Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: BrygjoGm1Ky8v4OC3u2+7bOpLSqh/bjdHlbg/JVi7b4=
Subject key identifier: 16:2C:45:0B:3A:35:30:B9:DC:6A:DF:50:81:D7:24:5D:4B:0E:CB:28
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 019FAC3EF5BEDC388D7627579D11BE18D57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0FE9
Signing time: Wed 29 Jul 2026 05:00:35 +0000
Manifest this update: Wed 29 Jul 2026 05:00:35 +0000
Manifest next update: Thu 30 Jul 2026 05:00:35 +0000
Files and hashes: 1: Nl9enAQ5fxiyA3bgN-Zg8I6GiQM.roa (hash: A7OWUX4yXC7G/EYKNd9MidD+EY701iJQatSHjQ+zADU=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: Q2imokq2bcAwNDS79t1uRGIcEqSPV5mDLaWWYt4nbtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:f5:be:dc:38:8d:76:27:57:9d:11:be:18:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jul 29 05:00:35 2026 GMT
Not After : Jul 30 05:00:35 2026 GMT
Subject: CN=162c450b3a3530b9dc6adf5081d7245d4b0ecb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:58:fa:de:11:95:91:dc:77:77:9c:37:4d:
0d:41:b5:0f:79:ff:e8:7d:95:b2:eb:c5:51:c8:e3:
a4:59:67:76:0c:73:33:cd:dc:ae:98:ab:5a:11:c4:
10:f3:ca:4e:34:bb:e3:da:3b:d2:29:4e:5b:7f:55:
5e:78:fb:69:e4:c3:cb:ae:ea:20:e2:b3:1a:f1:4b:
81:a2:86:38:2e:0e:a9:7c:5c:8c:37:ac:a2:82:9b:
29:d1:06:87:e5:a5:71:73:87:10:4a:14:23:6e:2b:
f1:4a:aa:00:80:8f:63:90:c3:7e:4a:22:70:65:31:
64:b5:a8:fe:76:15:dc:71:be:39:00:a7:1e:b9:b5:
87:89:d5:0c:ea:0f:c9:43:e2:1e:9f:60:0d:30:de:
01:73:f1:26:d1:8b:ff:35:32:37:4c:5a:65:76:f0:
a9:f7:07:ca:0a:bd:1d:b7:7e:c2:b5:0d:5c:38:92:
ea:85:7a:e0:c6:38:15:71:8b:27:82:23:74:dc:60:
84:24:e2:97:7b:d5:38:21:d4:8b:db:99:03:66:8a:
53:18:06:3b:a2:12:ad:b9:32:cf:80:a5:2a:ce:26:
af:18:ed:6f:6e:7d:c6:4b:2b:6d:a6:70:4a:8e:d3:
da:d2:7a:4e:96:f7:fc:49:b2:a3:0e:75:71:95:0e:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:45:0B:3A:35:30:B9:DC:6A:DF:50:81:D7:24:5D:4B:0E:CB:28
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:54:ba:d5:cd:d8:b6:8d:51:ac:c4:1c:85:59:2d:8a:b9:d2:
99:67:0a:9a:9b:47:1a:f1:23:14:7d:48:cc:a0:66:2f:26:6c:
ec:8a:4d:1e:dd:61:24:49:4b:1a:2d:c3:86:4d:6e:d6:cc:59:
b9:b4:d1:39:9e:4d:90:c8:b9:7d:1e:be:ba:13:4e:bf:f9:c8:
0f:5a:23:34:6e:41:eb:7b:cf:44:5c:7e:6e:25:25:c5:d8:a2:
78:1d:b4:0b:da:cf:1f:da:0b:d7:6d:e8:9f:f7:84:28:7a:d2:
76:92:d9:e8:31:fd:7d:de:42:14:5c:43:8d:b1:08:49:e1:fd:
ac:49:80:45:4d:12:39:1d:22:3d:56:6b:e6:d7:43:8c:2f:8a:
41:e2:1f:bf:ca:f2:41:b3:36:7a:22:4e:03:10:1c:17:83:d2:
1c:24:f1:34:e9:9a:d4:00:ab:3c:50:a3:f0:d9:74:d0:27:9b:
ad:b7:4a:e7:97:29:d1:fb:c3:7f:a1:2c:1a:75:e4:2d:96:48:
7b:8f:46:66:08:e6:a9:ed:21:0f:7a:76:e0:00:57:f9:cb:ef:
ec:1c:eb:28:0e:a6:7a:ca:e2:76:98:60:ae:04:70:b2:f4:e4:
6f:90:b3:06:4f:e3:97:30:5d:6b:0c:dd:93:f3:bb:f5:69:ba:
c5:8e:0b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPvW+3DiNdidXnRG+GNV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTFjZWRmZTA4MjZmMGY5Nzc1YmRmYThlOTQyNTMwMGJk
ZTlmMTMwHhcNMjYwNzI5MDUwMDM1WhcNMjYwNzMwMDUwMDM1WjAzMTEwLwYDVQQD
EygxNjJjNDUwYjNhMzUzMGI5ZGM2YWRmNTA4MWQ3MjQ1ZDRiMGVjYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QZY+t4RlZHcd3ecN00NQbUPef/o
fZWy68VRyOOkWWd2DHMzzdyumKtaEcQQ88pONLvj2jvSKU5bf1VeePtp5MPLruog
4rMa8UuBooY4Lg6pfFyMN6yigpsp0QaH5aVxc4cQShQjbivxSqoAgI9jkMN+SiJw
ZTFktaj+dhXccb45AKceubWHidUM6g/JQ+Ien2ANMN4Bc/Em0Yv/NTI3TFpldvCp
9wfKCr0dt37CtQ1cOJLqhXrgxjgVcYsngiN03GCEJOKXe9U4IdSL25kDZopTGAY7
ohKtuTLPgKUqziavGO1vbn3GSyttpnBKjtPa0npOlvf8SbKjDnVxlQ6hpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYsRQs6NTC53GrfUIHXJF1LDssoMB8GA1UdIwQY
MBaAFGfhzt/ggm8Pl3W9+o6UJTAL3p8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEt
ZWM5Yjc1NTIxMjk3LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEtZWM5Yjc1NTIxMjk3
LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFS61c3Y
to1RrMQchVktirnSmWcKmptHGvEjFH1IzKBmLyZs7IpNHt1hJElLGi3Dhk1u1sxZ
ubTROZ5NkMi5fR6+uhNOv/nID1ojNG5B63vPRFx+biUlxdiieB20C9rPH9oL123o
n/eEKHrSdpLZ6DH9fd5CFFxDjbEISeH9rEmARU0SOR0iPVZr5tdDjC+KQeIfv8ry
QbM2eiJOAxAcF4PSHCTxNOma1ACrPFCj8Nl00CebrbdK55cp0fvDf6EsGnXkLZZI
e49GZgjmqe0hD3p24ABX+cvv7BzrKA6mesridphgrgRwsvTkb5CzBk/jlzBdawzd
k/O79Wm6xY4LFg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:10 2026 by rpki-client