
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: 0ZPMRkUqlusONVqJ3V3MhLBixm5Uhx7QUxxZYeUN1HA=
Subject key identifier: 18:2F:75:AA:59:E0:94:F7:0E:3F:FE:96:40:6F:FE:FF:62:2E:67:B7
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 019F92ED1D1DF317AD08F2339D1B8D8308DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 0144
Signing time: Fri 24 Jul 2026 07:00:40 +0000
Manifest this update: Fri 24 Jul 2026 07:00:40 +0000
Manifest next update: Sat 25 Jul 2026 07:00:40 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: LrF0GSwPJF+GdtxUxlohcSD3klH9Xi7GIqXI6BoEm8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:1d:1d:f3:17:ad:08:f2:33:9d:1b:8d:83:08:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Jul 24 07:00:40 2026 GMT
Not After : Jul 25 07:00:40 2026 GMT
Subject: CN=182f75aa59e094f70e3ffe96406ffeff622e67b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:5f:d7:d1:e3:1c:9a:3d:8d:48:c2:ad:1f:
b0:ab:47:1f:c7:54:10:e5:ec:38:72:80:3c:a9:a3:
ab:c3:bb:73:7f:0e:b6:75:43:93:36:51:ad:7e:29:
ea:1a:f5:28:11:ff:aa:c8:5c:18:c5:05:a6:a6:5a:
00:9d:d8:12:8e:02:b7:87:4c:d0:ef:8c:70:21:ae:
4e:11:cb:9e:63:5b:e2:f7:db:cf:6d:bd:64:5a:20:
0b:4e:ec:70:69:7c:0c:fd:bf:fa:ef:91:99:db:ba:
5a:43:bb:99:02:a6:b6:17:5d:93:8b:7a:39:53:48:
3f:6c:e7:88:74:2c:84:63:c8:48:5a:3e:74:a6:73:
9f:0e:d8:41:73:6f:2a:3e:7d:52:6d:f2:c3:f4:c4:
6f:b8:f4:0a:97:01:e2:e6:63:69:05:e4:a0:ce:19:
b1:3e:87:18:58:bc:fe:8d:8e:6b:ad:99:fb:c8:6e:
5e:74:18:8d:c6:71:10:1b:d9:31:56:16:41:1f:de:
5f:37:85:ac:df:17:cb:25:5f:67:78:3d:4a:0a:5f:
2f:be:7b:f8:96:84:53:68:27:2f:70:b7:85:53:e1:
b9:c3:cf:d5:e2:0a:1b:7d:8f:3a:56:b9:3b:08:c3:
7f:28:7d:bd:7f:97:e8:6a:9d:59:4f:69:a4:13:5b:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:75:AA:59:E0:94:F7:0E:3F:FE:96:40:6F:FE:FF:62:2E:67:B7
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:94:be:63:94:1a:28:d2:07:6c:6b:7b:db:e2:c5:0a:ec:61:
13:bb:43:e6:5a:ff:eb:1f:e9:15:7d:7b:3e:96:38:71:df:b3:
2f:2d:6f:42:b1:97:e9:58:a8:fa:bc:ef:47:65:7f:46:49:71:
20:71:f0:bb:28:b9:cf:ed:dc:65:70:4c:b7:b3:68:ec:5d:9b:
02:c1:64:4d:15:8e:54:e7:2a:6d:2d:9c:c5:e8:2f:41:f7:17:
f2:ec:86:8f:7d:93:fe:7f:61:78:84:42:36:9c:1b:f0:72:73:
45:60:1e:ac:9f:55:7d:07:dd:04:b8:4e:34:e2:44:0b:07:e9:
b1:a4:27:56:50:b5:e5:ce:1a:8f:b2:01:58:eb:68:da:2a:36:
30:c2:4f:3f:0a:84:65:cb:a1:33:1b:24:05:f1:9a:02:1d:c4:
23:f2:f3:80:2a:43:46:dc:fc:ed:61:9b:13:1f:07:3e:9c:f0:
34:db:f6:55:68:d3:a4:3d:16:c8:e7:25:96:f5:68:4b:f7:af:
a2:b4:de:c0:d2:c3:e9:cd:be:36:92:c9:95:8b:38:41:06:37:
b0:c9:33:2e:6c:0b:8d:e8:26:ff:3f:9c:2d:c7:bd:0c:fc:b9:
91:c3:a0:f2:54:5c:6d:2e:aa:d2:48:c1:79:7c:93:16:ac:cd:
6b:f0:3a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7R0d8xetCPIznRuNgwjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTk2NDg1ZTY3Mzk0OGQ1NTUwNWRiNzUxMGYzYjk1Nzdj
ZDNhZGIwHhcNMjYwNzI0MDcwMDQwWhcNMjYwNzI1MDcwMDQwWjAzMTEwLwYDVQQD
EygxODJmNzVhYTU5ZTA5NGY3MGUzZmZlOTY0MDZmZmVmZjYyMmU2N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufNf19HjHJo9jUjCrR+wq0cfx1QQ
5ew4coA8qaOrw7tzfw62dUOTNlGtfinqGvUoEf+qyFwYxQWmploAndgSjgK3h0zQ
74xwIa5OEcueY1vi99vPbb1kWiALTuxwaXwM/b/675GZ27paQ7uZAqa2F12Ti3o5
U0g/bOeIdCyEY8hIWj50pnOfDthBc28qPn1SbfLD9MRvuPQKlwHi5mNpBeSgzhmx
PocYWLz+jY5rrZn7yG5edBiNxnEQG9kxVhZBH95fN4Ws3xfLJV9neD1KCl8vvnv4
loRTaCcvcLeFU+G5w8/V4gobfY86Vrk7CMN/KH29f5foap1ZT2mkE1vxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgvdapZ4JT3Dj/+lkBv/v9iLme3MB8GA1UdIwQY
MBaAFMwZZIXmc5SNVVBdt1EPO5V3zTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xY2ZjZWItYjQwOS00ZTg5LWJjYjAt
MmZlMTRkZDM4ZDVkLzEvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xY2ZjZWItYjQwOS00ZTg5LWJjYjAtMmZlMTRkZDM4ZDVk
LzEvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5S+Y5Qa
KNIHbGt72+LFCuxhE7tD5lr/6x/pFX17PpY4cd+zLy1vQrGX6Vio+rzvR2V/Rklx
IHHwuyi5z+3cZXBMt7No7F2bAsFkTRWOVOcqbS2cxegvQfcX8uyGj32T/n9heIRC
Npwb8HJzRWAerJ9VfQfdBLhONOJECwfpsaQnVlC15c4aj7IBWOto2io2MMJPPwqE
ZcuhMxskBfGaAh3EI/LzgCpDRtz87WGbEx8HPpzwNNv2VWjTpD0WyOcllvVoS/ev
orTewNLD6c2+NpLJlYs4QQY3sMkzLmwLjegm/z+cLce9DPy5kcOg8lRcbS6q0kjB
eXyTFqzNa/A6eg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:10 2026 by rpki-client