Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
File: zxMebPBAsKlffsLJPjJqYQh9jG8.mft (raw, json)
Hash identifier: 7i/rtoE2c2sRTuQsbkxB2xyRoqzlmJRfr3M0s55Em2o=
Subject key identifier: AD:42:FD:E4:EA:C3:8B:2D:D6:97:5B:41:A0:DB:F7:1A:22:17:39:B5
Authority key identifier: CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
Certificate issuer: /CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Certificate serial: 019F935AC26C342AC94D79238BFBD2992F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:26 +0000
Manifest this update: Fri 24 Jul 2026 09:00:26 +0000
Manifest next update: Sat 25 Jul 2026 09:00:26 +0000
Files and hashes: 1: vuq6nmS2o2IaE2-cQCXY0v0dkjM.roa (hash: /QlR6UrnyGXIfWBFiHE7gFFLbMr1qU25LazaUkwU8DA=)
2: zxMebPBAsKlffsLJPjJqYQh9jG8.crl (hash: SIet5551doTJNS9DvRy1cDhYNUFd3PdSseOdO9fEHJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:c2:6c:34:2a:c9:4d:79:23:8b:fb:d2:99:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf131e6cf040b0a95f7ec2c93e326a61087d8c6f
Validity
Not Before: Jul 24 09:00:26 2026 GMT
Not After : Jul 25 09:00:26 2026 GMT
Subject: CN=ad42fde4eac38b2dd6975b41a0dbf71a221739b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:dd:ec:ac:e1:85:46:92:0f:d9:df:f2:5e:
ca:ca:19:b3:cd:e4:98:d3:40:8a:e6:42:cb:81:e0:
91:3e:4c:84:f5:c6:1b:ca:4b:0c:13:b1:7b:0e:73:
29:32:61:4e:d1:4b:0c:02:98:7b:6e:38:25:9d:93:
fa:8d:af:41:9b:02:5a:53:bd:6a:94:58:01:63:da:
ac:72:c8:7b:ed:db:97:01:9c:9d:39:db:fe:0e:c1:
7e:06:31:b8:b2:8b:76:6f:45:9a:12:98:96:e8:5d:
27:5e:51:30:4c:4e:e0:20:c4:f5:48:83:14:72:81:
94:02:f3:d2:43:f7:0b:13:6e:d4:24:a9:8a:53:6f:
ac:7f:b1:56:d0:38:b0:4f:d4:8b:10:a8:b2:2c:33:
dd:6d:06:dc:d7:e9:d9:02:5f:39:42:d1:37:3e:d9:
6c:d1:d0:84:49:e4:9c:ac:77:d4:e1:5b:c8:07:a9:
44:30:3f:ff:00:6d:26:43:75:d6:c7:4a:dd:5c:4b:
6a:06:d8:33:9d:85:90:99:da:b1:66:b5:9a:31:72:
92:53:46:a8:d1:72:0c:ad:65:89:b9:11:17:a8:91:
ff:e3:51:3a:37:0a:9d:90:21:e0:e7:1c:08:a3:ba:
5e:ce:7a:7e:ba:f5:7d:86:55:6b:51:be:cd:b1:c6:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:FD:E4:EA:C3:8B:2D:D6:97:5B:41:A0:DB:F7:1A:22:17:39:B5
X509v3 Authority Key Identifier:
keyid:CF:13:1E:6C:F0:40:B0:A9:5F:7E:C2:C9:3E:32:6A:61:08:7D:8C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxMebPBAsKlffsLJPjJqYQh9jG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/zxMebPBAsKlffsLJPjJqYQh9jG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d3:ab:da:c7:a6:76:d8:ff:db:b6:b0:14:8d:89:c2:b9:6e:
89:c7:62:1d:cf:cf:ea:54:2c:1d:12:55:32:d5:f6:5b:08:0d:
09:3f:83:83:03:25:ec:50:0e:fe:c2:ea:0f:e9:c5:4b:12:71:
6c:ad:2c:87:a8:f0:8c:33:c1:33:44:ef:72:ee:89:c2:e9:ed:
ad:5a:bd:4f:af:29:79:24:0a:49:5e:86:e6:5d:91:4a:99:7b:
9f:e3:f5:2b:c1:c2:c9:4c:91:f1:4d:86:0b:0f:b1:9b:38:9d:
f5:8c:af:a0:fe:96:dc:6c:e4:58:44:32:a3:8b:1c:99:70:c1:
26:04:03:11:1c:d3:3e:26:6a:f7:04:35:4e:cd:28:7b:23:f8:
b4:08:4d:b2:d0:ba:e2:eb:c7:9e:92:e4:b8:b2:bf:99:f3:be:
35:dd:7e:6c:34:99:d4:b2:8b:32:15:6e:56:a6:c9:8e:da:25:
e9:0e:92:9b:8d:66:51:b7:a6:41:65:13:60:54:42:01:70:8f:
2b:2a:36:d2:48:57:59:3f:39:52:cd:0d:62:cf:5b:f3:f7:f9:
77:b9:5a:8a:6b:4c:ce:c5:a1:4c:20:46:78:a0:5b:2b:9e:00:
26:b6:01:0e:7a:f3:8b:b3:f2:cf:72:8c:c0:45:de:9d:4b:24:
b3:f2:f0:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWsJsNCrJTXkji/vSmS+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTMxZTZjZjA0MGIwYTk1ZjdlYzJjOTNlMzI2YTYxMDg3
ZDhjNmYwHhcNMjYwNzI0MDkwMDI2WhcNMjYwNzI1MDkwMDI2WjAzMTEwLwYDVQQD
EyhhZDQyZmRlNGVhYzM4YjJkZDY5NzViNDFhMGRiZjcxYTIyMTczOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bHd7KzhhUaSD9nf8l7KyhmzzeSY
00CK5kLLgeCRPkyE9cYbyksME7F7DnMpMmFO0UsMAph7bjglnZP6ja9BmwJaU71q
lFgBY9qscsh77duXAZydOdv+DsF+BjG4sot2b0WaEpiW6F0nXlEwTE7gIMT1SIMU
coGUAvPSQ/cLE27UJKmKU2+sf7FW0DiwT9SLEKiyLDPdbQbc1+nZAl85QtE3Ptls
0dCESeScrHfU4VvIB6lEMD//AG0mQ3XWx0rdXEtqBtgznYWQmdqxZrWaMXKSU0ao
0XIMrWWJuREXqJH/41E6NwqdkCHg5xwIo7peznp+uvV9hlVrUb7Nsca3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1C/eTqw4st1pdbQaDb9xoiFzm1MB8GA1UdIwQY
MBaAFM8THmzwQLCpX37CyT4yamEIfYxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhNZWJQQkFzS2xmZnNMSlBqSnFZUWg5akc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQt
MTQ3MTc3YjgzN2RlLzEvenhNZWJQQkFzS2xmZnNMSlBqSnFZUWg5akc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQtMTQ3MTc3YjgzN2Rl
LzEvenhNZWJQQkFzS2xmZnNMSlBqSnFZUWg5akc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0NOr2sem
dtj/27awFI2JwrluicdiHc/P6lQsHRJVMtX2WwgNCT+DgwMl7FAO/sLqD+nFSxJx
bK0sh6jwjDPBM0Tvcu6JwuntrVq9T68peSQKSV6G5l2RSpl7n+P1K8HCyUyR8U2G
Cw+xmzid9YyvoP6W3GzkWEQyo4scmXDBJgQDERzTPiZq9wQ1Ts0oeyP4tAhNstC6
4uvHnpLkuLK/mfO+Nd1+bDSZ1LKLMhVuVqbJjtol6Q6Sm41mUbemQWUTYFRCAXCP
Kyo20khXWT85Us0NYs9b8/f5d7laimtMzsWhTCBGeKBbK54AJrYBDnrzi7Pyz3KM
wEXenUsks/Lw+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:22:15 2026 by rpki-client