Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File: RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier: 11ZILeoo/f3HGGeF+Z/HniNwNVXrIJEugr3jTo3Y4NY=
Subject key identifier: A8:02:A9:F7:B3:6C:EE:D6:5C:E0:AC:A3:EC:27:DB:42:53:EF:7D:1B
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer: /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial: 019FACE3FA0D13BDE5977DA6A48BECD39573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 08:00:49 +0000
Manifest this update: Wed 29 Jul 2026 08:00:49 +0000
Manifest next update: Thu 30 Jul 2026 08:00:49 +0000
Files and hashes: 1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: EDn4TLfHMuyD2u2h3k4mpeqmt5asVaGJ6KnGwPSTaT0=)
2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:fa:0d:13:bd:e5:97:7d:a6:a4:8b:ec:d3:95:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
Validity
Not Before: Jul 29 08:00:49 2026 GMT
Not After : Jul 30 08:00:49 2026 GMT
Subject: CN=a802a9f7b36ceed65ce0aca3ec27db4253ef7d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:66:9d:1d:57:17:52:51:56:28:1b:47:74:
60:a9:22:8b:e5:0b:57:8b:ed:0d:fa:ec:78:c4:99:
46:95:24:db:ce:fa:3d:46:7a:9b:d9:25:c3:7c:56:
ce:90:d8:a1:0f:32:07:11:c3:48:80:81:d5:11:ad:
1e:58:6a:8e:4e:d3:c6:04:da:cd:46:13:ea:95:34:
5e:7b:9c:87:75:cc:89:62:e6:4c:96:22:82:3f:92:
15:56:78:c2:96:a6:a5:a6:c2:4d:86:82:a1:da:ca:
af:32:45:f0:74:e7:98:d9:84:76:dd:76:6c:e0:83:
a5:29:9a:d5:a7:fc:a5:68:05:21:f4:67:ac:27:cf:
d8:5c:cb:2b:84:fb:09:f0:12:40:08:66:6b:c6:99:
18:e2:a8:ac:8f:7c:be:eb:c3:7b:b5:5e:33:31:3d:
3d:02:b8:a5:8c:f8:63:a8:fa:b7:08:48:03:b9:21:
b8:6c:e6:cd:25:78:61:af:71:1d:bd:30:d2:16:f7:
e6:5e:14:05:69:44:8d:64:ca:3e:3b:5e:29:9b:9a:
f1:2f:b4:22:e1:3b:b8:86:d4:55:12:f4:87:63:36:
3b:5f:c2:4f:ac:21:31:74:8f:07:54:89:9b:2d:70:
61:9d:4a:78:bb:8c:a6:0c:b9:44:59:38:79:04:f4:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:A9:F7:B3:6C:EE:D6:5C:E0:AC:A3:EC:27:DB:42:53:EF:7D:1B
X509v3 Authority Key Identifier:
keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bf:91:a8:36:25:05:3c:de:31:ee:a9:73:30:cb:59:76:eb:
24:c1:5b:80:aa:fc:95:f6:29:e1:a6:50:ab:fc:3b:99:74:b6:
04:6b:89:23:42:b3:f6:bb:96:e2:9c:3e:75:79:2a:d0:83:c8:
d4:e4:dd:16:88:e7:2f:d8:a4:89:ac:69:9b:0e:a7:0d:6c:a1:
3d:38:c8:c5:80:42:71:55:9a:4e:3d:b2:9b:1a:17:13:20:01:
18:6a:9b:af:46:20:15:b7:50:7e:c4:7e:5d:e1:87:b5:99:9c:
c2:25:2c:06:25:da:16:4a:d7:f3:91:83:05:26:82:9d:01:b9:
98:d9:ac:05:2e:26:d8:7b:ea:55:41:4e:e7:71:29:4f:2e:de:
37:8c:da:b3:80:9c:a8:1b:c4:30:12:08:31:36:94:2d:62:76:
16:d1:18:29:a7:87:58:c3:c6:a7:77:62:85:01:4b:6b:c6:fa:
a9:6e:f6:91:66:dd:31:5c:d1:48:27:94:4c:20:57:fd:7d:a9:
a4:68:8f:a3:65:9c:26:e4:38:3f:fb:9b:54:0a:72:06:0f:f4:
fc:c0:77:d9:b7:90:b6:27:db:42:35:6d:40:84:73:f0:28:b4:
14:bc:0b:f4:5f:7a:77:48:62:70:07:3f:46:b1:17:89:6e:0a:
85:74:eb:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s4/oNE73ll32mpIvs05VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzE2MzUyN2U4MzU0MmRjZTY5M2IxNmQwYWVkY2QxMjZk
MzMxOWEwHhcNMjYwNzI5MDgwMDQ5WhcNMjYwNzMwMDgwMDQ5WjAzMTEwLwYDVQQD
EyhhODAyYTlmN2IzNmNlZWQ2NWNlMGFjYTNlYzI3ZGI0MjUzZWY3ZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysJmnR1XF1JRVigbR3RgqSKL5QtX
i+0N+ux4xJlGlSTbzvo9Rnqb2SXDfFbOkNihDzIHEcNIgIHVEa0eWGqOTtPGBNrN
RhPqlTRee5yHdcyJYuZMliKCP5IVVnjClqalpsJNhoKh2sqvMkXwdOeY2YR23XZs
4IOlKZrVp/ylaAUh9GesJ8/YXMsrhPsJ8BJACGZrxpkY4qisj3y+68N7tV4zMT09
AriljPhjqPq3CEgDuSG4bObNJXhhr3EdvTDSFvfmXhQFaUSNZMo+O14pm5rxL7Qi
4Tu4htRVEvSHYzY7X8JPrCExdI8HVImbLXBhnUp4u4ymDLlEWTh5BPT49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgCqfezbO7WXOCso+wn20JT730bMB8GA1UdIwQY
MBaAFEcxY1J+g1Qtzmk7FtCu3NEm0zGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDIt
OWEzODQxOTY3MTgxLzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hYjIzODktOGQzNi00M2ZlLWFmNDItOWEzODQxOTY3MTgx
LzEvUnpGalVuNkRWQzNPYVRzVzBLN2MwU2JUTVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAor+RqDYl
BTzeMe6pczDLWXbrJMFbgKr8lfYp4aZQq/w7mXS2BGuJI0Kz9ruW4pw+dXkq0IPI
1OTdFojnL9ikiaxpmw6nDWyhPTjIxYBCcVWaTj2ymxoXEyABGGqbr0YgFbdQfsR+
XeGHtZmcwiUsBiXaFkrX85GDBSaCnQG5mNmsBS4m2HvqVUFO53EpTy7eN4zas4Cc
qBvEMBIIMTaULWJ2FtEYKaeHWMPGp3dihQFLa8b6qW72kWbdMVzRSCeUTCBX/X2p
pGiPo2WcJuQ4P/ubVApyBg/0/MB32beQtifbQjVtQIRz8Ci0FLwL9F96d0hicAc/
RrEXiW4KhXTr7g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:29:02 2026 by rpki-client