Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 2Zx7G4ZazyBxZo+azEl6wFggXov7ZNK9NSTN8heFbqc=
Subject key identifier: 98:E5:24:FD:3A:51:3A:15:25:FE:51:D7:BE:DD:76:D7:B3:FF:51:15
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019F9135C9CCB53FE926C285370AF73EFBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 23:00:49 +0000
Manifest this update: Thu 23 Jul 2026 23:00:49 +0000
Manifest next update: Fri 24 Jul 2026 23:00:49 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: YPjYJdppvJ-xVHyJ3v-XHJpuM2M.roa (hash: zURKZ3NvzQl2kZFa7NPOhYYc5nLxhkqpMkhOysGx3l0=)
4: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: dokUE9eNoXjueErAlw0Z/iuAZYhMxdEUCuT9hmxDAzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c9:cc:b5:3f:e9:26:c2:85:37:0a:f7:3e:fb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jul 23 23:00:49 2026 GMT
Not After : Jul 24 23:00:49 2026 GMT
Subject: CN=98e524fd3a513a1525fe51d7bedd76d7b3ff5115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:fc:ee:9f:8f:e9:04:8d:fc:75:76:e3:8c:
d4:b2:5c:1b:d0:92:4c:24:41:0d:57:ab:1a:e1:a6:
c3:7d:45:dd:7b:5c:97:06:05:08:8f:21:ed:64:32:
75:ec:64:87:dd:a4:7d:da:f5:4d:ec:6a:57:69:b7:
e5:86:32:fc:a7:37:11:33:3d:cb:a6:3c:e3:08:e8:
a0:25:8b:3a:94:11:38:8c:80:4c:ed:f4:a4:34:9d:
ac:03:c1:4c:a8:01:ed:7f:9e:e6:2e:84:2a:2e:39:
51:fd:97:1d:f0:61:fe:c1:78:d4:b9:ce:74:65:57:
44:e1:52:23:f7:37:b5:7d:45:95:d9:44:f9:2d:12:
2a:69:86:7b:a2:08:78:0b:05:0d:e0:65:2d:20:31:
6f:81:00:a0:09:39:7a:7f:ed:40:ad:83:3a:14:d4:
97:55:08:e3:a6:e9:2b:23:77:81:e9:66:1a:13:ae:
b2:93:c8:d4:02:e7:28:73:b6:80:2f:01:3e:d1:0e:
5f:69:c3:1a:88:de:b6:05:30:0b:1a:e0:fc:3a:3f:
9c:bf:c4:79:9e:ff:39:47:45:7e:5a:51:0f:a9:02:
70:e7:ef:be:4e:2d:c4:be:27:fe:89:b8:1d:dd:6d:
24:b0:60:2a:91:cb:d7:fe:5e:8f:eb:40:f4:92:a7:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:24:FD:3A:51:3A:15:25:FE:51:D7:BE:DD:76:D7:B3:FF:51:15
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8a:11:aa:c2:e7:f3:16:19:3c:5b:03:52:38:c9:af:e4:f2:
3c:ea:6b:3c:77:54:9e:cb:82:fa:a1:d1:5d:71:4c:8d:93:da:
07:70:84:cb:d5:12:72:bc:25:19:82:2e:70:ef:85:24:f0:40:
70:b1:17:4b:7e:fa:d0:e1:1f:37:1a:11:1d:93:43:2f:97:21:
a5:97:f1:49:30:37:02:16:68:ab:6a:62:6c:9b:0c:24:40:fd:
af:cf:87:72:85:bd:e2:97:d1:90:55:41:74:78:8f:7c:a6:4c:
d9:31:9d:0b:5d:6d:cb:e1:28:2d:c9:1e:d5:50:bf:ba:dd:5c:
92:43:58:c3:a6:d3:7c:7d:19:33:48:7f:7f:97:9b:5d:8a:6e:
7e:cf:98:e5:e4:b4:78:97:72:ed:51:de:1e:ac:62:97:ba:04:
ef:93:c2:37:58:92:21:4d:7a:86:32:d1:ee:35:d2:dc:66:af:
7d:da:39:4a:cc:40:ac:32:b0:da:c3:aa:f3:04:cc:f0:8e:2a:
d2:10:eb:cb:1d:c2:11:77:ed:58:20:b7:e7:0e:e5:90:d3:d1:
9f:a6:97:e9:3e:f4:b5:91:ec:3b:91:d8:9a:d3:e9:03:f4:b0:
cd:fa:7a:20:37:03:c9:e0:28:1f:9d:99:08:d7:2e:e0:1b:8a:
80:4b:6a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNcnMtT/pJsKFNwr3PvvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw
MTQxMmQwHhcNMjYwNzIzMjMwMDQ5WhcNMjYwNzI0MjMwMDQ5WjAzMTEwLwYDVQQD
Eyg5OGU1MjRmZDNhNTEzYTE1MjVmZTUxZDdiZWRkNzZkN2IzZmY1MTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWb87p+P6QSN/HV244zUslwb0JJM
JEENV6sa4abDfUXde1yXBgUIjyHtZDJ17GSH3aR92vVN7GpXabflhjL8pzcRMz3L
pjzjCOigJYs6lBE4jIBM7fSkNJ2sA8FMqAHtf57mLoQqLjlR/Zcd8GH+wXjUuc50
ZVdE4VIj9ze1fUWV2UT5LRIqaYZ7ogh4CwUN4GUtIDFvgQCgCTl6f+1ArYM6FNSX
VQjjpukrI3eB6WYaE66yk8jUAucoc7aALwE+0Q5facMaiN62BTALGuD8Oj+cv8R5
nv85R0V+WlEPqQJw5+++Ti3Evif+ibgd3W0ksGAqkcvX/l6P60D0kqdmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjlJP06UToVJf5R177ddtez/1EVMB8GA1UdIwQY
MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt
MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0
LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4oRqsLn
8xYZPFsDUjjJr+TyPOprPHdUnsuC+qHRXXFMjZPaB3CEy9UScrwlGYIucO+FJPBA
cLEXS3760OEfNxoRHZNDL5chpZfxSTA3AhZoq2pibJsMJED9r8+HcoW94pfRkFVB
dHiPfKZM2TGdC11ty+EoLcke1VC/ut1ckkNYw6bTfH0ZM0h/f5ebXYpufs+Y5eS0
eJdy7VHeHqxil7oE75PCN1iSIU16hjLR7jXS3Gavfdo5SsxArDKw2sOq8wTM8I4q
0hDryx3CEXftWCC35w7lkNPRn6aX6T70tZHsO5HYmtPpA/Swzfp6IDcDyeAoH52Z
CNcu4BuKgEtqYg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:13 2026 by rpki-client