Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
File: ZiEKIeTkbpksh_aziCYLb8xi77c.mft (raw, json)
Hash identifier: Y3VRVXQiZpNWoZgM/L5htI16d4tPVt5y/Ho+3KWyuAM=
Subject key identifier: BA:B8:37:33:BD:30:02:DB:C0:F2:44:6C:82:6C:6A:A0:39:2E:AA:B7
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 019FA899D263B208CC73B271B89E78539857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:20 +0000
Manifest this update: Tue 28 Jul 2026 12:01:20 +0000
Manifest next update: Wed 29 Jul 2026 12:01:20 +0000
Files and hashes: 1: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (hash: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=)
2: ZiEKIeTkbpksh_aziCYLb8xi77c.crl (hash: ivYO5LAnnCVCWxZM6cC7YV/9LHK+zwK+FgHKxXIx4QE=)
3: qxo3ePZzVemzYTrsxmbd-aDG0xQ.roa (hash: Ts2ye0fisSWfvRXQ8xO3p21sDayxpAX1ycZX2DBkKX8=)
4: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (hash: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d2:63:b2:08:cc:73:b2:71:b8:9e:78:53:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Jul 28 12:01:20 2026 GMT
Not After : Jul 29 12:01:20 2026 GMT
Subject: CN=bab83733bd3002dbc0f2446c826c6aa0392eaab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:62:f3:54:93:e6:f7:55:e0:0c:8d:47:36:
96:14:5f:0a:1c:c7:b7:c1:ad:42:00:c4:3d:74:c9:
2b:c5:5b:cb:6a:27:75:92:af:15:e7:ef:18:6a:f9:
a6:36:9f:eb:d7:bb:dc:8a:0e:85:74:98:9c:ca:d9:
90:c5:58:02:bc:b5:f5:c3:82:8e:32:12:da:31:e1:
25:b7:a2:17:ff:76:3e:eb:c8:29:1e:3c:e1:e4:bf:
1e:b4:e3:a6:9d:a2:98:7e:60:79:14:8b:76:96:3b:
89:4d:58:dd:ea:00:b2:c3:ed:ad:c1:9b:c1:11:44:
ca:f9:ad:41:27:fe:5e:75:7a:1c:d8:36:c6:b9:f3:
e5:40:99:a9:65:a0:a0:a5:92:9e:af:12:98:02:14:
ac:d3:87:34:20:db:42:c9:fb:ae:ca:c6:ae:c3:10:
8f:6b:07:0e:1a:3a:3f:40:b6:1d:51:42:ea:08:a8:
62:14:10:3b:ad:0c:dc:09:8d:b1:c4:7f:76:75:49:
e1:29:48:11:06:1f:7c:b4:1f:e7:f0:42:db:25:55:
db:71:0a:18:75:3c:22:25:c8:b0:af:aa:ed:4d:68:
ab:ac:13:4d:6d:f1:b0:76:d0:32:67:8b:a1:3b:2e:
73:bf:04:61:90:1d:4a:39:31:a3:36:28:bf:b7:a3:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:37:33:BD:30:02:DB:C0:F2:44:6C:82:6C:6A:A0:39:2E:AA:B7
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:32:b1:79:60:00:40:99:73:ae:8b:56:cc:d3:7a:08:b7:ac:
7b:d7:b5:28:9d:67:35:59:e6:69:2f:b0:c5:05:b9:5d:6c:0e:
08:6d:79:e1:66:17:d9:16:6c:d7:69:be:5d:e9:92:d3:d3:b7:
75:6b:5d:fb:61:04:cc:4a:46:d5:be:6a:f0:25:3c:15:ea:08:
91:31:46:79:3e:0b:b2:6a:a0:06:8e:9f:93:6c:ac:e8:32:95:
5d:1e:83:d3:ee:41:44:fa:15:81:8d:83:ee:c6:05:1d:c9:d4:
8a:d2:4c:0d:dd:c7:13:7d:22:d7:36:f0:be:67:fa:3c:d1:fb:
4a:b0:0a:dd:b2:ce:6c:7b:2b:ba:8f:73:2e:9c:71:2a:12:67:
ec:03:e0:b4:d8:be:8e:24:b9:f4:a9:cd:f2:f4:44:fb:47:49:
49:bd:95:25:75:9f:fc:46:dc:65:79:bd:2e:9b:7a:ef:a0:40:
68:84:e6:69:40:05:ad:64:56:4e:1b:75:c2:54:a5:ea:fe:08:
26:3f:d8:8a:74:2b:1e:15:42:b0:57:e2:cb:6a:f0:d3:6c:a5:
af:3f:94:75:8f:5b:13:53:a1:aa:a9:99:3f:e7:a6:b0:40:c4:
41:9a:cd:71:da:d8:95:8b:7a:14:63:33:37:fb:1c:1e:e9:1e:
ce:d7:ad:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omdJjsgjMc7JxuJ54U5hXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MjEwYTIxZTRlNDZlOTkyYzg3ZjZiMzg4MjYwYjZmY2M2
MmVmYjcwHhcNMjYwNzI4MTIwMTIwWhcNMjYwNzI5MTIwMTIwWjAzMTEwLwYDVQQD
EyhiYWI4MzczM2JkMzAwMmRiYzBmMjQ0NmM4MjZjNmFhMDM5MmVhYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRdi81ST5vdV4AyNRzaWFF8KHMe3
wa1CAMQ9dMkrxVvLaid1kq8V5+8YavmmNp/r17vcig6FdJicytmQxVgCvLX1w4KO
MhLaMeElt6IX/3Y+68gpHjzh5L8etOOmnaKYfmB5FIt2ljuJTVjd6gCyw+2twZvB
EUTK+a1BJ/5edXoc2DbGufPlQJmpZaCgpZKerxKYAhSs04c0INtCyfuuysauwxCP
awcOGjo/QLYdUULqCKhiFBA7rQzcCY2xxH92dUnhKUgRBh98tB/n8ELbJVXbcQoY
dTwiJciwr6rtTWirrBNNbfGwdtAyZ4uhOy5zvwRhkB1KOTGjNii/t6PU4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq4NzO9MALbwPJEbIJsaqA5Lqq3MB8GA1UdIwQY
MBaAFGYhCiHk5G6ZLIf2s4gmC2/MYu+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt
YzU0MDFmNmQ5MWQxLzEvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx
LzEvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDKxeWAA
QJlzrotWzNN6CLese9e1KJ1nNVnmaS+wxQW5XWwOCG154WYX2RZs12m+XemS09O3
dWtd+2EEzEpG1b5q8CU8FeoIkTFGeT4LsmqgBo6fk2ys6DKVXR6D0+5BRPoVgY2D
7sYFHcnUitJMDd3HE30i1zbwvmf6PNH7SrAK3bLObHsruo9zLpxxKhJn7APgtNi+
jiS59KnN8vRE+0dJSb2VJXWf/EbcZXm9Lpt676BAaITmaUAFrWRWTht1wlSl6v4I
Jj/YinQrHhVCsFfiy2rw02ylrz+UdY9bE1OhqqmZP+emsEDEQZrNcdrYlYt6FGMz
N/scHukeztetGA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:24 2026 by rpki-client