Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: aVYrtgWpTEg5syWnyH57q5Qj5XXolnrKmNSbByUWWz8=
Subject key identifier: 4B:91:AE:45:01:B1:B8:CE:31:81:C3:19:CC:99:A6:03:F4:1C:97:7E
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019F935C3778E53FCB34B5569BD68451F5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0279
Signing time: Fri 24 Jul 2026 09:02:01 +0000
Manifest this update: Fri 24 Jul 2026 09:02:01 +0000
Manifest next update: Sat 25 Jul 2026 09:02:01 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: AMQd92PPkZqpBo+lif4YcqS6YbsjCsKUj+9k9OlSBRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:37:78:e5:3f:cb:34:b5:56:9b:d6:84:51:f5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Jul 24 09:02:01 2026 GMT
Not After : Jul 25 09:02:01 2026 GMT
Subject: CN=4b91ae4501b1b8ce3181c319cc99a603f41c977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:41:52:f8:6c:82:16:74:f9:30:ef:87:a3:
9a:47:61:96:f4:21:3f:ce:44:3a:39:a6:97:39:d9:
2d:22:fb:28:d8:c8:70:b4:48:75:7e:56:93:24:22:
ee:a1:3d:51:35:5f:56:ff:0d:dc:4c:0a:cf:7f:ef:
7e:04:c0:f2:da:24:91:21:52:6b:36:ed:f6:51:a6:
e1:41:91:3f:d2:2c:f8:9a:76:de:16:d0:f8:78:a1:
90:6d:77:3a:9e:57:52:c1:86:d0:6f:c4:64:69:39:
92:dc:62:ff:c6:92:cd:24:a1:fd:47:7f:3d:59:7e:
1f:96:58:8a:15:62:9e:a9:ae:32:6f:e3:cd:41:33:
06:d5:c4:d5:c3:34:31:f2:81:ac:01:35:05:2b:5c:
6c:8d:21:2c:f0:88:87:d8:db:22:6c:aa:d3:97:22:
32:04:b9:18:34:63:d6:55:1b:7d:f5:64:97:28:60:
f1:c5:48:13:70:6b:b5:ba:56:7a:71:84:a6:3c:5c:
ba:36:a8:31:64:71:bd:1b:2b:96:3d:c0:28:5b:bd:
42:26:cb:a5:03:81:cb:b5:9b:c7:af:3d:21:44:0e:
30:c1:6e:54:a1:10:25:aa:6c:07:d2:46:89:e9:5c:
53:e2:f5:aa:b4:95:a5:1d:20:d5:c1:45:73:2e:28:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:AE:45:01:B1:B8:CE:31:81:C3:19:CC:99:A6:03:F4:1C:97:7E
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:59:0d:97:07:87:a2:35:1d:6b:f1:75:cf:c8:04:88:3b:
cc:3a:73:6b:05:9d:ab:7e:9f:23:4b:87:84:00:42:cf:f8:8a:
ef:a1:ca:2d:c8:2e:06:a9:07:4e:03:86:85:f3:97:dc:7b:00:
6a:43:1d:7e:a7:1d:f6:82:65:85:a6:94:b2:8c:46:8f:84:f8:
ec:4f:24:59:f3:a2:05:cc:4e:9d:34:8e:9b:ec:49:25:7d:33:
70:80:5a:20:21:19:8b:9c:75:ac:37:19:eb:64:cd:f1:9a:6e:
8a:de:3d:a0:70:4d:e2:81:01:84:5a:c1:61:76:de:2c:e9:ca:
97:44:11:bd:e6:61:f8:ac:2f:64:ba:34:09:37:0c:9a:a6:e4:
f4:f8:39:a7:2c:e7:45:f6:60:84:52:dc:51:42:9d:3f:05:ae:
6c:72:e4:ff:f0:aa:a5:f4:b5:1d:d1:8c:52:22:7d:a3:c6:c3:
01:9f:64:8a:cb:aa:a1:c0:e7:f6:b6:07:4e:26:38:26:e9:c2:
88:b5:93:f6:66:f9:36:a3:99:c5:25:29:58:97:bc:98:77:fa:
45:3f:55:36:71:6a:90:56:e8:b9:3d:98:98:2a:2f:f5:68:8c:
5c:f3:7e:fe:75:fc:a5:0d:6c:a5:91:8e:87:a0:d3:40:ba:0b:
40:91:70:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXDd45T/LNLVWm9aEUfXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjUwMWQyZDA1MjE4NWQ0ZjY1NjkyMThjMjhiZjM1ODU5
MDAwZmMwHhcNMjYwNzI0MDkwMjAxWhcNMjYwNzI1MDkwMjAxWjAzMTEwLwYDVQQD
Eyg0YjkxYWU0NTAxYjFiOGNlMzE4MWMzMTljYzk5YTYwM2Y0MWM5NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/JBUvhsghZ0+TDvh6OaR2GW9CE/
zkQ6OaaXOdktIvso2MhwtEh1flaTJCLuoT1RNV9W/w3cTArPf+9+BMDy2iSRIVJr
Nu32UabhQZE/0iz4mnbeFtD4eKGQbXc6nldSwYbQb8RkaTmS3GL/xpLNJKH9R389
WX4flliKFWKeqa4yb+PNQTMG1cTVwzQx8oGsATUFK1xsjSEs8IiH2NsibKrTlyIy
BLkYNGPWVRt99WSXKGDxxUgTcGu1ulZ6cYSmPFy6NqgxZHG9GyuWPcAoW71CJsul
A4HLtZvHrz0hRA4wwW5UoRAlqmwH0kaJ6VxT4vWqtJWlHSDVwUVzLiikywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuRrkUBsbjOMYHDGcyZpgP0HJd+MB8GA1UdIwQY
MBaAFM71AdLQUhhdT2VpIYwovzWFkAD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgt
Zjk1MDMyN2Y4OGQzLzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgtZjk1MDMyN2Y4OGQz
LzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5xZDZcH
h6I1HWvxdc/IBIg7zDpzawWdq36fI0uHhABCz/iK76HKLcguBqkHTgOGhfOX3HsA
akMdfqcd9oJlhaaUsoxGj4T47E8kWfOiBcxOnTSOm+xJJX0zcIBaICEZi5x1rDcZ
62TN8Zpuit49oHBN4oEBhFrBYXbeLOnKl0QRveZh+KwvZLo0CTcMmqbk9Pg5pyzn
RfZghFLcUUKdPwWubHLk//CqpfS1HdGMUiJ9o8bDAZ9kisuqocDn9rYHTiY4JunC
iLWT9mb5NqOZxSUpWJe8mHf6RT9VNnFqkFbouT2YmCov9WiMXPN+/nX8pQ1spZGO
h6DTQLoLQJFwqQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:22 2026 by rpki-client