Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: 4+XFEClgfq1uWw0utWUGM2640a7Hgtmr0ge/Pm5+mvA=
Subject key identifier: 12:64:54:EF:57:79:9D:B6:E0:DF:31:DA:D2:F6:29:2C:04:99:1E:2F
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 019FABD126A49EB26AD3AC4E36912A871D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 0AF4
Signing time: Wed 29 Jul 2026 03:00:38 +0000
Manifest this update: Wed 29 Jul 2026 03:00:38 +0000
Manifest next update: Thu 30 Jul 2026 03:00:38 +0000
Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: F0h8gy2XfSwX5z2vmsz/+lDPAXo25+8EGUL35VKLZFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:26:a4:9e:b2:6a:d3:ac:4e:36:91:2a:87:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Jul 29 03:00:38 2026 GMT
Not After : Jul 30 03:00:38 2026 GMT
Subject: CN=126454ef57799db6e0df31dad2f6292c04991e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:10:e6:bb:df:3c:be:81:b1:87:f0:6a:92:
93:09:93:9d:70:d1:5d:4b:cc:1b:be:0d:94:05:00:
69:e5:89:fc:a7:6b:82:5b:ab:51:e9:25:9d:53:73:
1b:73:3f:b6:e6:0a:17:1f:a8:1f:5e:13:53:f7:e1:
9a:a1:b5:40:d6:82:32:c9:98:e1:07:e2:91:14:65:
b7:01:f8:98:a3:44:09:96:bc:d7:53:aa:53:cb:31:
75:6c:65:5d:05:b9:91:9b:d7:95:05:c3:ca:f1:53:
e8:f6:ad:ae:22:a9:28:0a:5d:1c:8b:bc:1c:d6:ff:
51:b9:53:a3:db:a7:71:0e:e9:28:66:88:42:78:ff:
8a:33:fa:a8:8e:f4:5c:2c:0d:39:e4:e6:c4:3a:f3:
df:00:cf:b6:8d:2c:4b:8f:c8:c9:af:ef:43:a1:bd:
cd:9c:c9:62:27:8b:7b:fc:64:96:39:6e:1f:4c:97:
1d:36:9e:e0:f9:b4:02:e9:31:4d:93:c9:6e:f4:d2:
19:95:78:68:89:f0:55:e5:cc:2f:06:14:5f:31:d3:
c8:69:73:6b:6d:c3:1e:f1:c8:1d:2d:f1:04:c3:59:
ac:55:e9:78:bd:c4:37:71:38:d3:6b:ce:30:cb:75:
35:1f:ec:9a:6a:31:d1:bc:06:e2:ef:4e:8b:ea:a0:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:54:EF:57:79:9D:B6:E0:DF:31:DA:D2:F6:29:2C:04:99:1E:2F
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:ab:cb:ca:1e:ab:99:ec:51:68:3d:76:82:ae:63:38:89:
d6:e4:a8:e5:f4:a8:89:64:42:e3:93:a9:6c:f7:cf:11:7c:20:
67:e3:a4:23:9d:8b:ad:12:d1:05:be:8b:f2:32:8e:73:3f:bb:
41:ca:f4:e2:02:a9:5f:f4:bf:f9:bc:b4:e1:34:8e:28:2f:72:
c0:ef:e3:82:2e:92:7b:cf:69:56:30:9d:56:6e:10:ad:27:d1:
da:b9:f0:52:43:50:6b:ac:f5:f7:06:50:5e:9b:5c:5b:39:58:
78:be:a2:bb:d4:14:1d:f0:34:22:b9:b8:84:ff:26:ab:3c:f0:
fa:67:9a:0a:88:73:60:b7:a0:1e:fb:a9:c2:fd:f0:89:8b:8f:
2d:52:a2:5e:40:22:e8:2c:4b:55:cb:66:3e:a3:b5:8e:2d:23:
01:26:a3:cc:a7:8a:c3:8d:4f:6f:22:67:f0:09:31:08:b4:20:
74:df:39:16:11:61:fa:56:8b:7e:60:7c:3c:87:7a:8a:4e:a0:
d5:af:19:ea:aa:ca:5e:1f:69:ff:c6:79:53:55:0b:dd:1b:8a:
96:dd:29:9a:3f:4d:d4:8f:e9:c5:27:95:9b:fb:9f:a3:9b:d5:
90:6c:e2:9f:b3:59:1b:c6:53:da:b9:2a:02:bc:17:b1:b0:7f:
5e:2c:bc:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0SaknrJq06xONpEqhx18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTRmNWIwZmFiNWZlZDJkZjk1MzVlMmE5YzAyOWYxODdk
NTU0MDQwHhcNMjYwNzI5MDMwMDM4WhcNMjYwNzMwMDMwMDM4WjAzMTEwLwYDVQQD
EygxMjY0NTRlZjU3Nzk5ZGI2ZTBkZjMxZGFkMmY2MjkyYzA0OTkxZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSgQ5rvfPL6BsYfwapKTCZOdcNFd
S8wbvg2UBQBp5Yn8p2uCW6tR6SWdU3Mbcz+25goXH6gfXhNT9+GaobVA1oIyyZjh
B+KRFGW3AfiYo0QJlrzXU6pTyzF1bGVdBbmRm9eVBcPK8VPo9q2uIqkoCl0ci7wc
1v9RuVOj26dxDukoZohCeP+KM/qojvRcLA055ObEOvPfAM+2jSxLj8jJr+9Dob3N
nMliJ4t7/GSWOW4fTJcdNp7g+bQC6TFNk8lu9NIZlXhoifBV5cwvBhRfMdPIaXNr
bcMe8cgdLfEEw1msVel4vcQ3cTjTa84wy3U1H+yaajHRvAbi706L6qANCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJkVO9XeZ224N8x2tL2KSwEmR4vMB8GA1UdIwQY
MBaAFGaU9bD6tf7S35U14qnAKfGH1VQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQt
MjFiOWYxMmQyMmYzLzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQtMjFiOWYxMmQyMmYz
LzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzGry8oe
q5nsUWg9doKuYziJ1uSo5fSoiWRC45OpbPfPEXwgZ+OkI52LrRLRBb6L8jKOcz+7
Qcr04gKpX/S/+by04TSOKC9ywO/jgi6Se89pVjCdVm4QrSfR2rnwUkNQa6z19wZQ
XptcWzlYeL6iu9QUHfA0Irm4hP8mqzzw+meaCohzYLegHvupwv3wiYuPLVKiXkAi
6CxLVctmPqO1ji0jASajzKeKw41PbyJn8AkxCLQgdN85FhFh+laLfmB8PId6ik6g
1a8Z6qrKXh9p/8Z5U1UL3RuKlt0pmj9N1I/pxSeVm/ufo5vVkGzin7NZG8ZT2rkq
ArwXsbB/Xiy8rw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:08 2026 by rpki-client