
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier: 74u2InjHuhqc0aAtkptMUVhcjN8dk1noZ9LBpzs33BA=
Subject key identifier: 87:92:88:C0:1E:E9:22:8C:66:FC:41:A0:E3:59:60:F0:52:FC:DB:67
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019F93923CD96F7B65A90C620E0699F3AE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number: 1A8E
Signing time: Fri 24 Jul 2026 10:01:02 +0000
Manifest this update: Fri 24 Jul 2026 10:01:02 +0000
Manifest next update: Sat 25 Jul 2026 10:01:02 +0000
Files and hashes: 1: 1WCWC52zGfwCmY5V-mhdhgDriwQ.roa (hash: IPlYfdDKlG6GcFbb6yt9vpWAAJAp4h7ZVHeTEXhrSfo=)
2: 2293WVx5FEzWqVXSDjmLVc7kfB8.roa (hash: Z0We1fzMf0PQYdkcSo2x/cAXZoyZ0rwm8YewHU6T5Q8=)
3: 2KoAgZVTwnbWcixjMbqnJvf6xN0.roa (hash: p0gbt1YvA9hNbGitowNrqQTyinoOy92to8c/+jH2B7c=)
4: 55HWqxxZe2wnYl-SD-3TTNTZPYA.roa (hash: PHOed791pgRRjh0SKyECtJfcfZcGYeoyFrNZ2S7sdyo=)
5: B1hcAWVtfsu4p15wc7vb4f5FG2M.roa (hash: kyrwExxNdM9FgyuKFkeZaaofzfIrWd75BKVu637vFZc=)
6: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (hash: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o=)
7: EerEbo6dEgHiwfgFLCrAnWDppgo.roa (hash: 6Lz61K63KtUQqm0ALtF5HndpRmjb7aGgv3XeEAtY0Gc=)
8: I1Ax98FMTUq1EZ8GdCpTaPZSTuI.roa (hash: HcHmzW2d0+z9EOnUudoaXJQ2cKcQ7/kyTrWUvsVJQrw=)
9: ICt1Rkbvy2PurXTbs0JUqBhl_E8.roa (hash: vC+h6HjFcV/FpKrWeC9krmj9LLxIWfjfzAQgLBkIKBQ=)
10: Lo8n8GTpAuX3cUT5TKIwpdDYMpk.roa (hash: LFfd8LdOzsN++zViD01pBmc6X7J6TGbEOTbK6bu+kU4=)
11: MDa6kjpECMXWe15W6-w-6g5-5AE.roa (hash: EhKZtfCh9xGJEskJActy0QvC9WEnI4730g54I6PP7+8=)
12: W2LQg6-KbZwplQNYht4GfUeX9DY.roa (hash: oHn90pVQF8lP0cmJLoeww27Hhkb8U2BBEb0V3tv842A=)
13: WFW_WIwBdI0SNLuZbC80uLnywXU.roa (hash: ECYS+U6BY2zt31zzKoFkN8wTRgzyvrgdtvRAK5RIgxM=)
14: XtF6dx1K_-9E8G1QrrAN0rjOP2E.roa (hash: AEIk+UMFJZOy6fARFY4HiJljniS60LJkRzj37goEaUE=)
15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: w925jc6ZN/5zyEHVkbrqPtNZIq9cpv8QpseTywu0cgM=)
16: b73LYZVOKac6G4il-1ce4PTa138.roa (hash: pZGLRHEPXEVLg+1C0RtMLojmfnurp8HxJqliemmKo/I=)
17: bd2_haPLBRYi9ES34EvG-zee_fI.roa (hash: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=)
18: c6GILi92RmWHgC81JVzcin9qgpQ.roa (hash: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=)
19: cuTKnPSYIqMi_v6Ugbvmok1PROw.roa (hash: 23+0bEujcw5tIRr1F8V97O5sEK7TfNzRLUEsi4oLeZQ=)
20: giZ2uZ_m5due4lBiPxv8SG1NOGc.roa (hash: 9B02223i6VysXTKxWCnxBQOkAZWOwRjQUTSDwwP8F0A=)
21: ja0BpQXhcblpKEj-Zj_RAjzr35g.roa (hash: iy0Afou5BdlAsZDL/FBHdBDLDYuwKrfJY54mLykthTs=)
22: jmSRD5Pbhaie_b0T8NixTJfcSnc.roa (hash: s2xY4deOusI8dO/f5m35S6W/k+iFhPCHHaOzT9YnjuE=)
23: lhRe_xHQCXI5rtB8SPIPogdMRdc.roa (hash: RTJfCFGZ0JUtgtMrlDAXPJi/7/7VB6A1h0/zy5VXyBQ=)
24: m35MBC3-R1Km-GWEprOI4k13d4o.roa (hash: LsPD64UtQd1Nb8CJ8XDG7o3lS49ig9cWrQe+LYlYhOM=)
25: mahoof4m7VQsfHWs8J1qWV__YZQ.roa (hash: fJTBlPt7bZTm/FjsAsBry9UuObsDLmAxGPqwEBr5S84=)
26: sjQCjerjRwfah-q2hwwOmAstMTo.roa (hash: N10Zo0ylNZWVNpGxcYshMOYMt1EH12p203A0DA3EChs=)
27: tLSGZw5-QpB_5fV81O2fLyOca60.roa (hash: QiSrJL6zpztpRwpWANYGtyIdsxsBMIWfzPt3CGOqWPA=)
28: xmMlfa7iRWWb2wsgVQjfEUP18xg.roa (hash: MZHFj2EgqlivJGFIR4zUNFYVY5Bn/cspVbef0X3zPHs=)
29: zMqk1-WIYUxSncp-81GKb9JoWog.roa (hash: g3omPs3FrgCp88PJmKaoUEjf80fMum+1oxYyWWIAYGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:3c:d9:6f:7b:65:a9:0c:62:0e:06:99:f3:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 24 10:01:02 2026 GMT
Not After : Jul 25 10:01:02 2026 GMT
Subject: CN=879288c01ee9228c66fc41a0e35960f052fcdb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:d2:f5:3c:d1:2b:f4:f5:b9:0b:90:86:90:
e7:0e:a7:fb:ed:6f:a6:03:5e:4c:51:00:df:cb:e8:
86:b0:28:2b:7c:08:6f:34:8d:66:71:b6:9d:f0:92:
4b:9b:20:07:26:df:f6:f1:eb:e9:f2:7f:62:45:c1:
a7:c6:52:d7:8b:00:b6:fb:9c:ae:24:a7:10:76:ec:
ef:05:30:b2:d4:12:60:cf:99:6b:f2:d8:ff:a0:16:
b8:a2:2f:fc:49:82:03:7a:d5:21:bf:e6:95:ee:00:
94:a2:be:fd:e1:15:64:2f:4f:3e:4f:cf:cf:7f:fe:
ef:74:dd:7e:7b:44:21:5c:c9:47:96:83:9a:16:41:
88:46:c5:52:93:23:74:03:4b:dd:c4:21:88:ff:3e:
c0:5d:32:f2:ba:b7:64:5e:60:e6:3e:a8:b7:08:93:
50:32:9d:d8:fb:51:c7:48:28:32:1f:31:86:97:6f:
a0:cb:35:52:08:ae:ea:33:cb:da:2a:c6:6a:66:a6:
95:8c:db:eb:f7:a5:7d:a3:d0:66:b0:0e:66:18:18:
36:2b:4e:72:c8:67:da:c6:82:0b:1f:ab:7e:41:66:
e5:14:ae:81:8e:5c:38:d7:cc:6f:6d:1f:f8:a9:63:
23:c1:1b:8d:79:3b:b7:e3:01:b2:99:0b:63:19:8d:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:88:C0:1E:E9:22:8C:66:FC:41:A0:E3:59:60:F0:52:FC:DB:67
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:10:36:65:99:e5:c9:7b:e2:a1:ab:31:21:af:57:02:01:40:
71:48:45:8e:b7:79:89:c3:9b:4f:ca:98:4e:2f:c4:31:3a:45:
89:8e:18:ef:04:a1:a4:7c:ff:25:89:ed:91:a2:5b:50:42:63:
ba:73:21:ed:83:73:f6:87:29:c6:61:61:16:02:36:53:1a:fd:
b6:81:19:ee:4c:41:28:76:f5:dd:6f:20:63:dd:34:f8:6f:9e:
24:67:97:3d:52:67:b2:9d:3e:6c:5f:8d:3d:fb:1c:66:ab:de:
6a:8e:8d:f9:88:51:34:1c:56:80:60:2f:38:af:2a:c1:e7:50:
f7:5a:89:b7:7b:a1:79:c6:a5:41:d6:bb:72:38:13:4f:44:e0:
9c:7e:59:e6:80:14:e7:39:d4:71:9e:9e:7d:03:2a:1c:c1:ec:
2e:75:c0:ac:9f:0a:fe:e3:c5:2c:98:f4:cf:d0:89:2e:89:63:
f7:75:00:05:9c:b0:78:c2:30:63:00:4d:b6:25:92:8f:24:74:
5d:8f:5b:bb:66:0c:3c:2d:84:ba:16:7f:b8:78:18:02:b6:a4:
67:98:5e:a3:cc:16:0a:97:32:9f:c3:9b:20:43:82:35:99:63:
61:ab:1a:aa:76:75:a9:7c:db:71:76:ee:78:45:59:db:f1:45:
9b:b0:36:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkjzZb3tlqQxiDgaZ8645MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjYwNzI0MTAwMTAyWhcNMjYwNzI1MTAwMTAyWjAzMTEwLwYDVQQD
Eyg4NzkyODhjMDFlZTkyMjhjNjZmYzQxYTBlMzU5NjBmMDUyZmNkYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwufS9TzRK/T1uQuQhpDnDqf77W+m
A15MUQDfy+iGsCgrfAhvNI1mcbad8JJLmyAHJt/28evp8n9iRcGnxlLXiwC2+5yu
JKcQduzvBTCy1BJgz5lr8tj/oBa4oi/8SYIDetUhv+aV7gCUor794RVkL08+T8/P
f/7vdN1+e0QhXMlHloOaFkGIRsVSkyN0A0vdxCGI/z7AXTLyurdkXmDmPqi3CJNQ
Mp3Y+1HHSCgyHzGGl2+gyzVSCK7qM8vaKsZqZqaVjNvr96V9o9BmsA5mGBg2K05y
yGfaxoILH6t+QWblFK6Bjlw418xvbR/4qWMjwRuNeTu34wGymQtjGY1ZmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeSiMAe6SKMZvxBoONZYPBS/NtnMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxA2ZZnl
yXvioasxIa9XAgFAcUhFjrd5icObT8qYTi/EMTpFiY4Y7wShpHz/JYntkaJbUEJj
unMh7YNz9ocpxmFhFgI2Uxr9toEZ7kxBKHb13W8gY900+G+eJGeXPVJnsp0+bF+N
PfscZqveao6N+YhRNBxWgGAvOK8qwedQ91qJt3uhecalQda7cjgTT0TgnH5Z5oAU
5znUcZ6efQMqHMHsLnXArJ8K/uPFLJj0z9CJLolj93UABZyweMIwYwBNtiWSjyR0
XY9bu2YMPC2EuhZ/uHgYArakZ5heo8wWCpcyn8ObIEOCNZljYasaqnZ1qXzbcXbu
eEVZ2/FFm7A2ZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:13 2026 by rpki-client