Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json)
Hash identifier: RSOoztJ/TTivksMpTQSAaBjEYx58HvAvxF47ZhclH70=
Subject key identifier: ED:8C:D7:12:16:C5:69:77:67:5A:72:48:86:36:2B:79:5A:81:7C:13
Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Certificate serial: 019FAAF6025C82ADB9D9B5288B5BED3E71A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:01:16 +0000
Manifest this update: Tue 28 Jul 2026 23:01:16 +0000
Manifest next update: Wed 29 Jul 2026 23:01:16 +0000
Files and hashes: 1: _NSxXKWLAT32ACYjnb_Q_v0bth4.roa (hash: jFEG3V9iSls0XRVWy4kyBvsz0M23pnXIeMtJ7lA5i08=)
2: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: gJkOpQ1qH1/AizKN92Lq4IoXxl5S4nwpXd0GY9FeGds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:02:5c:82:ad:b9:d9:b5:28:8b:5b:ed:3e:71:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa
Validity
Not Before: Jul 28 23:01:16 2026 GMT
Not After : Jul 29 23:01:16 2026 GMT
Subject: CN=ed8cd71216c56977675a724886362b795a817c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:cf:13:b2:12:17:52:0a:c8:74:5b:fd:97:
74:41:10:15:54:74:c8:b8:33:a1:12:6c:e4:52:5a:
ac:bf:46:e9:69:55:94:d8:87:f4:36:bf:ac:c7:3a:
2e:13:6d:e5:8c:d9:38:b4:78:34:fc:72:dd:e8:4d:
a1:58:f4:74:a0:83:a1:df:d7:d5:22:71:45:5b:d7:
64:75:ff:3b:eb:39:e8:1b:1f:26:54:7f:6e:f2:3d:
1f:51:2d:aa:b4:b6:0b:36:90:21:17:94:be:a6:63:
68:ba:6d:64:ec:94:37:77:f4:09:bd:1c:56:08:35:
b1:a0:0c:b6:11:9b:e2:e6:09:5a:25:3f:c7:2f:75:
3e:ae:7e:98:7b:db:fa:57:8d:55:91:57:01:9f:81:
b9:a2:99:ce:f3:52:46:0f:c6:1f:90:9a:3c:06:23:
e6:ab:02:5c:e9:4d:59:b2:57:46:3a:1e:69:46:e1:
49:20:48:b2:1a:7d:2e:6f:a3:f5:0d:a6:0a:77:fb:
7f:52:56:3c:40:12:ed:76:a5:2b:a4:59:ce:e7:99:
61:52:a1:9d:00:a5:3d:4c:8c:2c:51:1e:18:03:52:
58:dd:5e:1a:54:f3:ed:62:bc:93:d9:9f:e3:b8:48:
cb:88:57:e1:3a:48:f6:71:a6:e3:19:aa:51:ac:b7:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:D7:12:16:C5:69:77:67:5A:72:48:86:36:2B:79:5A:81:7C:13
X509v3 Authority Key Identifier:
keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:8a:f2:0c:35:09:57:3f:cb:eb:74:60:61:ee:ae:bc:9c:
e7:ee:e3:fa:aa:00:e0:27:5c:38:af:ec:89:31:c5:7e:26:28:
7b:f8:78:20:62:49:6c:87:6d:6e:1b:1d:0d:8e:c3:64:21:d1:
73:99:e0:06:40:78:0f:c0:96:ad:68:09:ff:d0:8d:cc:8d:5a:
1f:92:7a:0d:03:0a:ff:23:7f:3e:a2:fd:7d:80:6c:e6:d4:3d:
48:01:99:da:9a:61:88:b4:3d:af:3e:3f:b8:af:13:5d:3a:c0:
3d:d0:fe:f1:65:fd:35:ab:a6:de:35:fa:43:cf:f7:87:87:52:
cb:8a:5c:85:84:cc:49:01:09:67:97:1d:54:3e:09:44:93:92:
b5:58:85:30:ac:f9:37:73:3a:a0:07:dd:e5:ab:26:ee:64:28:
00:76:a8:f2:5a:23:18:2a:5d:ad:d3:01:47:1d:04:59:6e:df:
93:a8:20:e2:b6:42:75:88:d3:6d:70:7d:24:04:d7:84:2a:45:
ec:ef:ab:10:c7:f9:2b:a7:39:83:fe:13:c3:b0:65:da:70:df:
82:7f:8a:d8:fa:32:70:ad:07:94:dc:b0:5f:0e:35:a3:a0:5e:
7e:c5:54:2d:7e:cb:92:55:42:79:67:6d:ea:98:02:ad:58:66:
67:0d:43:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9gJcgq252bUoi1vtPnGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDFlMjg5MzBkNzdhN2ViOTg5MWI2ZmFiYmIyOTE1ZWUz
ODg1YWEwHhcNMjYwNzI4MjMwMTE2WhcNMjYwNzI5MjMwMTE2WjAzMTEwLwYDVQQD
EyhlZDhjZDcxMjE2YzU2OTc3Njc1YTcyNDg4NjM2MmI3OTVhODE3YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz33PE7ISF1IKyHRb/Zd0QRAVVHTI
uDOhEmzkUlqsv0bpaVWU2If0Nr+sxzouE23ljNk4tHg0/HLd6E2hWPR0oIOh39fV
InFFW9dkdf876znoGx8mVH9u8j0fUS2qtLYLNpAhF5S+pmNoum1k7JQ3d/QJvRxW
CDWxoAy2EZvi5glaJT/HL3U+rn6Ye9v6V41VkVcBn4G5opnO81JGD8YfkJo8BiPm
qwJc6U1ZsldGOh5pRuFJIEiyGn0ub6P1DaYKd/t/UlY8QBLtdqUrpFnO55lhUqGd
AKU9TIwsUR4YA1JY3V4aVPPtYryT2Z/juEjLiFfhOkj2cabjGapRrLdDPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2M1xIWxWl3Z1pySIY2K3lagXwTMB8GA1UdIwQY
MBaAFMzR4okw13p+uYkbb6u7KRXuOIWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMt
YzEzYjFmOTc3ZDU3LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMtYzEzYjFmOTc3ZDU3
LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyiK8gw1
CVc/y+t0YGHurryc5+7j+qoA4CdcOK/siTHFfiYoe/h4IGJJbIdtbhsdDY7DZCHR
c5ngBkB4D8CWrWgJ/9CNzI1aH5J6DQMK/yN/PqL9fYBs5tQ9SAGZ2pphiLQ9rz4/
uK8TXTrAPdD+8WX9Naum3jX6Q8/3h4dSy4pchYTMSQEJZ5cdVD4JRJOStViFMKz5
N3M6oAfd5asm7mQoAHao8lojGCpdrdMBRx0EWW7fk6gg4rZCdYjTbXB9JATXhCpF
7O+rEMf5K6c5g/4Tw7Bl2nDfgn+K2PoycK0HlNywXw41o6BefsVULX7LklVCeWdt
6pgCrVhmZw1DwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:00 2026 by rpki-client