
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: X+LT8wCQwI4guwjBTq7guZEcprwz/Tfc2biM2RvGCzc=
Subject key identifier: 4A:99:35:37:ED:9C:EB:67:BE:64:43:55:9A:F2:7A:21:00:37:52:73
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 019F92111068CD4EFD23C4BA9D1A66A285D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0E2C
Signing time: Fri 24 Jul 2026 03:00:19 +0000
Manifest this update: Fri 24 Jul 2026 03:00:19 +0000
Manifest next update: Sat 25 Jul 2026 03:00:19 +0000
Files and hashes: 1: aE-igOYVXwkygfdsftmlck44E1U.roa (hash: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0=)
2: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (hash: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: h+h9Oh6+/xaqeJ5osR9D0WEDTslwA5LAOj2M/oirzdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:10:68:cd:4e:fd:23:c4:ba:9d:1a:66:a2:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jul 24 03:00:19 2026 GMT
Not After : Jul 25 03:00:19 2026 GMT
Subject: CN=4a993537ed9ceb67be6443559af27a2100375273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:9c:57:c1:77:0b:88:41:0d:9e:05:fa:98:
82:66:09:8d:a8:39:ff:0f:99:47:87:c5:17:b9:25:
45:8e:ed:cc:22:b8:b9:1f:38:9a:b0:0a:24:c9:e5:
3b:0d:f8:7f:89:5c:43:0b:24:1f:c9:a5:11:90:60:
de:54:a4:fb:df:e8:80:f3:a5:b6:a6:ae:aa:b3:5e:
c7:58:5e:3d:c2:a1:b1:0a:ac:31:0f:9a:ec:8f:0d:
ea:e5:63:68:e5:64:0d:16:4c:a7:c3:1e:78:b7:e6:
cf:53:6a:dd:f0:6c:13:79:2d:9d:59:b1:6a:b0:a3:
c3:69:7e:30:31:ba:3f:be:c0:7b:e0:79:64:78:e3:
55:64:68:96:1a:74:39:aa:8f:93:c7:74:d7:c4:bb:
c7:9c:c7:22:17:06:bf:db:6b:74:ed:1c:b0:93:30:
b8:73:ab:83:06:78:7b:80:da:ce:ad:1b:31:90:0c:
f2:56:2c:30:e4:de:19:5d:71:de:27:46:21:4f:87:
57:dc:ae:ec:11:1f:9c:bc:fd:9d:90:f1:9d:85:3f:
45:60:7b:b7:52:3f:19:9a:42:20:bc:ba:10:ee:ce:
75:12:b3:d2:06:25:e8:27:e5:f9:de:67:1a:b5:06:
3f:88:b2:3b:8b:bb:1d:2e:49:82:26:a8:ca:3d:b2:
1a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:99:35:37:ED:9C:EB:67:BE:64:43:55:9A:F2:7A:21:00:37:52:73
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9b:e2:f8:70:af:23:28:26:d2:13:d2:e6:2b:55:da:c7:82:
b3:16:1a:7c:0a:37:52:93:34:e7:f6:5f:1c:07:01:17:32:c8:
cb:17:f5:dc:fb:a9:cc:ba:cd:68:6d:cc:f7:18:d3:f6:f1:8b:
09:5c:58:66:a1:85:14:86:6f:a7:7b:87:f3:10:7c:7d:01:36:
61:83:d1:c8:02:1b:01:ac:18:7d:13:bc:bb:c6:f3:80:27:0d:
7b:b7:62:ab:22:c8:7c:04:6b:79:8b:4d:ab:e8:f8:9c:f4:ec:
87:f9:83:95:0e:41:e1:61:3d:0d:d5:61:1c:9b:b9:96:da:8c:
61:ee:b2:bd:96:e2:0e:62:a9:8f:99:38:be:05:2a:48:8f:bc:
81:bb:d4:97:67:ff:d1:ce:af:89:0c:22:70:09:c5:27:85:b6:
78:bf:a2:02:47:b7:b6:e0:e4:d5:f7:88:f9:45:a5:ba:bd:55:
47:ce:92:b9:1c:5c:f6:da:a4:fc:90:d8:90:b3:fc:71:ce:b1:
f1:c4:04:6f:7c:51:e2:a8:f6:3f:f9:7d:ba:d8:ff:ff:f4:cd:
e2:3b:f9:ba:a8:cd:a4:60:ab:e3:31:c4:ed:f8:9e:58:3c:7f:
37:58:5a:38:3f:64:65:5d:60:16:21:54:ba:84:8e:3b:da:55:
b2:b1:c2:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SERBozU79I8S6nRpmooXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjYwNzI0MDMwMDE5WhcNMjYwNzI1MDMwMDE5WjAzMTEwLwYDVQQD
Eyg0YTk5MzUzN2VkOWNlYjY3YmU2NDQzNTU5YWYyN2EyMTAwMzc1MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t+cV8F3C4hBDZ4F+piCZgmNqDn/
D5lHh8UXuSVFju3MIri5HziasAokyeU7Dfh/iVxDCyQfyaURkGDeVKT73+iA86W2
pq6qs17HWF49wqGxCqwxD5rsjw3q5WNo5WQNFkynwx54t+bPU2rd8GwTeS2dWbFq
sKPDaX4wMbo/vsB74HlkeONVZGiWGnQ5qo+Tx3TXxLvHnMciFwa/22t07RywkzC4
c6uDBnh7gNrOrRsxkAzyViww5N4ZXXHeJ0YhT4dX3K7sER+cvP2dkPGdhT9FYHu3
Uj8ZmkIgvLoQ7s51ErPSBiXoJ+X53mcatQY/iLI7i7sdLkmCJqjKPbIaqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqZNTftnOtnvmRDVZryeiEAN1JzMB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZvi+HCv
Iygm0hPS5itV2seCsxYafAo3UpM05/ZfHAcBFzLIyxf13PupzLrNaG3M9xjT9vGL
CVxYZqGFFIZvp3uH8xB8fQE2YYPRyAIbAawYfRO8u8bzgCcNe7diqyLIfARreYtN
q+j4nPTsh/mDlQ5B4WE9DdVhHJu5ltqMYe6yvZbiDmKpj5k4vgUqSI+8gbvUl2f/
0c6viQwicAnFJ4W2eL+iAke3tuDk1feI+UWlur1VR86SuRxc9tqk/JDYkLP8cc6x
8cQEb3xR4qj2P/l9utj///TN4jv5uqjNpGCr4zHE7fieWDx/N1haOD9kZV1gFiFU
uoSOO9pVsrHCBw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:22 2026 by rpki-client