Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: X2kAXWenE8hGMuQlJ06U+bWXOO11ThKg4zOPEXxMRTU=
Subject key identifier: D2:29:E4:64:08:51:71:90:C8:FA:5F:E1:ED:3C:EE:AF:07:DC:CE:23
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019FAC3F2F54C418F9194E0A713C159F5E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0516
Signing time: Wed 29 Jul 2026 05:00:49 +0000
Manifest this update: Wed 29 Jul 2026 05:00:49 +0000
Manifest next update: Thu 30 Jul 2026 05:00:49 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: uPhJI+lrfDyWJpYficzOZNxI0iblExKc5FJ/Qs0sUD0=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:2f:54:c4:18:f9:19:4e:0a:71:3c:15:9f:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Jul 29 05:00:49 2026 GMT
Not After : Jul 30 05:00:49 2026 GMT
Subject: CN=d229e46408517190c8fa5fe1ed3ceeaf07dcce23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:e8:7e:2b:0e:f9:6e:a5:d0:fe:18:eb:7a:
17:38:81:e5:08:93:07:1e:9f:52:44:cf:78:c2:71:
25:37:a0:53:02:34:79:97:65:44:14:f3:d3:fe:e5:
1a:ad:88:f3:36:7e:35:1e:f8:f1:31:fb:ab:b0:61:
00:8b:9f:44:24:7b:df:88:eb:90:92:c4:4d:b9:aa:
0f:2c:12:d3:08:f4:1b:87:82:ce:f2:67:7f:73:24:
1f:39:c9:03:bf:9f:4d:4b:91:67:ac:91:47:a0:64:
e3:a1:b5:2a:d4:a1:4f:41:2b:20:50:ce:f5:b9:5c:
90:96:e9:4f:5a:e3:5b:35:cd:f9:93:82:96:d3:51:
ae:93:4d:92:3d:57:2e:88:e1:43:fb:57:19:09:08:
f7:b1:87:ff:d0:55:5a:1a:17:c2:0d:af:0e:1c:a9:
ab:bd:6d:4f:1b:e0:c6:72:48:20:b4:79:99:5c:ab:
fc:1f:b7:9c:d7:bf:07:aa:a8:a5:e1:fa:7a:ca:1d:
db:4e:a5:e7:a5:ac:d6:96:83:68:c0:77:88:66:f0:
ba:4a:bf:d7:68:69:fe:72:c6:74:18:08:ce:3e:dd:
4f:6c:b4:37:c8:43:39:0c:e1:33:6a:f6:3f:21:9b:
4c:24:79:c2:5b:96:08:59:88:38:a4:80:91:5c:f7:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:E4:64:08:51:71:90:C8:FA:5F:E1:ED:3C:EE:AF:07:DC:CE:23
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ae:75:eb:ef:58:2c:f7:d3:77:c6:b7:b8:31:60:81:ef:08:
97:f9:d5:e6:8b:d4:34:f1:1b:d6:3f:24:e3:2e:99:9f:68:7e:
b6:b5:df:8e:a2:b4:38:6e:b3:82:0a:1d:05:e6:4a:99:11:31:
29:b2:0b:c3:e3:11:02:79:62:dd:86:14:d8:07:61:51:51:89:
b0:8a:ee:08:56:d5:4f:13:d9:4b:70:8a:2b:92:31:aa:80:14:
b8:4f:8f:c8:cd:fc:3b:a8:7e:7b:84:85:33:f9:39:2c:3b:29:
16:09:0a:34:e6:4b:48:24:26:47:37:85:f4:c9:38:d8:be:47:
c4:de:5f:60:c8:9b:f4:38:4b:63:22:96:a0:0f:3d:57:28:d6:
18:a9:a9:e5:7c:ba:3d:63:de:20:d1:8f:f8:81:52:9c:6e:02:
fb:20:5d:fc:bb:bd:6b:74:7f:5e:c2:f6:88:bb:fd:97:a6:f4:
54:f5:7c:7c:f2:40:66:29:f4:65:f1:6e:1d:85:07:d2:b8:7f:
79:3e:b1:f3:b5:2a:98:d9:30:4b:2e:fe:77:88:d7:e1:3d:f3:
c2:14:c9:08:66:05:5d:56:9b:39:67:72:a3:1c:dc:14:92:cf:
69:8a:70:de:21:70:89:3f:7f:12:91:57:6b:87:88:0f:e6:fb:
a4:63:c8:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPy9UxBj5GU4KcTwVn15sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz
NDEzMjYwHhcNMjYwNzI5MDUwMDQ5WhcNMjYwNzMwMDUwMDQ5WjAzMTEwLwYDVQQD
EyhkMjI5ZTQ2NDA4NTE3MTkwYzhmYTVmZTFlZDNjZWVhZjA3ZGNjZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr/ofisO+W6l0P4Y63oXOIHlCJMH
Hp9SRM94wnElN6BTAjR5l2VEFPPT/uUarYjzNn41HvjxMfursGEAi59EJHvfiOuQ
ksRNuaoPLBLTCPQbh4LO8md/cyQfOckDv59NS5FnrJFHoGTjobUq1KFPQSsgUM71
uVyQlulPWuNbNc35k4KW01Guk02SPVcuiOFD+1cZCQj3sYf/0FVaGhfCDa8OHKmr
vW1PG+DGckggtHmZXKv8H7ec178Hqqil4fp6yh3bTqXnpazWloNowHeIZvC6Sr/X
aGn+csZ0GAjOPt1PbLQ3yEM5DOEzavY/IZtMJHnCW5YIWYg4pICRXPc8IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIp5GQIUXGQyPpf4e087q8H3M4jMB8GA1UdIwQY
MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt
ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl
LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6516+9Y
LPfTd8a3uDFgge8Il/nV5ovUNPEb1j8k4y6Zn2h+trXfjqK0OG6zggodBeZKmREx
KbILw+MRAnli3YYU2AdhUVGJsIruCFbVTxPZS3CKK5IxqoAUuE+PyM38O6h+e4SF
M/k5LDspFgkKNOZLSCQmRzeF9Mk42L5HxN5fYMib9DhLYyKWoA89VyjWGKmp5Xy6
PWPeINGP+IFSnG4C+yBd/Lu9a3R/XsL2iLv9l6b0VPV8fPJAZin0ZfFuHYUH0rh/
eT6x87UqmNkwSy7+d4jX4T3zwhTJCGYFXVabOWdyoxzcFJLPaYpw3iFwiT9/EpFX
a4eID+b7pGPIVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:05 2026 by rpki-client