Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
File: Z8ooyF9TcJI3VX3talTbfEODj98.mft (raw, json)
Hash identifier: YGt8Wa522pJ4FBdpFttU7L6k7rlRrIDY/HJ4dMKCVzs=
Subject key identifier: 7F:2B:E1:68:E0:A5:56:3B:9F:0B:A0:22:46:C5:58:07:9E:D0:C7:D6
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 019FA89A3D98338D16ACC8242781243C809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:48 +0000
Manifest this update: Tue 28 Jul 2026 12:01:48 +0000
Manifest next update: Wed 29 Jul 2026 12:01:48 +0000
Files and hashes: 1: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (hash: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=)
2: Z8ooyF9TcJI3VX3talTbfEODj98.crl (hash: 5Z1Gusb/crus2DG++U6mI/icusQ7ms0cSnZa6I2UPT0=)
3: tVnRYYZjjcF8Zb90VZauoKBz0VM.asa (hash: js5NtSgPh808PFkiRkghv7MP7EdL9RD16y2VNGbfdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3d:98:33:8d:16:ac:c8:24:27:81:24:3c:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Jul 28 12:01:48 2026 GMT
Not After : Jul 29 12:01:48 2026 GMT
Subject: CN=7f2be168e0a5563b9f0ba02246c558079ed0c7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:2f:4d:6c:26:94:57:56:f3:fa:ae:2a:35:
9c:2a:fc:4f:94:28:3d:13:3a:9b:ed:d2:ba:ef:40:
08:31:02:be:a1:f7:45:ff:e9:1f:96:25:63:a0:a4:
be:4a:54:d5:45:4b:50:d7:53:fe:3e:97:2d:d6:c8:
9d:06:d9:f7:dd:9f:e5:9f:28:e7:61:5d:b9:17:77:
a9:83:88:06:68:a8:6f:b6:58:09:d9:b6:8e:da:29:
91:35:d2:c1:92:a4:b6:85:75:fe:c1:5c:df:31:51:
9a:c8:72:d0:aa:8a:5b:06:5b:33:f9:af:d0:99:fb:
f0:2f:1e:4c:40:97:5d:2e:9f:f8:9b:da:8c:15:8e:
8c:c6:a0:0d:3f:06:a8:52:e9:71:73:27:e5:b9:fc:
d1:5d:b1:cb:73:ae:b0:ed:74:12:0c:4a:73:e5:e2:
fd:21:3c:77:29:75:0c:50:69:e2:c6:6b:4e:76:a6:
75:23:0b:96:e6:50:5b:6c:d5:25:15:67:dc:9d:0a:
64:99:e7:49:e0:e4:68:b2:82:e7:96:9b:43:98:b2:
ac:40:1f:30:23:e4:f5:c3:80:0c:8a:78:5b:9a:8c:
e0:7c:4e:e2:9b:b3:e4:0f:9b:07:70:db:e7:0e:63:
c7:ae:59:89:09:3f:fa:46:f1:5f:e8:32:47:ca:59:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:E1:68:E0:A5:56:3B:9F:0B:A0:22:46:C5:58:07:9E:D0:C7:D6
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ae:b9:b1:b5:a6:75:63:18:06:f6:72:b9:aa:ce:0c:b7:7b:
57:0b:6d:eb:80:5a:21:24:0c:78:6f:69:ef:08:10:50:ef:8f:
43:02:49:dd:cd:ba:e1:a3:a1:ae:60:3a:31:ed:9f:76:1d:3a:
c7:48:da:cf:5a:b9:b2:34:e4:df:6e:bf:2d:6e:de:a6:cb:24:
8b:e1:3d:02:0b:59:57:cf:71:ca:17:d7:77:fb:b1:c7:5d:8f:
cf:23:96:1b:e2:a9:5f:e1:77:5f:24:91:f3:55:3a:25:6f:2d:
0e:48:62:7e:be:7d:19:8e:c8:64:e3:43:0c:f7:3d:26:07:44:
56:a5:b6:f7:53:11:16:70:70:6b:18:ad:a3:96:9a:79:3e:ae:
b4:e1:6d:d2:ab:e9:fc:76:ac:15:af:8d:ce:ad:a9:0d:04:01:
eb:6b:d9:92:08:0e:fd:e8:06:3d:3b:12:ec:2b:bb:6f:76:49:
ee:86:a4:b7:19:10:10:54:da:30:2a:fc:2c:96:58:1f:30:fd:
38:23:37:2b:0f:64:cf:02:ba:2a:96:14:7d:d7:60:11:eb:d2:
5b:00:e4:db:b2:d2:38:8d:63:ae:1b:5f:72:74:a5:79:d6:23:
f9:95:c9:d1:a9:c6:7d:af:36:c1:19:da:c6:7c:12:f5:b2:53:
22:24:7e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omj2YM40WrMgkJ4EkPICfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2EyOGM4NWY1MzcwOTIzNzU1N2RlZDZhNTRkYjdjNDM4
MzhmZGYwHhcNMjYwNzI4MTIwMTQ4WhcNMjYwNzI5MTIwMTQ4WjAzMTEwLwYDVQQD
Eyg3ZjJiZTE2OGUwYTU1NjNiOWYwYmEwMjI0NmM1NTgwNzllZDBjN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZwvTWwmlFdW8/quKjWcKvxPlCg9
Ezqb7dK670AIMQK+ofdF/+kfliVjoKS+SlTVRUtQ11P+Ppct1sidBtn33Z/lnyjn
YV25F3epg4gGaKhvtlgJ2baO2imRNdLBkqS2hXX+wVzfMVGayHLQqopbBlsz+a/Q
mfvwLx5MQJddLp/4m9qMFY6MxqANPwaoUulxcyflufzRXbHLc66w7XQSDEpz5eL9
ITx3KXUMUGnixmtOdqZ1IwuW5lBbbNUlFWfcnQpkmedJ4ORosoLnlptDmLKsQB8w
I+T1w4AMinhbmozgfE7im7PkD5sHcNvnDmPHrlmJCT/6RvFf6DJHyllk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8r4WjgpVY7nwugIkbFWAee0MfWMB8GA1UdIwQY
MBaAFGfKKMhfU3CSN1V97WpU23xDg4/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhvb3lGOVRjSkkzVlgzdGFsVGJmRU9Eajk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kNzlmYmUtNjEzMi00M2JlLWI4YzMt
M2VlYTUxYWRiZDk0LzEvWjhvb3lGOVRjSkkzVlgzdGFsVGJmRU9Eajk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kNzlmYmUtNjEzMi00M2JlLWI4YzMtM2VlYTUxYWRiZDk0
LzEvWjhvb3lGOVRjSkkzVlgzdGFsVGJmRU9Eajk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQa65sbWm
dWMYBvZyuarODLd7Vwtt64BaISQMeG9p7wgQUO+PQwJJ3c264aOhrmA6Me2fdh06
x0jaz1q5sjTk326/LW7epsski+E9AgtZV89xyhfXd/uxx12PzyOWG+KpX+F3XySR
81U6JW8tDkhifr59GY7IZONDDPc9JgdEVqW291MRFnBwaxito5aaeT6utOFt0qvp
/HasFa+Nzq2pDQQB62vZkggO/egGPTsS7Cu7b3ZJ7oaktxkQEFTaMCr8LJZYHzD9
OCM3Kw9kzwK6KpYUfddgEevSWwDk27LSOI1jrhtfcnSledYj+ZXJ0anGfa82wRna
xnwS9bJTIiR+Yg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:35 2026 by rpki-client