Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: m8U78hHdlY0hQxd8zIS3gaXxYmu6HBDsLDJ5V+cc2PA=
Subject key identifier: C1:71:B9:29:81:92:E7:E8:41:C0:51:A8:4E:B4:B5:47:98:31:CF:1A
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019FAC3EC6FA4268179B5CB9CB6EC51E94C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0CC9
Signing time: Wed 29 Jul 2026 05:00:22 +0000
Manifest this update: Wed 29 Jul 2026 05:00:22 +0000
Manifest next update: Thu 30 Jul 2026 05:00:22 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: ldT7DtKO3dGgZ8kOLPm+JsVvhu9GwKVbzHFFQ2bsd2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c6:fa:42:68:17:9b:5c:b9:cb:6e:c5:1e:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jul 29 05:00:22 2026 GMT
Not After : Jul 30 05:00:22 2026 GMT
Subject: CN=c171b9298192e7e841c051a84eb4b5479831cf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:21:ee:d6:0d:1c:be:7d:4e:3f:9e:84:cc:
39:49:4c:58:9a:31:3b:46:09:2c:50:80:e5:fd:9a:
d9:25:49:42:6d:32:dc:80:59:80:dd:e0:1c:97:7d:
25:65:80:83:5a:1e:02:da:dc:29:6f:71:b8:84:50:
da:ea:9f:23:2e:b4:66:ad:34:ff:13:17:6d:b8:a2:
c7:6a:47:c6:ab:05:35:35:b0:12:9f:ad:5d:0f:a7:
db:b4:0c:7c:68:ee:63:3f:6b:16:62:e4:24:8a:c9:
78:ab:1e:f6:94:62:94:cb:1f:a7:1c:e7:04:66:ed:
72:41:59:16:38:d6:2b:9b:7b:23:61:ef:df:c9:1c:
c0:88:6a:1e:22:b0:dc:c8:8d:ba:11:5a:42:fa:29:
e2:a5:ea:5d:f7:20:ad:22:69:19:39:a6:4d:dc:5d:
8d:e7:62:74:97:7e:51:5b:3b:54:89:cf:21:b6:94:
73:bc:d8:e6:4d:dd:0b:a4:c2:f7:72:bf:08:4f:53:
ef:8b:01:34:0c:e9:9f:40:e0:2c:05:5c:49:42:6b:
75:eb:04:e5:e5:4f:99:06:f1:30:87:2f:48:9d:9e:
c2:26:1d:16:40:c4:5a:d4:44:03:44:10:95:7d:73:
f4:05:13:fe:3d:c1:fb:d2:93:0d:48:4e:d8:01:5a:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:71:B9:29:81:92:E7:E8:41:C0:51:A8:4E:B4:B5:47:98:31:CF:1A
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c8:cc:c7:b2:f0:6b:7b:c0:71:52:e7:bb:c1:80:89:9d:42:
f3:b2:da:5d:08:7e:33:28:ab:3b:da:78:95:b7:24:ef:5d:ab:
84:b7:90:f7:f7:a1:ae:a6:bb:90:ee:69:32:4c:35:bd:27:d1:
29:d9:48:48:e3:d4:7a:92:74:a4:14:7b:f0:7e:96:1a:c8:e7:
9f:69:27:44:66:44:d1:bd:c4:88:b2:ac:6a:a8:8e:d7:cc:cf:
96:b1:cc:8b:c2:6e:d1:e1:17:f1:51:26:be:be:10:a3:71:a2:
19:6a:99:a3:b5:ef:3d:23:0e:a9:54:63:55:29:3f:97:35:ca:
2c:45:ab:b9:47:a9:21:89:fb:ba:9d:91:ac:99:1a:4f:32:e0:
53:f2:60:a6:1a:91:4d:7d:02:4b:19:12:ca:6f:b9:5f:14:4b:
f1:ec:ed:18:fd:59:f2:ff:48:fb:54:08:3e:9c:6e:79:75:e4:
c0:da:03:0f:18:72:49:f2:66:39:34:09:18:d8:1d:32:eb:fa:
14:17:e1:3a:80:ad:3d:55:f9:37:b6:98:64:a6:d9:b3:8f:a7:
6c:91:78:d7:77:d1:47:d3:ed:12:92:e5:c2:76:22:a0:d7:72:
3c:b0:9c:47:f6:f2:7c:d2:95:dd:6d:b7:52:7a:00:f0:1d:fe:
0c:d2:74:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPsb6QmgXm1y5y27FHpTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjYwNzI5MDUwMDIyWhcNMjYwNzMwMDUwMDIyWjAzMTEwLwYDVQQD
EyhjMTcxYjkyOTgxOTJlN2U4NDFjMDUxYTg0ZWI0YjU0Nzk4MzFjZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUh7tYNHL59Tj+ehMw5SUxYmjE7
RgksUIDl/ZrZJUlCbTLcgFmA3eAcl30lZYCDWh4C2twpb3G4hFDa6p8jLrRmrTT/
ExdtuKLHakfGqwU1NbASn61dD6fbtAx8aO5jP2sWYuQkisl4qx72lGKUyx+nHOcE
Zu1yQVkWONYrm3sjYe/fyRzAiGoeIrDcyI26EVpC+inipepd9yCtImkZOaZN3F2N
52J0l35RWztUic8htpRzvNjmTd0LpML3cr8IT1PviwE0DOmfQOAsBVxJQmt16wTl
5U+ZBvEwhy9InZ7CJh0WQMRa1EQDRBCVfXP0BRP+PcH70pMNSE7YAVr8DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFxuSmBkufoQcBRqE60tUeYMc8aMB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8jMx7Lw
a3vAcVLnu8GAiZ1C87LaXQh+MyirO9p4lbck712rhLeQ9/ehrqa7kO5pMkw1vSfR
KdlISOPUepJ0pBR78H6WGsjnn2knRGZE0b3EiLKsaqiO18zPlrHMi8Ju0eEX8VEm
vr4Qo3GiGWqZo7XvPSMOqVRjVSk/lzXKLEWruUepIYn7up2RrJkaTzLgU/JgphqR
TX0CSxkSym+5XxRL8eztGP1Z8v9I+1QIPpxueXXkwNoDDxhySfJmOTQJGNgdMuv6
FBfhOoCtPVX5N7aYZKbZs4+nbJF413fRR9PtEpLlwnYioNdyPLCcR/byfNKV3W23
UnoA8B3+DNJ0VQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:50 2026 by rpki-client