Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: IfnsE18pCUv/xf7l7lMiHWLAYsLgmPt9Lsduq9lLISw=
Subject key identifier: 6C:4C:AC:6B:38:B1:93:36:7B:40:2F:07:AC:B8:2D:0F:D1:DA:C8:D2
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 019F9323A4C8B9847171267EBDD32108DCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 06D5
Signing time: Fri 24 Jul 2026 08:00:14 +0000
Manifest this update: Fri 24 Jul 2026 08:00:14 +0000
Manifest next update: Sat 25 Jul 2026 08:00:14 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: XYYYYJEjr7MazfAxvrleImQXhojHqslwjKiszDhz/1o=)
2: aQ9gfy4fYC0VC08rI5UWZXPKETo.roa (hash: 3nT5m1pplYfTGimm9tivPlp5Ti9zXf+dDwmifgJXGYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:a4:c8:b9:84:71:71:26:7e:bd:d3:21:08:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Jul 24 08:00:14 2026 GMT
Not After : Jul 25 08:00:14 2026 GMT
Subject: CN=6c4cac6b38b193367b402f07acb82d0fd1dac8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:39:69:e2:f7:99:03:58:47:71:1f:3a:d7:
89:45:b9:cc:5e:d5:05:96:4d:f1:43:d3:ce:7f:08:
a3:24:b9:95:92:d5:0e:66:d0:3f:e2:e1:fa:4e:bf:
c5:9f:0f:dd:38:8e:6d:51:67:46:d2:15:7e:92:01:
31:2e:cd:83:b1:73:9a:79:b9:33:cc:fb:cb:67:bd:
1f:a8:1b:99:19:49:3f:d9:e0:22:36:f3:3b:cf:cf:
4b:f4:61:f1:28:62:ac:b7:91:f4:e4:54:a2:da:18:
e2:79:87:25:e1:e8:67:74:ce:50:87:26:ff:ec:73:
f2:42:ae:2b:01:4e:67:2b:32:66:64:ab:cd:ee:e4:
96:a8:36:ab:af:75:8a:16:a7:15:ab:ea:78:8e:c0:
26:10:81:ca:17:d3:cb:70:d3:fd:53:1b:4f:13:0e:
cc:95:7b:7c:26:11:58:ce:47:b1:24:53:e2:17:b2:
36:98:3b:f9:25:ce:f7:01:84:98:b7:32:d6:48:f1:
46:35:95:86:7f:e9:c0:1b:26:ab:a2:62:ca:d9:2b:
5d:2b:a2:7e:67:8e:03:0f:22:d6:84:20:3a:8c:7c:
14:a4:99:44:9a:b2:27:2a:2a:c6:7a:53:08:7e:3a:
c7:aa:ab:30:cc:8b:cd:e4:ba:2a:fd:14:2f:47:ea:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4C:AC:6B:38:B1:93:36:7B:40:2F:07:AC:B8:2D:0F:D1:DA:C8:D2
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9a:86:f7:05:f7:e9:31:e2:fa:9f:c3:a3:89:07:13:03:88:
af:61:80:42:ca:38:aa:a9:c9:09:8d:d0:09:a2:a0:9f:f9:53:
2b:5e:0f:60:61:a9:17:65:68:b0:5c:20:d9:b3:37:92:0b:7e:
60:21:36:41:c9:db:b2:02:a6:42:29:97:bd:77:38:d2:1f:6f:
08:10:f5:0d:0a:48:5a:ee:86:62:fc:57:47:fc:6c:d5:b3:f1:
35:6f:75:57:19:00:fb:a1:17:09:7f:76:44:d7:36:c9:86:7d:
57:dc:aa:49:03:a3:af:84:86:2e:ea:e8:b1:4c:64:fa:72:51:
ed:c7:4c:6b:75:de:c1:22:81:95:25:ff:07:b9:43:61:42:13:
49:a4:0d:b1:18:8d:bc:59:27:fd:a8:82:93:c8:0c:d8:d0:ac:
6f:9e:7b:a3:b1:cc:3e:b3:e5:2a:b4:32:9b:fb:78:23:35:5e:
4d:9d:e2:f3:e3:41:da:db:14:c4:ea:7c:07:3e:ab:a3:8c:87:
b7:f1:eb:39:35:f1:d9:e2:51:a3:d2:42:20:f6:41:6f:a2:b0:
ff:12:b2:4f:05:dc:f8:3f:bf:56:a5:d8:56:23:0c:e9:dc:e3:
32:62:57:0b:02:2f:dd:c1:a5:c1:14:d5:0c:3a:d3:2d:59:01:
a3:50:7b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI6TIuYRxcSZ+vdMhCNzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2
N2VlZmEwHhcNMjYwNzI0MDgwMDE0WhcNMjYwNzI1MDgwMDE0WjAzMTEwLwYDVQQD
Eyg2YzRjYWM2YjM4YjE5MzM2N2I0MDJmMDdhY2I4MmQwZmQxZGFjOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7U5aeL3mQNYR3EfOteJRbnMXtUF
lk3xQ9POfwijJLmVktUOZtA/4uH6Tr/Fnw/dOI5tUWdG0hV+kgExLs2DsXOaebkz
zPvLZ70fqBuZGUk/2eAiNvM7z89L9GHxKGKst5H05FSi2hjieYcl4ehndM5Qhyb/
7HPyQq4rAU5nKzJmZKvN7uSWqDarr3WKFqcVq+p4jsAmEIHKF9PLcNP9UxtPEw7M
lXt8JhFYzkexJFPiF7I2mDv5Jc73AYSYtzLWSPFGNZWGf+nAGyaromLK2StdK6J+
Z44DDyLWhCA6jHwUpJlEmrInKirGelMIfjrHqqswzIvN5Loq/RQvR+qeuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxMrGs4sZM2e0AvB6y4LQ/R2sjSMB8GA1UdIwQY
MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt
YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4
LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpqG9wX3
6THi+p/Do4kHEwOIr2GAQso4qqnJCY3QCaKgn/lTK14PYGGpF2VosFwg2bM3kgt+
YCE2QcnbsgKmQimXvXc40h9vCBD1DQpIWu6GYvxXR/xs1bPxNW91VxkA+6EXCX92
RNc2yYZ9V9yqSQOjr4SGLurosUxk+nJR7cdMa3XewSKBlSX/B7lDYUITSaQNsRiN
vFkn/aiCk8gM2NCsb557o7HMPrPlKrQym/t4IzVeTZ3i8+NB2tsUxOp8Bz6ro4yH
t/HrOTXx2eJRo9JCIPZBb6Kw/xKyTwXc+D+/VqXYViMM6dzjMmJXCwIv3cGlwRTV
DDrTLVkBo1B7+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:40 2026 by rpki-client