Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: TVAVLaTvwcIUCN7cyX9s0TJYvN5bStTlzA7A5aGzfHM=
Subject key identifier: 2A:8B:B6:10:2E:0C:3A:0A:4E:9F:BA:36:E8:20:A4:C2:43:93:72:62
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019FAA1961CACD3C3552CED13568E8AEC370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0FDD
Signing time: Tue 28 Jul 2026 19:00:17 +0000
Manifest this update: Tue 28 Jul 2026 19:00:17 +0000
Manifest next update: Wed 29 Jul 2026 19:00:17 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: EVBNXBQDWn7WD/dtxjvqY+Ne3tKqZ1w67Q0FuDl3ayE=)
4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:61:ca:cd:3c:35:52:ce:d1:35:68:e8:ae:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jul 28 19:00:17 2026 GMT
Not After : Jul 29 19:00:17 2026 GMT
Subject: CN=2a8bb6102e0c3a0a4e9fba36e820a4c243937262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:61:e7:ad:ed:9a:76:c3:0d:5e:f6:54:3e:
21:80:28:2a:6d:f3:d9:80:8a:e1:86:42:a4:5e:cb:
21:b2:76:e3:97:5f:df:15:bd:70:dd:53:34:40:5f:
a0:de:33:ba:cd:09:bf:66:5b:d0:d3:d1:f1:c9:cd:
33:33:29:aa:7c:40:cc:8e:4e:67:81:6b:f6:11:f3:
56:d2:f9:99:a0:db:88:f9:0b:f2:e6:cd:8b:75:65:
cf:f2:10:1e:6e:be:35:de:01:77:e8:8a:53:6f:fc:
84:0e:22:0f:1d:e3:fb:55:d9:4e:6a:70:66:12:e2:
51:19:72:ff:be:ff:b3:99:e0:17:35:12:12:dc:01:
07:56:d7:0b:67:ba:f4:76:9c:76:c4:38:a0:c1:b8:
31:93:98:22:54:ec:9d:bf:a0:ca:9b:ab:90:55:e7:
6c:2d:55:9e:14:d4:a1:7d:fc:6a:8d:51:68:ad:2e:
6a:12:2c:d4:ae:1d:ee:51:2a:30:04:e4:30:99:78:
b6:ff:2c:7c:70:8a:4b:28:d6:4e:99:64:ca:7a:9f:
61:c5:c2:e1:56:f3:b0:ad:f3:76:67:30:e6:4c:51:
91:6c:df:3a:8e:b4:2b:20:4f:64:aa:85:6f:34:04:
9a:8f:85:2d:07:1c:b2:72:ce:9f:4f:3c:c0:e2:91:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:B6:10:2E:0C:3A:0A:4E:9F:BA:36:E8:20:A4:C2:43:93:72:62
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a6:c2:cd:d6:af:f8:d3:7c:46:07:ae:02:0a:0a:9d:81:50:
5f:17:01:2b:b6:46:8c:0b:5f:0a:3d:24:6f:6d:06:40:2a:c7:
30:da:55:56:45:fc:9e:c5:8a:66:e1:5e:ab:d8:bf:e8:4d:7e:
01:1e:34:dd:11:d8:59:3b:eb:c9:1c:2f:fb:10:fe:c4:c8:4b:
04:ce:38:57:20:1a:08:79:9b:41:2a:43:ff:65:7c:67:ce:e4:
36:15:8a:b6:3b:24:6e:99:bd:99:43:d8:83:24:61:b8:1a:32:
cb:86:8a:4b:30:74:1f:95:75:05:1d:20:12:08:4d:17:ca:94:
e7:e7:98:27:19:3c:e5:99:df:60:fa:a5:7e:aa:c3:d6:a1:1c:
72:4d:b4:3e:a1:ba:96:d0:dc:9e:27:07:16:70:86:3c:79:8e:
24:cd:be:4e:62:47:0c:55:2b:d3:b9:f4:f8:7c:35:21:ac:6f:
40:f7:30:4c:bd:85:d6:4d:cb:2c:01:11:ce:10:b3:56:e7:7e:
ae:26:d8:ca:d7:f9:dc:21:c9:df:22:65:c5:56:30:e3:02:2f:
f3:32:58:fc:7a:84:2f:d9:64:2d:8a:1a:0b:da:c4:65:6e:b3:
2a:f3:10:0c:e3:06:d5:7e:cd:7b:89:d7:64:bc:c6:51:d0:50:
a4:59:8b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGWHKzTw1Us7RNWjorsNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi
YWZiMWIwHhcNMjYwNzI4MTkwMDE3WhcNMjYwNzI5MTkwMDE3WjAzMTEwLwYDVQQD
EygyYThiYjYxMDJlMGMzYTBhNGU5ZmJhMzZlODIwYTRjMjQzOTM3MjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPFh563tmnbDDV72VD4hgCgqbfPZ
gIrhhkKkXsshsnbjl1/fFb1w3VM0QF+g3jO6zQm/ZlvQ09Hxyc0zMymqfEDMjk5n
gWv2EfNW0vmZoNuI+Qvy5s2LdWXP8hAebr413gF36IpTb/yEDiIPHeP7VdlOanBm
EuJRGXL/vv+zmeAXNRIS3AEHVtcLZ7r0dpx2xDigwbgxk5giVOydv6DKm6uQVeds
LVWeFNShffxqjVForS5qEizUrh3uUSowBOQwmXi2/yx8cIpLKNZOmWTKep9hxcLh
VvOwrfN2ZzDmTFGRbN86jrQrIE9kqoVvNASaj4UtBxyycs6fTzzA4pHUBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqLthAuDDoKTp+6NuggpMJDk3JiMB8GA1UdIwQY
MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt
NGY0Yjk5NGUwZWIyLzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy
LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKbCzdav
+NN8RgeuAgoKnYFQXxcBK7ZGjAtfCj0kb20GQCrHMNpVVkX8nsWKZuFeq9i/6E1+
AR403RHYWTvryRwv+xD+xMhLBM44VyAaCHmbQSpD/2V8Z87kNhWKtjskbpm9mUPY
gyRhuBoyy4aKSzB0H5V1BR0gEghNF8qU5+eYJxk85ZnfYPqlfqrD1qEcck20PqG6
ltDcnicHFnCGPHmOJM2+TmJHDFUr07n0+Hw1IaxvQPcwTL2F1k3LLAERzhCzVud+
ribYytf53CHJ3yJlxVYw4wIv8zJY/HqEL9lkLYoaC9rEZW6zKvMQDOMG1X7Ne4nX
ZLzGUdBQpFmL1w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:11 2026 by rpki-client