Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: 0Gf5W9dA+qSYgxnlGMJbGkgSUGgMaTYikbkvohTmwFg=
Subject key identifier: F4:53:8E:4D:4D:EB:76:6A:A4:57:54:74:19:06:B7:7C:DD:1C:77:08
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 019F91356302AD71A9345F6F1EE60B41879C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 15F9
Signing time: Thu 23 Jul 2026 23:00:22 +0000
Manifest this update: Thu 23 Jul 2026 23:00:22 +0000
Manifest next update: Fri 24 Jul 2026 23:00:22 +0000
Files and hashes: 1: EsvahZdQZVhluZsLSr98J_sMDK4.roa (hash: DNS5SQ17LOTRnwWYUw1eb+IWwNLBZu1qV/4r+8SuduY=)
2: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: 5+jdAW5HS5iyUq1/36IUs7LlCZUIZq/tuUM5HBnyvTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:63:02:ad:71:a9:34:5f:6f:1e:e6:0b:41:87:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Jul 23 23:00:22 2026 GMT
Not After : Jul 24 23:00:22 2026 GMT
Subject: CN=f4538e4d4deb766aa45754741906b77cdd1c7708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:2f:ad:60:ff:ff:cd:22:4b:de:35:ff:0f:
35:1a:6c:a5:e5:ba:82:fd:e0:7d:8e:15:91:fb:30:
78:e4:a1:1b:34:09:dd:17:e8:e3:19:26:cb:4a:30:
83:64:49:3e:c4:43:db:88:c4:52:09:a5:52:ca:be:
3d:39:e1:d2:db:3b:9d:ec:38:68:5b:25:c7:72:2e:
61:14:f0:b6:ca:21:ed:14:e8:b6:b1:9b:59:48:53:
5d:8d:9d:6d:4f:ed:e4:f5:72:54:09:7a:8f:d3:3b:
64:eb:85:c5:1b:8e:99:94:9e:e0:6f:2a:c5:d8:96:
fd:96:3c:b2:39:d7:21:4d:3e:95:9d:7b:15:ec:c6:
d9:5f:a6:78:7a:79:b0:e0:9d:35:55:29:e1:9a:b5:
61:35:7a:7b:88:7f:11:5e:98:23:eb:87:46:65:e0:
45:ec:6d:21:19:69:9c:f2:05:18:59:69:4a:3d:df:
4c:f8:fa:e2:0b:2b:c3:9f:a3:b6:0e:92:38:d8:25:
ae:66:6c:7d:3f:b2:86:1a:70:bb:c4:22:2e:5e:88:
cf:b6:98:5f:a8:9c:75:77:24:74:00:3f:64:1d:ee:
25:5e:c5:d4:1e:55:ca:a6:a2:32:b3:b8:7c:9f:12:
c2:e6:ef:71:0b:44:3a:1b:cf:e3:01:80:c2:d2:fb:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:53:8E:4D:4D:EB:76:6A:A4:57:54:74:19:06:B7:7C:DD:1C:77:08
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:3c:26:43:78:52:f8:70:6a:c2:75:e0:0d:04:f2:9c:2f:
a7:4d:fb:84:e9:5a:a3:77:90:7b:44:5f:b2:a4:10:f0:c1:1a:
7c:3e:e8:96:50:11:62:d5:46:d4:45:99:eb:ec:0b:26:24:25:
37:66:ea:49:ac:d8:56:b6:8d:16:a9:17:33:76:a7:a2:17:00:
c0:44:31:a1:32:7e:50:a1:5a:55:65:05:6e:cf:4a:34:45:bf:
79:23:cf:b6:3e:20:a4:17:56:65:28:82:58:24:17:c3:13:c9:
8a:3d:2c:92:bb:b0:69:2f:dc:36:16:80:25:b9:19:cd:aa:7c:
4c:aa:93:20:2b:a7:1f:4c:cf:03:23:59:8e:59:f5:f5:45:4a:
7e:41:76:14:bc:54:a1:d2:09:4b:de:08:af:a0:c2:a4:62:81:
31:c5:16:81:de:cc:af:50:d6:33:9b:75:80:83:f6:0e:c3:18:
a6:60:dd:be:14:8f:38:2e:1c:ae:49:86:df:62:c7:1c:08:b2:
30:05:cc:c4:d4:c0:7f:82:93:f6:a7:b3:54:eb:15:73:15:61:
19:e8:1d:02:14:03:d5:74:8f:0f:db:70:d0:20:9a:6d:73:7a:
69:8c:f3:f2:d5:b2:98:77:8e:5b:df:c7:5e:b8:aa:50:c5:0e:
a3:ec:56:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNWMCrXGpNF9vHuYLQYecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTdhNmNkNTgzODE0ZDM5M2JlZTI2MzViNTQ1NTc0Y2M3
NTYyMGMwHhcNMjYwNzIzMjMwMDIyWhcNMjYwNzI0MjMwMDIyWjAzMTEwLwYDVQQD
EyhmNDUzOGU0ZDRkZWI3NjZhYTQ1NzU0NzQxOTA2Yjc3Y2RkMWM3NzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHcvrWD//80iS941/w81Gmyl5bqC
/eB9jhWR+zB45KEbNAndF+jjGSbLSjCDZEk+xEPbiMRSCaVSyr49OeHS2zud7Dho
WyXHci5hFPC2yiHtFOi2sZtZSFNdjZ1tT+3k9XJUCXqP0ztk64XFG46ZlJ7gbyrF
2Jb9ljyyOdchTT6VnXsV7MbZX6Z4enmw4J01VSnhmrVhNXp7iH8RXpgj64dGZeBF
7G0hGWmc8gUYWWlKPd9M+PriCyvDn6O2DpI42CWuZmx9P7KGGnC7xCIuXojPtphf
qJx1dyR0AD9kHe4lXsXUHlXKpqIys7h8nxLC5u9xC0Q6G8/jAYDC0vtYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRTjk1N63ZqpFdUdBkGt3zdHHcIMB8GA1UdIwQY
MBaAFGSnps1YOBTTk77iY1tUVXTMdWIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktlbXpWZzRGTk9UdnVKalcxUlZkTXgxWWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZDZmMWEtZDMzNC00MThmLWI3MjYt
NmY1ZDhhNzRhMGU0LzEvWktlbXpWZzRGTk9UdnVKalcxUlZkTXgxWWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84ZDZmMWEtZDMzNC00MThmLWI3MjYtNmY1ZDhhNzRhMGU0
LzEvWktlbXpWZzRGTk9UdnVKalcxUlZkTXgxWWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtk8JkN4
UvhwasJ14A0E8pwvp037hOlao3eQe0RfsqQQ8MEafD7ollARYtVG1EWZ6+wLJiQl
N2bqSazYVraNFqkXM3anohcAwEQxoTJ+UKFaVWUFbs9KNEW/eSPPtj4gpBdWZSiC
WCQXwxPJij0skruwaS/cNhaAJbkZzap8TKqTICunH0zPAyNZjln19UVKfkF2FLxU
odIJS94Ir6DCpGKBMcUWgd7Mr1DWM5t1gIP2DsMYpmDdvhSPOC4crkmG32LHHAiy
MAXMxNTAf4KT9qezVOsVcxVhGegdAhQD1XSPD9tw0CCabXN6aYzz8tWymHeOW9/H
XriqUMUOo+xWYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:45 2026 by rpki-client