Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: Okj4JbR1FbsMMdvGvv+77gIp7HsxxgjJXSeSJYT/aPE=
Subject key identifier: 06:EE:D2:A9:5D:A5:5E:73:9A:4F:42:57:67:4D:E0:00:A3:E6:89:19
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019F9022B1C450F384932EBD108CF04883DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0FBA
Signing time: Thu 23 Jul 2026 18:00:20 +0000
Manifest this update: Thu 23 Jul 2026 18:00:20 +0000
Manifest next update: Fri 24 Jul 2026 18:00:20 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: 7d3RECM3hcpYZtQtgwfKE9s1U4fw/xjGF4fnwSp8FjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b1:c4:50:f3:84:93:2e:bd:10:8c:f0:48:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Jul 23 18:00:20 2026 GMT
Not After : Jul 24 18:00:20 2026 GMT
Subject: CN=06eed2a95da55e739a4f4257674de000a3e68919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:b1:d4:7d:6e:04:b9:e1:9f:64:d7:98:94:
cd:62:ca:f2:d6:d9:ee:9e:47:53:8b:10:f9:1b:08:
37:68:a9:51:0b:b4:c5:5a:e7:4b:9b:44:07:8d:25:
b2:13:ac:a1:4f:da:10:11:14:8a:45:be:8f:28:36:
44:71:22:68:df:18:23:0b:15:9a:d7:7f:a5:07:ee:
0d:22:cf:40:35:45:60:ab:26:eb:0b:1d:d1:3c:b2:
cc:e3:63:b0:4c:f0:57:86:ea:bd:71:7e:51:7c:07:
9f:e5:6f:61:ff:d4:4c:6a:df:86:f7:2d:69:7a:98:
70:9d:ef:9a:ee:b4:0d:83:64:7d:08:67:f5:00:05:
c2:92:3a:2e:7f:25:10:62:97:22:02:3f:53:3d:7b:
a4:dd:25:d9:a0:0d:55:d5:55:81:2d:39:28:db:67:
6d:64:18:2e:ef:60:04:1b:23:20:f4:49:45:7c:6c:
70:4a:40:2e:b7:6c:ad:d5:63:ce:c8:bc:a9:24:6a:
ab:e3:50:44:4c:ca:0a:20:f8:20:ea:34:57:4b:d3:
29:7d:70:58:d7:2b:28:a3:c4:42:c7:ce:0c:e4:73:
0b:3c:10:45:75:56:22:8f:ae:cd:57:30:ab:40:96:
ac:06:40:dc:cf:ab:62:1a:c1:9e:3f:4a:41:62:92:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:D2:A9:5D:A5:5E:73:9A:4F:42:57:67:4D:E0:00:A3:E6:89:19
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f8:d0:84:fe:8f:ee:30:2a:13:21:e8:11:8b:cd:20:74:b7:
58:49:b5:87:a0:62:33:95:9b:be:70:cc:46:25:8a:57:54:55:
bb:3f:ca:80:d7:a5:c7:14:a7:5c:0c:34:52:c9:cc:ad:0d:49:
48:0c:e3:d9:23:68:81:d9:70:d5:6d:e9:fb:93:74:a1:32:18:
1e:fc:1d:52:2f:d4:7f:90:5c:b8:6c:d5:fc:9f:45:a4:88:37:
2d:dc:de:00:bc:ed:e1:86:14:a5:01:ac:05:de:75:80:01:c3:
98:39:c8:a7:a0:63:59:4e:be:c8:db:f4:cd:2f:20:50:87:68:
ea:b3:39:79:38:9d:f2:27:ef:0e:24:b1:a3:03:44:a6:2b:b7:
f3:13:bf:9a:b5:4c:d1:29:c9:3e:e6:11:5c:6d:91:76:21:48:
52:d7:0b:76:0f:d9:ec:e6:0c:87:17:d7:46:9b:b4:d3:7b:10:
4b:1f:67:12:c1:60:29:95:f2:23:15:15:25:f8:c4:55:f4:ac:
3e:a6:04:9d:de:e4:60:c9:c9:4e:d6:43:97:a8:4c:4b:97:0f:
f7:74:f2:c1:b3:e5:ba:f2:c1:90:0a:e4:55:f8:d0:15:0c:56:
14:07:c8:6b:b4:79:68:8e:97:16:9f:18:03:ce:f8:39:06:33:
c8:51:04:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIrHEUPOEky69EIzwSIPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw
YjI1MWUwHhcNMjYwNzIzMTgwMDIwWhcNMjYwNzI0MTgwMDIwWjAzMTEwLwYDVQQD
EygwNmVlZDJhOTVkYTU1ZTczOWE0ZjQyNTc2NzRkZTAwMGEzZTY4OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh86x1H1uBLnhn2TXmJTNYsry1tnu
nkdTixD5Gwg3aKlRC7TFWudLm0QHjSWyE6yhT9oQERSKRb6PKDZEcSJo3xgjCxWa
13+lB+4NIs9ANUVgqybrCx3RPLLM42OwTPBXhuq9cX5RfAef5W9h/9RMat+G9y1p
ephwne+a7rQNg2R9CGf1AAXCkjoufyUQYpciAj9TPXuk3SXZoA1V1VWBLTko22dt
ZBgu72AEGyMg9ElFfGxwSkAut2yt1WPOyLypJGqr41BETMoKIPgg6jRXS9MpfXBY
1ysoo8RCx84M5HMLPBBFdVYij67NVzCrQJasBkDcz6tiGsGeP0pBYpJMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbu0qldpV5zmk9CV2dN4ACj5okZMB8GA1UdIwQY
MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt
ZDEyYTM3MmY1MTczLzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz
LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/jQhP6P
7jAqEyHoEYvNIHS3WEm1h6BiM5WbvnDMRiWKV1RVuz/KgNelxxSnXAw0UsnMrQ1J
SAzj2SNogdlw1W3p+5N0oTIYHvwdUi/Uf5BcuGzV/J9FpIg3LdzeALzt4YYUpQGs
Bd51gAHDmDnIp6BjWU6+yNv0zS8gUIdo6rM5eTid8ifvDiSxowNEpiu38xO/mrVM
0SnJPuYRXG2RdiFIUtcLdg/Z7OYMhxfXRpu003sQSx9nEsFgKZXyIxUVJfjEVfSs
PqYEnd7kYMnJTtZDl6hMS5cP93TywbPluvLBkArkVfjQFQxWFAfIa7R5aI6XFp8Y
A874OQYzyFEEJA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:34 2026 by rpki-client