Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: 8SWHCT3slc1jcLPj+sKbJSiDwazCXFfcpi87WyElZ2Q=
Subject key identifier: D9:8E:18:F6:13:2A:B7:25:20:3E:10:E3:14:9B:03:30:B2:6C:A7:7B
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 019FAB63BD8DDFBB3418F81DF2DCB83330E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 10BE
Signing time: Wed 29 Jul 2026 01:01:08 +0000
Manifest this update: Wed 29 Jul 2026 01:01:08 +0000
Manifest next update: Thu 30 Jul 2026 01:01:08 +0000
Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=)
2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: jUlF6WUuwatFdR+UHCuBAGPQScxtDUdb0qTiR807ahs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:bd:8d:df:bb:34:18:f8:1d:f2:dc:b8:33:30:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Jul 29 01:01:08 2026 GMT
Not After : Jul 30 01:01:08 2026 GMT
Subject: CN=d98e18f6132ab725203e10e3149b0330b26ca77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:83:61:d5:30:41:14:2d:63:17:46:95:5f:
25:0c:68:06:18:ca:55:a0:83:de:37:21:b4:00:70:
1b:85:43:bf:19:0c:91:95:8a:58:70:36:11:41:b0:
98:23:6c:61:d2:7c:ab:07:7a:94:db:ea:f4:e0:ca:
44:40:88:93:3c:68:8b:8e:2f:63:5d:52:7e:60:f8:
32:16:94:c6:ce:a8:ac:c5:6e:6c:bc:b0:94:3d:cb:
b9:65:8d:c6:51:01:7c:4a:a7:27:e4:1b:b7:75:45:
ad:18:63:42:19:3b:af:8a:b2:6e:ba:03:ec:27:64:
6c:93:f4:f4:ca:a9:9f:67:3f:6e:b5:86:70:ad:2b:
7b:5d:6f:4a:38:38:a1:a5:ee:26:ed:fb:c4:14:b8:
4e:96:91:6d:4a:bc:3e:20:7a:dc:a7:25:29:6c:ce:
1c:41:2f:57:75:84:b2:90:70:38:22:10:9f:1c:bc:
54:3e:1a:f3:32:8b:1b:9c:a9:0d:90:8d:0a:e6:95:
88:55:15:87:bd:1e:a7:80:30:34:1d:15:fd:8e:68:
6e:a1:ab:a2:7c:45:62:92:86:2b:43:15:cb:58:67:
f8:cf:7a:4d:73:de:bf:a6:23:d1:03:fe:54:64:a4:
50:7b:9f:a4:24:4e:40:c8:78:82:e8:ea:3e:51:c2:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8E:18:F6:13:2A:B7:25:20:3E:10:E3:14:9B:03:30:B2:6C:A7:7B
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9f:75:7b:42:2d:3a:08:c8:05:8e:8b:11:f3:84:07:b6:b9:
87:66:79:ba:15:21:46:07:5e:f6:4a:e5:1f:52:2c:06:8d:6b:
a7:d9:f7:39:f0:13:7c:4a:04:7a:62:9a:47:31:e4:18:77:76:
31:c4:be:e1:e5:3a:3e:be:08:14:1d:27:02:5d:56:b4:bc:67:
28:42:14:df:a5:3c:43:20:96:c3:96:7a:e0:a4:ea:fa:08:9f:
04:43:64:f3:70:e8:33:2b:47:9a:41:77:a5:97:b6:c6:a1:af:
9d:e1:64:ca:16:8d:a6:92:ec:8d:63:3e:51:ba:5e:bd:7c:8e:
a7:29:fd:fb:ca:11:0b:73:0d:ad:03:6b:78:51:b8:78:bc:f9:
7d:f5:0d:6f:75:53:5b:c4:45:0f:b9:b3:35:ec:eb:b8:af:80:
9d:76:6b:9a:c1:b8:06:7c:f2:b0:36:f8:22:9d:83:95:90:ab:
c7:b5:bb:06:9a:23:48:9d:74:58:39:1a:80:84:ee:7e:a8:a3:
28:6c:08:69:43:65:7f:43:9c:51:73:0e:ab:71:a0:7d:85:f3:
01:a7:a1:05:cb:ba:14:9a:06:3e:6d:75:3c:46:8e:7f:fb:29:
74:d1:08:74:c1:3b:ba:63:be:b0:e9:ed:5f:a6:d0:7e:da:ef:
12:15:47:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY72N37s0GPgd8ty4MzDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1
ZTEwYzIwHhcNMjYwNzI5MDEwMTA4WhcNMjYwNzMwMDEwMTA4WjAzMTEwLwYDVQQD
EyhkOThlMThmNjEzMmFiNzI1MjAzZTEwZTMxNDliMDMzMGIyNmNhNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLqDYdUwQRQtYxdGlV8lDGgGGMpV
oIPeNyG0AHAbhUO/GQyRlYpYcDYRQbCYI2xh0nyrB3qU2+r04MpEQIiTPGiLji9j
XVJ+YPgyFpTGzqisxW5svLCUPcu5ZY3GUQF8Sqcn5Bu3dUWtGGNCGTuvirJuugPs
J2Rsk/T0yqmfZz9utYZwrSt7XW9KODihpe4m7fvEFLhOlpFtSrw+IHrcpyUpbM4c
QS9XdYSykHA4IhCfHLxUPhrzMosbnKkNkI0K5pWIVRWHvR6ngDA0HRX9jmhuoaui
fEVikoYrQxXLWGf4z3pNc96/piPRA/5UZKRQe5+kJE5AyHiC6Oo+UcKdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmOGPYTKrclID4Q4xSbAzCybKd7MB8GA1UdIwQY
MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt
NzNkMjE4YTQ5MDNlLzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl
LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe591e0It
OgjIBY6LEfOEB7a5h2Z5uhUhRgde9krlH1IsBo1rp9n3OfATfEoEemKaRzHkGHd2
McS+4eU6Pr4IFB0nAl1WtLxnKEIU36U8QyCWw5Z64KTq+gifBENk83DoMytHmkF3
pZe2xqGvneFkyhaNppLsjWM+UbpevXyOpyn9+8oRC3MNrQNreFG4eLz5ffUNb3VT
W8RFD7mzNezruK+AnXZrmsG4BnzysDb4Ip2DlZCrx7W7BpojSJ10WDkagITufqij
KGwIaUNlf0OcUXMOq3GgfYXzAaehBcu6FJoGPm11PEaOf/spdNEIdME7umO+sOnt
X6bQftrvEhVH2Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:50 2026 by rpki-client