Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: OQRbloSrGuchCA3Pr2aYyLRLlyatFl3rwwMw68EY4/s=
Subject key identifier: 11:DD:FD:15:6E:5D:C4:EA:9D:86:C1:7F:90:4C:F8:5E:EF:DC:F1:70
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019F958077A7337D74BCF37389AAE65DA566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 094B
Signing time: Fri 24 Jul 2026 19:00:52 +0000
Manifest this update: Fri 24 Jul 2026 19:00:52 +0000
Manifest next update: Sat 25 Jul 2026 19:00:52 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: rV4LVq4Jf9iqgGwqJHwV3rFWRomcz5vtlRPArFLik2Q=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:77:a7:33:7d:74:bc:f3:73:89:aa:e6:5d:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Jul 24 19:00:52 2026 GMT
Not After : Jul 25 19:00:52 2026 GMT
Subject: CN=11ddfd156e5dc4ea9d86c17f904cf85eefdcf170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:36:28:a0:63:5c:23:39:d9:24:aa:40:61:
d0:4e:ed:53:d4:7d:a3:7f:00:91:f7:64:da:2a:4b:
03:45:75:99:83:c9:a1:62:11:c6:6a:c2:65:bd:56:
c8:88:9c:bc:32:9d:15:b2:54:5c:59:40:1b:1d:8d:
0c:f8:c3:50:bd:dd:67:24:df:36:0b:ef:97:53:da:
9b:4f:af:e5:4a:ed:0b:ce:cc:fc:dd:66:92:ef:85:
7e:6e:5c:0f:01:f6:80:28:0d:7b:dd:51:32:fc:d9:
2f:1c:bf:f0:ec:08:b9:6d:a1:8e:58:44:ae:ad:f8:
09:e1:4d:e3:ec:cb:18:fb:d3:b7:a2:21:fb:15:e0:
12:09:2c:c5:54:8e:b2:1e:e2:12:19:dd:8c:02:46:
99:e2:f2:92:7e:df:bf:f0:a9:43:5f:f5:9f:b0:ed:
85:db:05:27:d1:33:06:e0:e7:29:91:07:48:00:38:
e4:d1:32:1f:9c:90:a3:d7:c5:ef:41:1b:b0:41:c1:
62:22:af:25:f3:f9:f2:8c:63:ab:37:15:4f:dd:b9:
68:5d:20:d8:cb:cb:bb:f9:49:9e:86:d6:7d:2b:49:
9d:0a:72:e5:7c:26:7e:d0:e7:23:79:9a:46:71:55:
b4:eb:7f:ce:2f:38:05:dc:4f:90:d9:06:b2:da:79:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:FD:15:6E:5D:C4:EA:9D:86:C1:7F:90:4C:F8:5E:EF:DC:F1:70
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:de:80:cb:d3:ed:79:df:bf:0e:28:43:ae:bd:81:b4:75:2e:
13:4a:f9:2a:dd:fe:f4:33:1d:9e:9e:de:9a:1d:83:5a:56:ed:
ec:d0:0a:df:8f:3c:63:63:10:ba:c9:20:c9:c9:98:d3:9a:44:
3a:b2:b0:47:1b:b4:92:9d:8b:07:05:76:0d:c1:89:d9:24:52:
01:4d:1d:9f:93:4d:c9:e9:dd:b9:8b:46:1d:92:b6:e6:a9:0b:
5c:31:6c:5c:d9:2d:3d:23:39:d1:b9:9d:8b:de:d5:36:a1:65:
57:d2:d1:c7:d4:b9:c7:c5:66:cc:aa:1b:a9:ab:82:e6:25:0a:
9f:c6:bb:3b:93:20:40:2e:f8:47:80:48:45:c6:ad:13:5d:b7:
33:2f:61:06:75:07:f9:f0:b0:d7:8d:8d:e8:67:0e:d9:b3:7a:
37:64:4f:47:c5:4a:67:df:64:45:32:30:8c:03:2e:d9:ab:38:
c2:da:3d:43:d7:d0:b4:95:54:f7:dc:06:e7:d2:bb:9b:b1:06:
1c:74:f3:71:10:19:f7:9d:81:40:cf:38:11:8c:00:4c:99:ec:
64:f2:78:ec:48:c4:4b:60:bd:48:a3:c1:0f:e3:df:fd:e1:56:
c1:52:7d:f0:b2:bf:6c:24:55:df:4a:b6:d9:5a:bb:4c:86:35:
0f:fb:4f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgHenM310vPNziarmXaVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3
OTEyNDQwHhcNMjYwNzI0MTkwMDUyWhcNMjYwNzI1MTkwMDUyWjAzMTEwLwYDVQQD
EygxMWRkZmQxNTZlNWRjNGVhOWQ4NmMxN2Y5MDRjZjg1ZWVmZGNmMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQY2KKBjXCM52SSqQGHQTu1T1H2j
fwCR92TaKksDRXWZg8mhYhHGasJlvVbIiJy8Mp0VslRcWUAbHY0M+MNQvd1nJN82
C++XU9qbT6/lSu0Lzsz83WaS74V+blwPAfaAKA173VEy/NkvHL/w7Ai5baGOWESu
rfgJ4U3j7MsY+9O3oiH7FeASCSzFVI6yHuISGd2MAkaZ4vKSft+/8KlDX/WfsO2F
2wUn0TMG4OcpkQdIADjk0TIfnJCj18XvQRuwQcFiIq8l8/nyjGOrNxVP3bloXSDY
y8u7+UmehtZ9K0mdCnLlfCZ+0OcjeZpGcVW063/OLzgF3E+Q2Qay2nnPxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHd/RVuXcTqnYbBf5BM+F7v3PFwMB8GA1UdIwQY
MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt
YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh
LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXN6Ay9Pt
ed+/DihDrr2BtHUuE0r5Kt3+9DMdnp7emh2DWlbt7NAK3488Y2MQuskgycmY05pE
OrKwRxu0kp2LBwV2DcGJ2SRSAU0dn5NNyenduYtGHZK25qkLXDFsXNktPSM50bmd
i97VNqFlV9LRx9S5x8VmzKobqauC5iUKn8a7O5MgQC74R4BIRcatE123My9hBnUH
+fCw142N6GcO2bN6N2RPR8VKZ99kRTIwjAMu2as4wto9Q9fQtJVU99wG59K7m7EG
HHTzcRAZ952BQM84EYwATJnsZPJ47EjES2C9SKPBD+Pf/eFWwVJ98LK/bCRV30q2
2Vq7TIY1D/tP1Q==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:30 2026 by rpki-client