cvb6O5r+1Uk8qkKLDrIsICdrmkaqSTpijjcpx+756CTI
yCCOiDBTvRelUHr8snfsWa2fGxr9Yo0p1HSX0Iccc954qHDkctcEgl/nqgOxB8gA
++HEegDvu5ESe1vDam7Tu2bWlTIiTe4WtWY0/4msR6AbSNwHl++irmJwrh18xA+h
ExiJx2je3lhOYP7Pnm3V9aos5fXEBBG/xSEj+gMCZBwZ5LWClcO7IxLYDWXQ3KWg
iVgWGNw09XA6yNUoujd/39XEoDnQ3ECGH1yKr8eGsWpHdWYqY3hk/Ez5rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBzML+hCj3vHfZ+DMdNQgEj6zVWMB8GA1UdIwQY
MBaAFGeSBCD3IvfX88SyWoDhfXKQFxGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUt
NWVkMDg5YzFhZmVkLzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUtNWVkMDg5YzFhZmVk
LzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/ffrSgv
Big2dRDYoYGdrNxNbNQKA/chU3yYkBHTvhp3+/sy7wMRBHAqQfa58oO9FftHw2Xb
YRNQmmsVi/cs8xVr2AB4YPnCM7PB+cT1H5qeaPyFDtMHIsYMt7xVTFgdh5/D1PZ3
wsdNayfTlua+8VrIVDeBGacPb8DP0620xpZx6h/3zafn3Go1s/WLM9XYmrVu5L/u
BZAixcBW9Au4dBaXRBlRs5UXQN1YAPSl/pL1C5rrkRGpQxkHCAy6IwwrzsplmDUF
+DvZgzxw+BbBwVWO8t+e6BresKp28QkmNOaDqscPz3pcCP/wbCR3x3QC2+4tkDix
IwtgwGdlD3iXWw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:21 2026 by rpki-client