Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
File: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft (raw, json)
Hash identifier: iFdc4/urgXhCjn5E4m5CYN+/ehNH1kStxpFufD6n1kY=
Subject key identifier: 37:F6:E2:BB:F8:DB:9A:AD:F4:79:A9:45:A9:D3:D5:93:C8:8D:35:07
Authority key identifier: 65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
Certificate issuer: /CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Certificate serial: 019FA93E4014CA286A509E6F933619312C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
Manifest number: 0105
Signing time: Tue 28 Jul 2026 15:00:56 +0000
Manifest this update: Tue 28 Jul 2026 15:00:56 +0000
Manifest next update: Wed 29 Jul 2026 15:00:56 +0000
Files and hashes: 1: ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl (hash: +Z4XL8AlttMDJRrJ1VQSUJekkHA5cr1FXJIL25uppSo=)
2: fX47DA3aknJjMaNF3kpMk1RfVDY.roa (hash: QnbSVkKJ1tgtZD036KjNU81Gb7v/2YPgVvv50U+eDiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:40:14:ca:28:6a:50:9e:6f:93:36:19:31:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f852cbd1cdf244a170edac2440d0d2f4bd5319
Validity
Not Before: Jul 28 15:00:56 2026 GMT
Not After : Jul 29 15:00:56 2026 GMT
Subject: CN=37f6e2bbf8db9aadf479a945a9d3d593c88d3507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:82:d1:49:64:ed:d5:4c:35:6a:d3:25:ef:
e3:de:e1:c1:3d:5c:c8:69:19:ab:1d:2f:b7:8e:90:
a5:77:bf:11:95:3c:6c:cc:9d:83:89:15:e9:af:c1:
c6:57:ca:ac:2d:a1:37:6b:e2:e7:7f:50:54:68:17:
62:11:af:cb:7b:b6:15:de:34:2a:7b:b4:a7:be:24:
d8:d6:76:4c:a2:ff:ae:06:2d:49:83:23:3b:99:15:
d4:45:b3:8a:9d:de:93:a7:c8:9a:fa:cf:e9:1a:5b:
d0:9b:5a:9a:d9:94:e5:5b:ed:3a:6c:cc:e3:dd:94:
91:66:ef:1b:53:ba:ca:de:ab:e1:13:df:81:69:ea:
56:47:c2:61:15:33:ac:39:43:83:67:33:96:4a:13:
8c:26:74:39:c7:48:22:93:ee:62:60:30:a2:8f:84:
9d:8b:dd:f5:42:25:e2:7a:6c:43:39:3f:a2:28:c3:
db:63:d8:39:89:c2:63:5c:26:e5:3e:7f:92:a0:15:
1e:db:44:ce:d0:28:99:24:e4:63:df:4a:dc:c3:be:
0c:4b:d6:45:39:09:09:6f:de:1d:f1:3a:49:6d:e3:
43:f1:44:ea:26:1b:2f:18:30:11:c3:c3:f6:80:e9:
78:75:b0:f6:44:ed:8b:cc:dc:18:6d:1f:0b:67:3e:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F6:E2:BB:F8:DB:9A:AD:F4:79:A9:45:A9:D3:D5:93:C8:8D:35:07
X509v3 Authority Key Identifier:
keyid:65:F8:52:CB:D1:CD:F2:44:A1:70:ED:AC:24:40:D0:D2:F4:BD:53:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/194e97-e5db-4a6a-afb5-552e210354f4/1/ZfhSy9HN8kShcO2sJEDQ0vS9Uxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:06:43:bf:b2:a5:4d:22:42:59:64:1b:7b:5f:c2:7a:ad:7b:
39:88:93:58:5d:75:8c:a4:b4:53:bc:4a:6e:33:1c:a1:37:30:
50:6d:50:a1:38:6b:fe:66:ea:fb:89:7e:56:e9:86:02:8e:ff:
42:8c:e9:74:bb:dc:0f:51:c9:35:8d:2b:b3:46:f8:60:74:d2:
74:0e:b0:d8:4f:2f:8e:13:a3:fb:e2:3f:e4:db:93:70:b2:7b:
a6:c3:61:3b:12:9f:2f:bb:8d:be:d8:3b:03:a7:3f:e9:07:74:
5a:50:11:60:62:4e:8c:54:02:b9:66:fd:19:b5:8e:d4:92:d0:
50:48:94:fb:e7:bf:57:03:80:e6:7a:d0:f1:b4:9d:92:40:f9:
46:ef:fe:10:cd:92:9b:99:bc:ab:0b:00:c0:1a:50:6e:3b:f5:
15:ee:87:eb:67:ae:66:e4:10:8b:3e:56:63:68:3a:15:fc:a0:
2b:24:34:06:65:df:62:00:5f:ec:49:9f:86:97:cd:32:2f:2c:
dc:e9:ad:ad:05:fe:05:c9:7f:e6:e8:e6:e3:c2:54:99:f4:ff:
60:b0:82:90:48:67:29:9c:b5:d3:6c:df:d1:42:fe:d2:1f:e0:
b7:3a:8c:b7:c3:ef:b5:37:20:ab:2f:2d:6a:89:c8:8b:cc:95:
2f:72:e1:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPkAUyihqUJ5vkzYZMSyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Zjg1MmNiZDFjZGYyNDRhMTcwZWRhYzI0NDBkMGQyZjRi
ZDUzMTkwHhcNMjYwNzI4MTUwMDU2WhcNMjYwNzI5MTUwMDU2WjAzMTEwLwYDVQQD
EygzN2Y2ZTJiYmY4ZGI5YWFkZjQ3OWE5NDVhOWQzZDU5M2M4OGQzNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvGC0Ulk7dVMNWrTJe/j3uHBPVzI
aRmrHS+3jpCld78RlTxszJ2DiRXpr8HGV8qsLaE3a+Lnf1BUaBdiEa/Le7YV3jQq
e7SnviTY1nZMov+uBi1JgyM7mRXURbOKnd6Tp8ia+s/pGlvQm1qa2ZTlW+06bMzj
3ZSRZu8bU7rK3qvhE9+BaepWR8JhFTOsOUODZzOWShOMJnQ5x0gik+5iYDCij4Sd
i931QiXiemxDOT+iKMPbY9g5icJjXCblPn+SoBUe20TO0CiZJORj30rcw74MS9ZF
OQkJb94d8TpJbeND8UTqJhsvGDARw8P2gOl4dbD2RO2LzNwYbR8LZz6yPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf24rv425qt9HmpRanT1ZPIjTUHMB8GA1UdIwQY
MBaAFGX4UsvRzfJEoXDtrCRA0NL0vVMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZoU3k5SE44a1NoY08yc0pFRFEwdlM5VXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8xOTRlOTctZTVkYi00YTZhLWFmYjUt
NTUyZTIxMDM1NGY0LzEvWmZoU3k5SE44a1NoY08yc0pFRFEwdlM5VXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8xOTRlOTctZTVkYi00YTZhLWFmYjUtNTUyZTIxMDM1NGY0
LzEvWmZoU3k5SE44a1NoY08yc0pFRFEwdlM5VXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgZDv7Kl
TSJCWWQbe1/Ceq17OYiTWF11jKS0U7xKbjMcoTcwUG1QoThr/mbq+4l+VumGAo7/
QozpdLvcD1HJNY0rs0b4YHTSdA6w2E8vjhOj++I/5NuTcLJ7psNhOxKfL7uNvtg7
A6c/6Qd0WlARYGJOjFQCuWb9GbWO1JLQUEiU++e/VwOA5nrQ8bSdkkD5Ru/+EM2S
m5m8qwsAwBpQbjv1Fe6H62euZuQQiz5WY2g6FfygKyQ0BmXfYgBf7EmfhpfNMi8s
3OmtrQX+Bcl/5ujm48JUmfT/YLCCkEhnKZy102zf0UL+0h/gtzqMt8PvtTcgqy8t
aonIi8yVL3Lhdw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:49:40 2026 by rpki-client