Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: w0ks1biLMECp4SQ7ps9QYZibagN4gCRM/2WBLCII5GI=
Subject key identifier: 96:B2:0C:35:B6:74:D6:AC:2A:58:66:32:F0:99:87:33:24:0F:0E:07
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019FAC770F58E5151E5809E57D2D18DFA24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 13F3
Signing time: Wed 29 Jul 2026 06:01:51 +0000
Manifest this update: Wed 29 Jul 2026 06:01:51 +0000
Manifest next update: Thu 30 Jul 2026 06:01:51 +0000
Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: CknT/AqGC1/iUnlk+vt9fNwmS2M24WXZNY0bfnik8iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:0f:58:e5:15:1e:58:09:e5:7d:2d:18:df:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jul 29 06:01:51 2026 GMT
Not After : Jul 30 06:01:51 2026 GMT
Subject: CN=96b20c35b674d6ac2a586632f0998733240f0e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:37:3e:dd:18:b2:5e:09:c1:d6:c2:4f:a4:
cb:ef:f8:99:dc:67:35:d8:1d:a2:c2:9f:18:09:ea:
30:40:0d:4d:a9:bd:89:f6:80:a3:e4:99:b1:eb:a2:
60:7d:a9:8d:74:80:0e:05:5f:14:74:f1:d9:bb:94:
65:19:b4:64:53:8b:94:82:49:bf:09:6f:a7:a2:93:
5a:18:8a:f7:8b:b9:7c:22:8b:a2:92:c6:a4:6b:ca:
dc:51:06:a6:27:fe:45:42:ef:f3:c4:58:54:f2:1e:
c0:59:52:c5:9d:37:f6:f5:c1:23:05:cd:39:32:34:
3e:31:70:2d:5c:49:7f:b8:39:83:77:a0:7d:f2:fd:
a9:ef:ac:ca:6e:cb:26:16:f4:59:d8:fd:e5:43:5e:
93:c1:d9:f8:10:fa:d7:2b:3f:1b:84:9a:2b:73:41:
cf:af:4d:10:ac:31:cd:cc:ff:56:c2:22:55:6b:8e:
5b:cc:42:d1:5f:10:b8:f0:be:dd:f7:6e:19:93:07:
f7:ae:cb:e8:2e:51:ee:27:65:37:2c:54:84:76:26:
f8:77:f7:64:9d:ca:65:cc:a0:00:1a:32:9d:c8:6f:
14:15:3d:17:33:2b:82:a5:96:9c:dc:78:e1:55:4e:
bd:9e:36:83:b0:20:34:c6:a4:b7:c5:79:64:57:27:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B2:0C:35:B6:74:D6:AC:2A:58:66:32:F0:99:87:33:24:0F:0E:07
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ec:65:43:e3:6b:c0:8b:a7:bf:d0:1b:6a:bf:59:32:e8:86:
75:da:1d:7a:7c:ac:14:30:23:78:4b:94:87:7b:2f:cb:f4:cc:
c9:86:e5:37:6a:52:cb:c1:c8:32:4f:f4:70:b4:40:81:21:b8:
cb:64:b6:42:bb:5b:70:0e:8f:4f:d0:df:d5:80:05:4e:09:00:
63:44:3c:97:39:50:8c:ef:6b:a5:c3:32:47:f2:43:fb:ea:9a:
64:db:44:89:00:c5:14:35:0b:be:bc:d8:62:28:df:1d:7e:4f:
09:65:ca:53:fb:ab:76:0a:62:8b:b6:f5:61:da:ef:ce:3c:52:
f3:cc:2c:65:ae:30:55:3c:f3:28:7a:66:4a:9d:12:90:c3:fa:
99:c5:40:31:d9:8f:bc:96:04:44:70:ba:18:67:94:48:5a:37:
18:26:f0:01:81:a0:9a:e5:54:be:05:ac:5b:ed:fa:27:d9:cd:
06:68:9e:4d:69:3d:a1:e0:ac:9e:d6:35:15:40:b8:6e:2b:8e:
96:16:7a:96:8c:91:c0:d2:a2:71:94:e0:6c:86:32:ff:08:b9:
ec:3d:c0:4e:5a:d3:2e:a9:ff:57:14:8c:9e:fa:94:e4:a9:af:
fd:df:77:a5:af:38:3a:5e:87:a8:6a:62:35:e6:55:cb:ed:f8:
59:25:39:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdw9Y5RUeWAnlfS0Y36JKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj
NTYwMjYwHhcNMjYwNzI5MDYwMTUxWhcNMjYwNzMwMDYwMTUxWjAzMTEwLwYDVQQD
Eyg5NmIyMGMzNWI2NzRkNmFjMmE1ODY2MzJmMDk5ODczMzI0MGYwZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue83Pt0Ysl4JwdbCT6TL7/iZ3Gc1
2B2iwp8YCeowQA1Nqb2J9oCj5Jmx66JgfamNdIAOBV8UdPHZu5RlGbRkU4uUgkm/
CW+nopNaGIr3i7l8Iouiksaka8rcUQamJ/5FQu/zxFhU8h7AWVLFnTf29cEjBc05
MjQ+MXAtXEl/uDmDd6B98v2p76zKbssmFvRZ2P3lQ16Twdn4EPrXKz8bhJorc0HP
r00QrDHNzP9WwiJVa45bzELRXxC48L7d924Zkwf3rsvoLlHuJ2U3LFSEdib4d/dk
ncplzKAAGjKdyG8UFT0XMyuCpZac3HjhVU69njaDsCA0xqS3xXlkVyefwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJayDDW2dNasKlhmMvCZhzMkDw4HMB8GA1UdIwQY
MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt
Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm
LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOxlQ+Nr
wIunv9Abar9ZMuiGddodenysFDAjeEuUh3svy/TMyYblN2pSy8HIMk/0cLRAgSG4
y2S2QrtbcA6PT9Df1YAFTgkAY0Q8lzlQjO9rpcMyR/JD++qaZNtEiQDFFDULvrzY
YijfHX5PCWXKU/urdgpii7b1YdrvzjxS88wsZa4wVTzzKHpmSp0SkMP6mcVAMdmP
vJYERHC6GGeUSFo3GCbwAYGgmuVUvgWsW+36J9nNBmieTWk9oeCsntY1FUC4biuO
lhZ6loyRwNKicZTgbIYy/wi57D3ATlrTLqn/VxSMnvqU5Kmv/d93pa84Ol6HqGpi
NeZVy+34WSU5mg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:16:30 2026 by rpki-client