Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: tMnmZVh5wZ35zmymZ3wUfO/gb3zAwcFffxqNrplxDgc=
Subject key identifier: 7F:05:A6:C6:F5:FA:B0:FC:CD:15:E8:BC:36:68:9E:C0:6D:1D:90:77
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019FAB62F6CB5407B8F27A2581FAD2D39FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 19DD
Signing time: Wed 29 Jul 2026 01:00:17 +0000
Manifest this update: Wed 29 Jul 2026 01:00:17 +0000
Manifest next update: Thu 30 Jul 2026 01:00:17 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: sTiW10S70VG/fQxFIAUl4T3+Vt+ywzjcvlMeP0Q2mZU=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:f6:cb:54:07:b8:f2:7a:25:81:fa:d2:d3:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jul 29 01:00:17 2026 GMT
Not After : Jul 30 01:00:17 2026 GMT
Subject: CN=7f05a6c6f5fab0fccd15e8bc36689ec06d1d9077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:4f:56:8a:3e:69:8c:00:8c:a1:6f:2e:d7:
ee:e4:76:16:11:bf:81:4a:44:f7:08:c2:13:8c:b6:
65:93:23:b9:b9:39:ba:60:96:bd:02:6c:a6:08:13:
bf:ef:d6:ab:38:b1:21:60:79:a9:3f:2e:84:0c:9d:
b7:a3:a3:e7:5f:50:16:15:81:9a:89:e1:13:b3:6f:
dd:90:32:b1:4d:7d:4f:f8:4a:18:e1:90:98:d2:7b:
72:0e:fe:3d:9d:b8:79:17:1f:00:d9:b8:a9:4f:3f:
c0:8d:38:07:ee:d7:7d:d7:fd:32:30:6b:34:1c:ee:
d7:be:1b:a7:6d:45:f7:ce:38:33:f9:d4:75:ef:3f:
6c:1f:cf:8d:d8:3a:f0:88:7f:dc:70:44:5f:d3:f4:
51:db:bd:e4:be:05:8a:fe:65:e0:8f:34:f4:da:b3:
83:bc:ac:fe:34:29:70:7b:ed:16:02:5c:e2:1c:2c:
09:72:c0:f0:49:99:45:a2:98:9f:fb:71:42:ec:b1:
d6:b3:c7:19:ee:95:11:07:bf:32:4a:11:bb:de:1f:
34:ab:c3:58:15:eb:8f:19:2f:78:8b:96:24:19:8f:
4d:aa:6b:4b:ed:87:fd:1f:c9:e8:9c:c4:ea:fb:53:
8f:b0:a1:40:2d:8d:03:2c:88:1e:1a:15:90:1b:5c:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:A6:C6:F5:FA:B0:FC:CD:15:E8:BC:36:68:9E:C0:6D:1D:90:77
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:69:af:25:31:2f:51:a2:0e:9a:e7:ed:31:73:0d:e2:54:7a:
b5:4a:48:35:52:24:74:a3:96:9f:32:aa:c7:cc:40:ab:d0:e2:
27:f3:98:7e:74:bc:f7:f8:3d:a0:08:a2:b5:aa:f1:76:4c:24:
a6:57:e1:ed:e5:9f:15:29:27:ba:ec:14:ed:b7:3d:46:f8:5a:
56:c7:e8:0f:a3:13:53:8f:23:cb:35:4d:76:4c:b6:95:3b:36:
15:33:2e:a1:d8:73:e3:20:82:62:cd:92:99:60:c6:ba:6d:bb:
b5:1f:14:c6:70:3e:59:1b:e0:1e:78:4c:07:ea:0e:01:be:80:
ed:10:f6:91:0c:2e:a7:a1:c6:dd:f0:6c:bc:4b:ec:a7:cf:27:
bf:d3:58:77:25:bb:83:3f:10:ae:c9:a7:d1:09:1b:6c:c5:77:
ab:c1:cd:42:9d:36:e0:57:ef:47:3a:7b:b3:ee:1f:81:69:25:
55:85:6a:6d:40:d5:4d:2d:f0:a7:5f:73:f7:97:dc:2c:16:8e:
c0:4d:87:0c:49:d3:83:d3:e3:86:14:7d:e1:dc:f4:0e:9f:cb:
bf:36:0e:9a:01:72:68:07:34:19:90:97:9a:b2:41:69:41:a1:
9b:24:c3:79:ff:55:e0:d3:78:a6:92:39:d7:22:b9:23:76:a9:
9e:cc:2a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYvbLVAe48nolgfrS05/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjYwNzI5MDEwMDE3WhcNMjYwNzMwMDEwMDE3WjAzMTEwLwYDVQQD
Eyg3ZjA1YTZjNmY1ZmFiMGZjY2QxNWU4YmMzNjY4OWVjMDZkMWQ5MDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO5PVoo+aYwAjKFvLtfu5HYWEb+B
SkT3CMITjLZlkyO5uTm6YJa9AmymCBO/79arOLEhYHmpPy6EDJ23o6PnX1AWFYGa
ieETs2/dkDKxTX1P+EoY4ZCY0ntyDv49nbh5Fx8A2bipTz/AjTgH7td91/0yMGs0
HO7XvhunbUX3zjgz+dR17z9sH8+N2DrwiH/ccERf0/RR273kvgWK/mXgjzT02rOD
vKz+NClwe+0WAlziHCwJcsDwSZlFopif+3FC7LHWs8cZ7pURB78yShG73h80q8NY
FeuPGS94i5YkGY9NqmtL7Yf9H8nonMTq+1OPsKFALY0DLIgeGhWQG1xaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8Fpsb1+rD8zRXovDZonsBtHZB3MB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmmvJTEv
UaIOmuftMXMN4lR6tUpINVIkdKOWnzKqx8xAq9DiJ/OYfnS89/g9oAiitarxdkwk
plfh7eWfFSknuuwU7bc9RvhaVsfoD6MTU48jyzVNdky2lTs2FTMuodhz4yCCYs2S
mWDGum27tR8UxnA+WRvgHnhMB+oOAb6A7RD2kQwup6HG3fBsvEvsp88nv9NYdyW7
gz8Qrsmn0QkbbMV3q8HNQp024FfvRzp7s+4fgWklVYVqbUDVTS3wp19z95fcLBaO
wE2HDEnTg9PjhhR94dz0Dp/LvzYOmgFyaAc0GZCXmrJBaUGhmyTDef9V4NN4ppI5
1yK5I3apnswqXw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:15 2026 by rpki-client