Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
File: zqWzQQw5ccQthJmW1t5usSt-_7A.mft (raw, json)
Hash identifier: Joqi2xDy32uoQgHVCtIRt34NZmG39sjYmfMni8v72pM=
Subject key identifier: 40:F9:C8:0D:C6:C5:CF:9B:51:5D:87:22:EC:42:12:DA:88:4F:15:CA
Authority key identifier: CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
Certificate issuer: /CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Certificate serial: 019FA8995A588BD405EA21B53FDB7799F8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: 8HP5Xq8lrtqkn5h201-7okkzPq4.roa (hash: WP8g6JdUNh8+NUEE1ptFTokCNu2rtnQfuXAaBhtEymc=)
2: kGfuExTz52-sB1eMkLDsaAGePpw.asa (hash: z47BctNwAk2POTWeuHzhRwzuq2rLlRzJsQDmN61BdBM=)
3: kd2W9NlpugwG6NvnSXOzTzW0oQ8.roa (hash: Br98Z6at7igokOIBqZeHS6qV6L6XUe/YkPKiEMU2Ipw=)
4: zqWzQQw5ccQthJmW1t5usSt-_7A.crl (hash: 1+xnj5kEYxK4+QiPw2mh5U8I7sEESAvVV9HZIKASPPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5a:58:8b:d4:05:ea:21:b5:3f:db:77:99:f8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea5b3410c3971c42d849996d6de6eb12b7effb0
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=40f9c80dc6c5cf9b515d8722ec4212da884f15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:11:ed:8d:02:34:a5:12:7e:35:c4:10:47:
e8:0f:64:25:e2:46:ba:ab:f7:b4:58:77:89:e6:3d:
de:b3:46:75:14:91:8b:22:bc:c7:b6:e7:4d:53:d0:
f6:57:5e:01:68:63:1d:33:d0:84:d0:b1:6b:eb:42:
74:a6:aa:f7:a1:e5:b6:a9:3c:16:09:5b:ab:31:dc:
3c:9b:65:ce:58:d9:4e:72:bf:e4:12:1d:fb:7b:fb:
83:a0:e5:d8:f7:7f:af:3c:9e:c0:85:55:c4:8d:07:
0a:08:ca:f1:ca:b2:87:07:73:49:c4:33:db:08:1f:
47:8b:d1:94:61:57:e4:2f:aa:ac:de:70:ac:70:64:
16:61:a4:e4:8b:a8:84:da:9b:fe:fb:ae:b4:6a:6b:
7d:b1:00:7f:57:bf:03:8a:58:c0:3f:d1:19:fd:d1:
1c:fa:99:03:3e:01:1c:03:24:18:fd:0b:6a:c7:74:
2d:22:38:cb:c0:e1:2b:88:1e:df:5b:d9:10:ef:1e:
d9:81:7f:77:73:70:2a:08:95:f8:ba:fa:f0:c5:bf:
b0:0b:7b:6f:f2:37:56:bc:43:3a:c7:ef:d8:8c:78:
17:33:ab:bd:14:e0:57:13:a1:5e:d6:f0:4e:aa:57:
7c:c5:1f:e6:ed:a7:fe:34:fd:ad:1e:88:7e:b8:1e:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:C8:0D:C6:C5:CF:9B:51:5D:87:22:EC:42:12:DA:88:4F:15:CA
X509v3 Authority Key Identifier:
keyid:CE:A5:B3:41:0C:39:71:C4:2D:84:99:96:D6:DE:6E:B1:2B:7E:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqWzQQw5ccQthJmW1t5usSt-_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/zqWzQQw5ccQthJmW1t5usSt-_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:99:94:6e:89:14:98:19:ec:35:66:ad:1f:d0:d8:e9:3c:77:
58:79:bd:51:5b:77:fc:36:4f:87:09:5c:42:e5:c5:e9:69:9f:
13:f4:2c:0f:5e:1a:8d:98:0b:3b:c8:bd:63:c7:57:5b:45:78:
c8:ee:a5:f2:02:24:e4:81:35:52:09:28:38:25:b6:b3:b9:6a:
18:5d:f7:7d:18:6c:91:ec:a4:c3:cd:0e:e6:50:af:99:25:45:
61:10:eb:bd:d5:81:15:cf:ad:3f:a8:4a:db:88:19:8c:aa:aa:
7a:44:d1:ae:ef:db:2c:5a:ce:52:dc:30:6e:45:ad:2d:39:ed:
22:aa:83:d6:c0:0c:42:5b:41:f7:0e:6e:0e:d9:ed:2a:d6:67:
b2:01:78:27:0b:1b:55:2a:65:b7:f1:94:46:07:1c:b1:d8:4c:
11:e0:f4:6b:c5:a3:76:08:b5:98:c6:41:4d:a3:5d:27:c1:96:
41:e8:fb:6a:1a:e2:f1:92:fa:71:f6:9a:c3:00:4c:b4:ee:2b:
b2:01:81:39:41:09:da:ed:2a:d7:9e:88:c6:13:9d:3c:5c:94:
54:d0:85:34:0a:7f:cc:21:62:e7:f2:71:3c:34:22:0a:13:7a:
c5:18:a6:43:56:9a:25:f3:bc:4a:30:bc:4a:69:31:2e:ed:3b:
4e:c5:58:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omVpYi9QF6iG1P9t3mfjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTViMzQxMGMzOTcxYzQyZDg0OTk5NmQ2ZGU2ZWIxMmI3
ZWZmYjAwHhcNMjYwNzI4MTIwMDUwWhcNMjYwNzI5MTIwMDUwWjAzMTEwLwYDVQQD
Eyg0MGY5YzgwZGM2YzVjZjliNTE1ZDg3MjJlYzQyMTJkYTg4NGYxNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshwR7Y0CNKUSfjXEEEfoD2Ql4ka6
q/e0WHeJ5j3es0Z1FJGLIrzHtudNU9D2V14BaGMdM9CE0LFr60J0pqr3oeW2qTwW
CVurMdw8m2XOWNlOcr/kEh37e/uDoOXY93+vPJ7AhVXEjQcKCMrxyrKHB3NJxDPb
CB9Hi9GUYVfkL6qs3nCscGQWYaTki6iE2pv++660amt9sQB/V78DiljAP9EZ/dEc
+pkDPgEcAyQY/Qtqx3QtIjjLwOEriB7fW9kQ7x7ZgX93c3AqCJX4uvrwxb+wC3tv
8jdWvEM6x+/YjHgXM6u9FOBXE6Fe1vBOqld8xR/m7af+NP2tHoh+uB7JZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED5yA3Gxc+bUV2HIuxCEtqITxXKMB8GA1UdIwQY
MBaAFM6ls0EMOXHELYSZltbebrErfv+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFXelFRdzVjY1F0aEptVzF0NXVzU3QtXzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYt
Zjc4YzIyMDY1NzVhLzEvenFXelFRdzVjY1F0aEptVzF0NXVzU3QtXzdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYtZjc4YzIyMDY1NzVh
LzEvenFXelFRdzVjY1F0aEptVzF0NXVzU3QtXzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5mUbokU
mBnsNWatH9DY6Tx3WHm9UVt3/DZPhwlcQuXF6WmfE/QsD14ajZgLO8i9Y8dXW0V4
yO6l8gIk5IE1UgkoOCW2s7lqGF33fRhskeykw80O5lCvmSVFYRDrvdWBFc+tP6hK
24gZjKqqekTRru/bLFrOUtwwbkWtLTntIqqD1sAMQltB9w5uDtntKtZnsgF4Jwsb
VSplt/GURgccsdhMEeD0a8Wjdgi1mMZBTaNdJ8GWQej7ahri8ZL6cfaawwBMtO4r
sgGBOUEJ2u0q156IxhOdPFyUVNCFNAp/zCFi5/JxPDQiChN6xRimQ1aaJfO8SjC8
SmkxLu07TsVYtA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:54 2026 by rpki-client