Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
File: ZfaZywqf4QlubWiLmxNlstPBQIE.mft (raw, json)
Hash identifier: AEkKXwJgd21G2MuSYGKrkjDqcY+yMmlNYGFMaaviUAY=
Subject key identifier: 09:C4:FD:E0:DD:7F:B6:E8:31:AC:C1:52:2F:89:BA:9A:B5:F6:10:7B
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 019FA7500EAA03BB2674A16CD2FABCCBF1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
Manifest number: 24
Signing time: Tue 28 Jul 2026 06:01:09 +0000
Manifest this update: Tue 28 Jul 2026 06:01:09 +0000
Manifest next update: Wed 29 Jul 2026 06:01:09 +0000
Files and hashes: 1: DDJwtFmm8kn6cZxHckqfLF7eCLo.asa (hash: Yvb1SWAHrRXt2hx96BcMIcdwwEMJ7H1WT0MPBJI3EnA=)
2: ZfaZywqf4QlubWiLmxNlstPBQIE.crl (hash: jUcJuaZjQn24z8FEXPjGlE2S8o6KI9IUCNcbCQjlR1c=)
3: yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa (hash: RGL/uaPbj1P9rnlKrXMsj0QrwOf5G6N6ob7tSgI7xu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:50:0e:aa:03:bb:26:74:a1:6c:d2:fa:bc:cb:f1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Jul 28 06:01:09 2026 GMT
Not After : Jul 29 06:01:09 2026 GMT
Subject: CN=09c4fde0dd7fb6e831acc1522f89ba9ab5f6107b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:f1:f3:6c:13:84:35:ad:56:34:a5:3a:6d:
bd:0e:62:6c:55:b5:22:23:63:97:91:9e:96:79:77:
5c:b7:c8:39:fb:bc:e4:5d:0f:d5:82:25:3d:8a:21:
f6:58:44:cd:b7:f9:d3:3d:f7:5e:6b:ea:ec:c8:7f:
65:f7:51:3a:43:f6:ea:09:41:c9:24:37:d0:19:18:
80:b1:44:d2:d1:ef:4d:5e:f6:70:76:3b:40:86:10:
27:d3:09:5c:7c:cd:0e:df:e1:e7:d7:dd:5a:9c:1d:
fd:07:7a:6a:b0:4b:d2:ce:de:de:45:be:12:64:09:
f8:b8:c5:91:66:88:8b:25:c0:77:b0:ea:ab:cb:4e:
b1:b1:43:94:ac:a9:20:29:2c:9b:b0:7c:d5:9e:94:
5d:3f:80:31:00:14:b4:a4:6a:0f:9b:49:1d:84:69:
71:ef:c3:98:19:52:52:ae:d4:df:ee:f7:a0:be:6d:
7c:44:02:b6:74:0d:8a:34:ab:6f:ea:1c:ca:cd:a4:
a2:63:3a:45:e8:12:92:ff:24:ee:14:85:68:9e:e3:
dc:c6:d7:e4:27:f6:d9:e8:e5:4a:22:90:0d:91:df:
19:18:96:63:75:8f:9f:21:aa:4f:27:bb:f1:d3:99:
5a:7a:e5:95:45:5f:1a:f8:21:d9:73:49:41:dc:92:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:FD:E0:DD:7F:B6:E8:31:AC:C1:52:2F:89:BA:9A:B5:F6:10:7B
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:31:64:a4:9b:7b:ca:03:9f:c0:13:2d:3b:1d:41:2f:05:
35:de:83:e4:3a:ee:6d:6f:01:11:31:0d:df:b9:85:d0:4b:8e:
cd:29:b3:d6:9e:b0:ab:6a:e4:77:3a:bf:b5:fa:b1:7e:28:b8:
9c:82:62:1d:c8:f9:3d:2a:a7:e0:42:e9:c5:e5:58:d3:d1:11:
7c:38:0e:93:43:f7:04:55:1b:67:6e:0a:be:c4:aa:5b:3a:b0:
22:a5:8f:34:f3:6b:87:03:03:04:72:b9:83:31:55:13:17:6c:
e5:a1:41:79:34:33:5a:66:88:a1:a1:e5:a5:a6:ac:a7:c4:8e:
32:5e:00:c6:24:40:9b:6b:94:fa:9b:3c:d6:28:49:60:9c:ed:
c7:7b:dd:48:60:32:07:9b:4e:58:9a:93:eb:29:ac:1a:f3:b8:
9d:57:0f:4d:20:c1:df:09:60:95:b3:4e:6c:e3:70:28:fe:e4:
f9:10:09:ed:41:25:63:74:39:c1:50:53:2f:ef:4e:98:75:64:
23:fd:26:e6:5d:bb:b0:e6:f1:90:5c:b1:c6:f7:34:5d:cd:52:
af:2b:5f:e3:42:40:7f:be:27:73:80:02:34:69:89:54:fc:fc:
ab:66:38:f3:3b:df:d5:f5:5c:63:36:d6:eb:7a:cd:8c:36:c8:
32:56:38:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nUA6qA7smdKFs0vq8y/G2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZjY5OWNiMGE5ZmUxMDk2ZTZkNjg4YjliMTM2NWIyZDNj
MTQwODEwHhcNMjYwNzI4MDYwMTA5WhcNMjYwNzI5MDYwMTA5WjAzMTEwLwYDVQQD
EygwOWM0ZmRlMGRkN2ZiNmU4MzFhY2MxNTIyZjg5YmE5YWI1ZjYxMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Px82wThDWtVjSlOm29DmJsVbUi
I2OXkZ6WeXdct8g5+7zkXQ/VgiU9iiH2WETNt/nTPfdea+rsyH9l91E6Q/bqCUHJ
JDfQGRiAsUTS0e9NXvZwdjtAhhAn0wlcfM0O3+Hn191anB39B3pqsEvSzt7eRb4S
ZAn4uMWRZoiLJcB3sOqry06xsUOUrKkgKSybsHzVnpRdP4AxABS0pGoPm0kdhGlx
78OYGVJSrtTf7vegvm18RAK2dA2KNKtv6hzKzaSiYzpF6BKS/yTuFIVonuPcxtfk
J/bZ6OVKIpANkd8ZGJZjdY+fIapPJ7vx05laeuWVRV8a+CHZc0lB3JIg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnE/eDdf7boMazBUi+Jupq19hB7MB8GA1UdIwQY
MBaAFGX2mcsKn+EJbm1oi5sTZbLTwUCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZhWnl3cWY0UWx1YldpTG14TmxzdFBCUUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kMjc4MDgtMGJhNy00N2QwLTkwZTUt
OWRmNTlmNDRhM2M1LzEvWmZhWnl3cWY0UWx1YldpTG14TmxzdFBCUUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kMjc4MDgtMGJhNy00N2QwLTkwZTUtOWRmNTlmNDRhM2M1
LzEvWmZhWnl3cWY0UWx1YldpTG14TmxzdFBCUUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWwxZKSb
e8oDn8ATLTsdQS8FNd6D5DrubW8BETEN37mF0EuOzSmz1p6wq2rkdzq/tfqxfii4
nIJiHcj5PSqn4ELpxeVY09ERfDgOk0P3BFUbZ24KvsSqWzqwIqWPNPNrhwMDBHK5
gzFVExds5aFBeTQzWmaIoaHlpaasp8SOMl4AxiRAm2uU+ps81ihJYJztx3vdSGAy
B5tOWJqT6ymsGvO4nVcPTSDB3wlglbNObONwKP7k+RAJ7UElY3Q5wVBTL+9OmHVk
I/0m5l27sObxkFyxxvc0Xc1Srytf40JAf74nc4ACNGmJVPz8q2Y48zvf1fVcYzbW
63rNjDbIMlY4Rg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:01 2026 by rpki-client