Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: avdKh5iQn1Vl7atBTf0Dsz/+1oaADl0EMsMq8UStDKE=
Subject key identifier: 59:0E:55:5B:45:53:9F:10:EC:63:99:5D:04:C7:37:5A:7A:6B:E1:68
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019FAD5166C3D19FD8B67199D6AB60787011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 10:00:20 +0000
Manifest this update: Wed 29 Jul 2026 10:00:20 +0000
Manifest next update: Thu 30 Jul 2026 10:00:20 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: 7OOOC398FS63AxTy1gleEioBkHv8jpQtkNNJxAcumbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:66:c3:d1:9f:d8:b6:71:99:d6:ab:60:78:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Jul 29 10:00:20 2026 GMT
Not After : Jul 30 10:00:20 2026 GMT
Subject: CN=590e555b45539f10ec63995d04c7375a7a6be168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:4b:d0:30:b6:19:bb:a7:f8:87:30:bb:18:
d9:46:36:71:46:fc:90:cb:da:6a:74:15:d6:db:7f:
e9:1e:7f:4d:60:2e:00:a7:2a:28:92:32:11:7c:01:
83:f5:1f:a8:81:52:8c:d3:b0:59:45:93:23:57:3d:
d9:15:86:5e:a1:5a:11:20:b4:0c:9c:5f:47:ad:77:
cd:da:8b:41:38:0a:a6:0d:23:54:ad:11:70:bb:55:
6a:fe:d7:4f:47:49:d0:e9:15:25:7b:25:7e:27:79:
c3:13:09:19:66:d6:31:d0:20:0f:09:84:bd:c6:85:
78:8f:2d:e1:27:2e:d3:51:5b:a0:aa:57:2c:9a:35:
1f:23:68:96:35:ef:70:7a:a5:24:80:3e:a5:da:d0:
f8:65:f7:8a:80:e1:e9:60:3e:ac:bf:97:a1:1a:b3:
4e:19:47:ff:86:ee:f5:96:4c:60:12:24:78:8e:8a:
5a:10:8e:58:de:4b:f9:bb:c9:5b:77:53:e8:67:57:
1c:06:b5:4d:66:4e:44:d9:87:e6:46:05:2d:46:e5:
53:2c:97:c4:ee:70:e6:ca:cf:d7:95:57:dc:2e:f7:
24:37:82:5c:21:8f:ba:82:16:3d:be:b9:cf:ca:2d:
72:fc:5b:e4:c4:91:cc:53:ad:fe:d0:e5:03:35:ed:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:55:5B:45:53:9F:10:EC:63:99:5D:04:C7:37:5A:7A:6B:E1:68
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:45:bc:f7:14:6a:3c:f3:6c:95:a8:6b:36:31:8c:14:7e:64:
b9:a5:d2:6d:3d:30:db:1d:64:dc:b1:db:79:70:ba:c6:7c:68:
40:73:4a:f0:fd:e6:4e:20:c7:44:08:f3:e8:de:48:07:80:83:
3d:5b:c0:b7:38:a1:3e:bb:14:70:c8:bc:fe:06:46:8c:8d:40:
6b:82:96:c7:64:d1:44:49:ee:dc:4b:24:19:dd:5f:85:cf:3c:
1d:3c:78:f1:ba:6b:48:60:7a:f2:7e:80:54:d1:f4:2b:1a:21:
51:92:c7:0e:f2:52:ef:b9:37:01:3f:bc:3c:f8:7e:c2:72:b5:
2e:fa:9a:a7:ca:a8:2f:88:b1:07:7f:c3:e7:8f:ee:7b:db:1c:
d9:eb:e7:ca:38:0b:72:19:c8:9d:50:9f:b5:32:a0:11:b2:e9:
3b:cd:07:1e:68:7b:87:b2:4f:3b:81:8f:97:9b:f7:ec:03:ad:
ad:25:1f:b6:44:4a:b4:ca:46:92:ac:40:b8:41:b1:8a:4d:7b:
7e:2e:28:93:e6:31:62:e9:36:cf:f2:a0:0f:72:f6:39:36:8a:
c5:9b:28:12:ef:39:61:dc:d9:28:90:da:78:75:d5:d3:9a:2a:
8e:c3:f5:18:a2:14:0f:f5:d9:62:a3:71:64:48:ba:1d:9d:93:
94:df:76:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUWbD0Z/YtnGZ1qtgeHARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjYyMjRiY2ZiOGI4MmRlYWFiYWM4YzRjYTI1MDM3MWI5
NzQ2MTEwHhcNMjYwNzI5MTAwMDIwWhcNMjYwNzMwMTAwMDIwWjAzMTEwLwYDVQQD
Eyg1OTBlNTU1YjQ1NTM5ZjEwZWM2Mzk5NWQwNGM3Mzc1YTdhNmJlMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JdL0DC2Gbun+IcwuxjZRjZxRvyQ
y9pqdBXW23/pHn9NYC4ApyookjIRfAGD9R+ogVKM07BZRZMjVz3ZFYZeoVoRILQM
nF9HrXfN2otBOAqmDSNUrRFwu1Vq/tdPR0nQ6RUleyV+J3nDEwkZZtYx0CAPCYS9
xoV4jy3hJy7TUVugqlcsmjUfI2iWNe9weqUkgD6l2tD4ZfeKgOHpYD6sv5ehGrNO
GUf/hu71lkxgEiR4jopaEI5Y3kv5u8lbd1PoZ1ccBrVNZk5E2YfmRgUtRuVTLJfE
7nDmys/XlVfcLvckN4JcIY+6ghY9vrnPyi1y/FvkxJHMU63+0OUDNe3ukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkOVVtFU58Q7GOZXQTHN1p6a+FoMB8GA1UdIwQY
MBaAFM9mIkvPuLgt6qusjEyiUDcbl0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjIt
Yjk1NGM1MGZkYmIwLzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjItYjk1NGM1MGZkYmIw
LzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0W89xRq
PPNslahrNjGMFH5kuaXSbT0w2x1k3LHbeXC6xnxoQHNK8P3mTiDHRAjz6N5IB4CD
PVvAtzihPrsUcMi8/gZGjI1Aa4KWx2TRREnu3EskGd1fhc88HTx48bprSGB68n6A
VNH0KxohUZLHDvJS77k3AT+8PPh+wnK1Lvqap8qoL4ixB3/D54/ue9sc2evnyjgL
chnInVCftTKgEbLpO80HHmh7h7JPO4GPl5v37AOtrSUftkRKtMpGkqxAuEGxik17
fi4ok+YxYuk2z/KgD3L2OTaKxZsoEu85YdzZKJDaeHXV05oqjsP1GKIUD/XZYqNx
ZEi6HZ2TlN92Pw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:28 2026 by rpki-client