
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier: gbC0cXfL5veBBW25KDFOh3DTWKnqzKxYXDEfFLj6yy8=
Subject key identifier: A9:FD:9D:B1:EE:A7:05:FE:84:D2:7C:5E:6B:C8:31:72:4B:76:D6:B4
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019F91DA85ABD4145183F82A422E76EE67B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number: 0C7F
Signing time: Fri 24 Jul 2026 02:00:45 +0000
Manifest this update: Fri 24 Jul 2026 02:00:45 +0000
Manifest next update: Sat 25 Jul 2026 02:00:45 +0000
Files and hashes: 1: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (hash: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0=)
2: 0hivMId7QyV_J-baQe-LpP04A_E.roa (hash: 4wskR4bGB2kTBEPb3U0Ndo9Z+ReWqtwzIpeVVcyolq4=)
3: 3liIOmA8_MzwHDRpOza76XYxGX8.roa (hash: 0VbtTlqN/zF8S2L93cBspReEtFE2jCwwwra00rCr4eA=)
4: 50J8xvTiYpxoT6X5usI8sSXAWZ0.roa (hash: yA1b6VA0exwZuz0IlvIe7HYwnFg5lqsNlzVDXDKLzBw=)
5: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
6: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
7: BLbEGnHlodnp79q9soB7X47HKdw.roa (hash: YLxcybOGPbSncNQUcEA27OYyYsdtahC0bwUM37mtR0U=)
8: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
9: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (hash: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=)
10: HiGybCQrgCU74C3K9kUKpHH9zZQ.roa (hash: nkcGqh2n4Zm5vaAVnEmEq2XQg3rjj45cviXMx8VISgA=)
11: Mi6-kJejitGtkFnaqWaIX3eQ3T0.roa (hash: RAsSpkPrPAqPolBT2e7OtRuzkBZRgHN2KbesbZzlOaE=)
12: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
13: P3NM9F7zW9PDvGfr3vhVIZ_BZcI.roa (hash: wfcc44x6cQbOK7dLXERuK7syWTAjHm7zIjxXrF1DuMM=)
14: P7ZgWKI1Wrjsz9VU4DTzCLAgheI.roa (hash: x5YukDSUF+4txhRHDoxZY/oWruu1mketabTf55p1uXU=)
15: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
16: WnjMNOoY6brOweXu-pLZPaVVJzQ.roa (hash: MdTzlHQJr2I5Kjg59vASTes+r3NsVPRu6qYqfhvACdM=)
17: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
18: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
19: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: 6SKl+hokLv3PzTGebJJi0NcZCrNo2ptQ2QoStgAnGoA=)
20: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
21: eiNtmlsmUMa6zRYK5qPiJeLKg6o.roa (hash: dgK5LebTNQePeOm5jSOTTpBo0eqXraQUbEAnZP/scgM=)
22: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
23: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
24: lmDQ0YmBVfaXNR4aAq4_by6MxfA.roa (hash: FEBipsDe2kiHOpdSQ5fsMMhtl58TALl4PTqt07iBWG0=)
25: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
26: pekudB-GS791jIcMvSVfSHd23wg.roa (hash: DbQM/eRQQh33A2kfI+XDof5rUvSmYiexenR9YthzVQM=)
27: qnKJeyRMT8FkIzy6wwrV1UqBqxM.roa (hash: UthLu5Su6uHUcTNJVA5nqg+qmDyAEH5sRHIZusQp8pY=)
28: r5xSrq13TBSiblkLCkk6aKWkSPM.roa (hash: Jqrbgb6N2ntUjpORqhuL9e7bWx13rYWpNNGtwo5PVmQ=)
29: sOFTeRO-hEvEz03XddSu9rS_z4k.roa (hash: DiKwoNb9X/zQLBnY6pnHY+ePN4hGZioM1BHVpsEqw0o=)
30: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
31: zKXTRXAVa6681AZh0iZenUpGbYQ.roa (hash: 2eYIh4JNrDjETleZYYyV8v323dxtHY9QlIi6EQ3ZE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:85:ab:d4:14:51:83:f8:2a:42:2e:76:ee:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 24 02:00:45 2026 GMT
Not After : Jul 25 02:00:45 2026 GMT
Subject: CN=a9fd9db1eea705fe84d27c5e6bc831724b76d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:fb:ee:a2:80:8b:7e:dc:d7:04:5b:5b:70:
f1:71:ca:25:5b:3e:37:9c:51:06:17:d4:0c:c1:28:
63:cb:70:3c:70:83:05:f3:6e:73:7e:57:c7:00:18:
da:cc:c4:24:07:25:e7:bb:d3:42:83:e2:3b:69:33:
50:4c:74:7f:e1:ed:f8:54:a0:96:89:a0:0a:e9:51:
ae:b0:8e:b0:34:f2:76:ff:2d:8d:4a:2f:cc:4c:b9:
d0:ea:1d:10:2c:52:1c:70:3d:30:09:34:30:73:79:
c9:9b:8b:a4:fd:61:57:fc:c7:4b:62:99:4a:34:bb:
fb:99:85:14:7d:b6:9b:fd:05:85:6f:67:51:95:81:
ff:6e:8d:c6:37:d4:23:5c:cd:c4:46:11:7c:5e:fe:
9c:00:14:c8:f7:52:33:db:a6:27:58:52:7a:7a:f1:
56:bf:9a:2e:b5:42:0c:4f:2f:8b:55:1c:96:62:98:
0d:59:4a:fe:f6:c0:32:0c:60:49:7f:c0:ce:23:43:
c6:28:82:c4:20:a6:5d:3d:da:2b:bd:af:5e:6e:f8:
69:ec:20:40:e5:f3:08:aa:7d:cf:06:93:f3:32:b8:
f4:e3:b9:f0:51:03:8b:86:e2:a9:55:9a:f4:f2:42:
fa:5f:3c:19:ca:38:ec:81:90:4e:6c:71:ee:c0:7e:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:9D:B1:EE:A7:05:FE:84:D2:7C:5E:6B:C8:31:72:4B:76:D6:B4
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:07:e3:24:eb:0a:c0:0e:02:60:29:c3:9f:c5:fd:82:12:9c:
59:1a:5b:be:fb:ee:64:b3:81:b9:ab:be:01:32:a8:5a:29:43:
1d:fc:37:c0:ad:84:05:46:ad:4b:5b:2e:d8:68:29:34:ea:e8:
59:b5:b7:1a:ea:e5:19:d5:9e:81:4e:22:5e:78:d5:1d:97:57:
07:d1:bf:2a:ee:de:56:11:02:0f:da:45:34:c3:53:e3:9f:cc:
ad:31:e4:03:60:ad:6a:a0:2b:3c:f3:98:8e:75:a3:69:dd:9f:
9b:82:59:26:88:ac:91:99:3a:ed:55:64:c7:7e:8a:f7:fe:c1:
39:86:0d:71:bd:4f:4b:45:fd:d2:d3:28:7d:83:33:53:8c:34:
b5:bc:75:24:19:c2:4e:73:da:5f:a8:56:41:ee:11:9c:67:d0:
5e:43:37:41:06:e5:40:55:0e:c7:bc:85:35:76:ef:f7:4a:28:
0a:d3:12:09:bb:ff:0f:7a:b7:0d:98:f6:f3:f6:3d:79:89:68:
af:d6:b8:c9:22:dc:a1:3c:42:8d:e9:6a:d7:87:33:b7:f2:76:
17:d4:1a:fa:c6:48:35:b1:d9:63:05:f6:d1:e4:ad:93:ad:fd:
c7:57:6f:8d:12:c0:ca:05:01:79:18:6d:07:b0:e9:13:bc:c6:
e8:cc:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:41 2026 by rpki-client