Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: BtIX2e0YAL2foZqbmcZHPLFISQgL5BBRVEwJq1NEba4=
Subject key identifier: 1F:89:30:8D:C0:E8:45:45:44:D3:DC:88:45:DF:8A:19:06:14:F5:28
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019F957FED58899F8F2F87D1C075A5145949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 0168
Signing time: Fri 24 Jul 2026 19:00:16 +0000
Manifest this update: Fri 24 Jul 2026 19:00:16 +0000
Manifest next update: Sat 25 Jul 2026 19:00:16 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: /ur5QtVYOgf3qzeLE75m93W6tV2uFrnPow8N/J6ZNlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:ed:58:89:9f:8f:2f:87:d1:c0:75:a5:14:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Jul 24 19:00:16 2026 GMT
Not After : Jul 25 19:00:16 2026 GMT
Subject: CN=1f89308dc0e8454544d3dc8845df8a190614f528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:51:1b:2d:ae:bb:cd:90:ef:1c:2b:62:35:
87:d2:87:1d:1a:af:2f:61:54:ae:92:b5:20:63:63:
31:af:28:77:10:18:a2:7e:9c:59:c0:b1:53:d7:21:
ac:f0:46:5f:8c:79:4b:80:01:32:7d:6f:fc:40:f2:
75:d5:62:fc:ab:a5:79:2e:e9:06:bf:14:bb:d6:33:
c8:d1:c0:00:47:73:7e:db:16:0d:43:35:77:dd:28:
cb:19:5a:1b:3d:1e:89:d7:59:06:64:b5:ee:d9:90:
67:98:81:9a:7c:e9:e6:41:6f:34:7c:66:96:ca:db:
e7:f3:5b:c4:df:3d:2a:67:a8:b0:34:78:11:59:3a:
0a:49:f4:6e:e2:b8:52:45:6d:22:60:c7:7d:a6:db:
0e:ee:b3:0c:b3:90:d2:9c:2d:77:5a:13:70:0b:c9:
e7:ad:ae:0d:ba:65:94:7b:3f:98:40:65:5f:53:e9:
b6:dd:e0:98:19:c5:54:be:32:63:27:6f:0d:19:d1:
61:b5:d7:72:9a:8f:10:55:bc:c9:29:81:1d:32:a0:
fc:f3:39:87:8a:91:68:cb:3a:0b:13:48:72:ff:b6:
89:bd:79:9d:4f:86:a1:25:24:64:fd:fc:c3:b3:d0:
d7:0d:1a:71:33:bb:21:de:08:50:27:05:35:ea:87:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:30:8D:C0:E8:45:45:44:D3:DC:88:45:DF:8A:19:06:14:F5:28
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:0e:13:16:12:ae:1d:38:10:d1:4d:69:57:cb:fc:65:be:
82:f0:a5:3b:c1:67:e6:4a:b7:d1:52:d2:9e:7b:12:13:ba:c2:
ae:ec:50:b0:3d:04:3e:b4:6b:a3:9f:d5:eb:30:2c:9c:7a:40:
69:8f:71:01:6c:38:3c:63:e0:9a:22:8b:1c:15:e1:b0:8c:fb:
a7:b9:36:ee:17:c9:b5:de:b6:ca:47:cc:0e:13:07:a3:28:a8:
3b:e4:9a:a2:c4:0d:81:bc:dc:c2:44:00:ea:72:86:62:f9:b5:
7f:95:2a:56:17:8d:0d:9b:e2:47:8a:9a:bb:ec:2d:58:ef:1d:
dd:7a:4d:13:1c:19:b6:29:b7:78:80:4e:6f:dc:ff:b9:77:66:
d8:55:c9:3c:d5:89:13:fc:6a:ef:f9:32:6d:5c:d0:0f:15:cc:
3b:ca:3f:91:ca:e1:5e:5a:c9:fd:55:d7:54:77:b6:a8:07:a7:
1b:88:5b:25:e3:6e:98:5d:f1:4f:9a:d0:57:cb:f0:a9:d2:89:
08:18:fe:6d:6c:9b:7e:1a:ae:68:7e:a0:b5:fc:1c:b4:4d:94:
7e:20:ba:8c:a0:07:1a:0b:6b:5b:6a:d8:93:8a:03:b8:13:cd:
92:52:3a:9a:e7:51:78:2b:fb:62:7a:86:d9:73:c5:ad:fb:f4:
9b:36:3e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vf+1YiZ+PL4fRwHWlFFlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTAxMDEzODhiN2NlMzc4NzA3OTkzYTA1NzZhYTNkZGQ5
NWE5NzkwHhcNMjYwNzI0MTkwMDE2WhcNMjYwNzI1MTkwMDE2WjAzMTEwLwYDVQQD
EygxZjg5MzA4ZGMwZTg0NTQ1NDRkM2RjODg0NWRmOGExOTA2MTRmNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06dRGy2uu82Q7xwrYjWH0ocdGq8v
YVSukrUgY2Mxryh3EBiifpxZwLFT1yGs8EZfjHlLgAEyfW/8QPJ11WL8q6V5LukG
vxS71jPI0cAAR3N+2xYNQzV33SjLGVobPR6J11kGZLXu2ZBnmIGafOnmQW80fGaW
ytvn81vE3z0qZ6iwNHgRWToKSfRu4rhSRW0iYMd9ptsO7rMMs5DSnC13WhNwC8nn
ra4NumWUez+YQGVfU+m23eCYGcVUvjJjJ28NGdFhtddymo8QVbzJKYEdMqD88zmH
ipFoyzoLE0hy/7aJvXmdT4ahJSRk/fzDs9DXDRpxM7sh3ghQJwU16odshQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+JMI3A6EVFRNPciEXfihkGFPUoMB8GA1UdIwQY
MBaAFM4QEBOIt843hweZOgV2qj3dlal5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhBUUU0aTN6amVIQjVrNkJYYXFQZDJWcVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGM1NmItNjdlZi00MDA3LTkwNWYt
ZGEzYzI2N2EyNTI4LzEvemhBUUU0aTN6amVIQjVrNkJYYXFQZDJWcVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMGM1NmItNjdlZi00MDA3LTkwNWYtZGEzYzI2N2EyNTI4
LzEvemhBUUU0aTN6amVIQjVrNkJYYXFQZDJWcVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZAOExYS
rh04ENFNaVfL/GW+gvClO8Fn5kq30VLSnnsSE7rCruxQsD0EPrRro5/V6zAsnHpA
aY9xAWw4PGPgmiKLHBXhsIz7p7k27hfJtd62ykfMDhMHoyioO+SaosQNgbzcwkQA
6nKGYvm1f5UqVheNDZviR4qau+wtWO8d3XpNExwZtim3eIBOb9z/uXdm2FXJPNWJ
E/xq7/kybVzQDxXMO8o/kcrhXlrJ/VXXVHe2qAenG4hbJeNumF3xT5rQV8vwqdKJ
CBj+bWybfhquaH6gtfwctE2UfiC6jKAHGgtrW2rYk4oDuBPNklI6mudReCv7YnqG
2XPFrfv0mzY+jQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:32 2026 by rpki-client