
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: iJCUG9KFQMOmIQMgi6EfERpC1J/cDKFPFjLvvKJ2BnQ=
Subject key identifier: 63:44:35:F0:49:1C:57:CF:1A:D5:6F:DA:BC:4F:A1:AD:B3:37:FD:47
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 019FAA87A32B7DD22ABDF19B6174A832EEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 04B2
Signing time: Tue 28 Jul 2026 21:00:43 +0000
Manifest this update: Tue 28 Jul 2026 21:00:43 +0000
Manifest next update: Wed 29 Jul 2026 21:00:43 +0000
Files and hashes: 1: 2z-c3MpGdlvNK98wFJ-FhUpQXTk.roa (hash: jD+P5ccWJZqhrEzl8gpwfaAxbm2916uuSP5OIhhxw0M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: ExTKbnFokIxynibRTc8ZP+Q0pnIyBXied6OZe2pkhc4=)
3: nLrwE_Xuj7FEwaVr2PMMyDOjcsM.roa (hash: CdwJHzzCL/DT7oBvlE4BtdzceymGADOR4McXAN25EBU=)
4: zyBvK059nS2Wwp2gBqWo7Jx-YsI.roa (hash: YgqvlJooFLvwv+N90i8hB60uaCFF3pjZWTtq+9rP5ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:a3:2b:7d:d2:2a:bd:f1:9b:61:74:a8:32:ee:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Jul 28 21:00:43 2026 GMT
Not After : Jul 29 21:00:43 2026 GMT
Subject: CN=634435f0491c57cf1ad56fdabc4fa1adb337fd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:9f:e9:76:74:1b:7e:2a:2a:03:d8:d2:9b:
ef:b0:72:cc:db:b6:78:06:ff:33:e0:7f:eb:d1:e4:
a0:3d:8c:d1:99:6e:39:f3:1d:47:79:30:29:24:ed:
e2:c5:2c:f8:21:69:ae:69:62:6f:cc:18:20:76:71:
18:df:27:d2:78:01:e0:65:67:68:f6:b7:21:73:62:
2f:a1:3b:5d:6e:ea:ec:80:d7:bd:22:6d:ce:5c:d6:
08:c4:1b:1d:fd:94:2c:60:2a:99:18:68:fe:8f:a1:
24:e5:f6:b2:4a:c4:75:e1:99:fd:85:f1:81:a9:29:
4f:0b:0a:34:53:36:46:86:6b:cf:bd:79:3d:b7:28:
af:92:4d:d6:47:e0:ff:3f:4b:69:8f:79:a7:1d:15:
c7:f3:e0:c9:db:6a:5a:52:9d:2b:cc:2b:95:10:7f:
36:da:19:57:65:f3:47:c5:d4:f1:ba:d7:2d:7c:af:
d5:17:1d:9e:04:ef:31:9a:3a:02:37:5b:4b:68:56:
80:25:95:9c:2d:04:60:b9:a5:83:03:78:96:15:2f:
3f:e9:4f:ef:22:f6:ae:20:5f:cd:d0:4a:02:81:62:
94:ad:c7:10:e5:48:79:84:00:b6:57:c2:52:51:aa:
b5:ab:68:d7:84:eb:e7:91:c9:bb:6c:91:cd:52:20:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:44:35:F0:49:1C:57:CF:1A:D5:6F:DA:BC:4F:A1:AD:B3:37:FD:47
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:68:36:5b:e1:74:39:36:60:42:f4:c0:08:da:02:47:44:4f:
9d:25:0b:10:33:45:19:98:f8:3b:6f:8c:bf:e9:1e:ad:e6:32:
f1:2c:ac:61:70:0c:c1:f6:28:16:2c:13:51:55:af:8c:4f:37:
25:fc:38:94:9d:91:14:fd:87:f8:9d:9e:98:0b:a2:5a:87:b8:
5e:db:ca:ec:7c:30:86:5e:af:10:a2:10:e2:a8:3c:1e:66:00:
eb:2b:d1:26:90:38:c6:c0:48:7d:62:44:ab:c5:d2:54:dd:f4:
42:49:53:ff:ab:68:49:58:7f:28:34:b8:51:11:25:52:55:b2:
6e:f3:e9:2e:31:cc:68:8e:4a:10:7e:de:91:07:da:95:7b:df:
62:22:36:1d:b6:3f:fe:b3:55:79:9d:12:7e:ab:29:a0:9f:83:
a2:e7:14:b6:ba:1a:11:b6:a8:45:4e:1e:37:0e:15:77:62:e1:
56:38:08:77:7a:68:ee:a5:c2:21:01:f4:83:d7:ed:93:a2:73:
ab:10:f5:0d:d0:b9:24:01:07:e7:04:bc:a4:19:11:4f:2c:5d:
c6:ed:3c:5d:81:5b:49:de:21:43:69:40:c9:99:55:9c:86:7d:
84:02:5f:c0:cc:cd:82:ee:7b:4c:ba:1a:94:58:5a:7b:40:e2:
4d:75:19:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh6MrfdIqvfGbYXSoMu6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Mzc3OWU2YTc3YzdlNTgyMTMxOTg3NjRjZTJhYzBlNmJl
ZTYyMzYwHhcNMjYwNzI4MjEwMDQzWhcNMjYwNzI5MjEwMDQzWjAzMTEwLwYDVQQD
Eyg2MzQ0MzVmMDQ5MWM1N2NmMWFkNTZmZGFiYzRmYTFhZGIzMzdmZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4qf6XZ0G34qKgPY0pvvsHLM27Z4
Bv8z4H/r0eSgPYzRmW458x1HeTApJO3ixSz4IWmuaWJvzBggdnEY3yfSeAHgZWdo
9rchc2IvoTtdbursgNe9Im3OXNYIxBsd/ZQsYCqZGGj+j6Ek5faySsR14Zn9hfGB
qSlPCwo0UzZGhmvPvXk9tyivkk3WR+D/P0tpj3mnHRXH8+DJ22paUp0rzCuVEH82
2hlXZfNHxdTxutctfK/VFx2eBO8xmjoCN1tLaFaAJZWcLQRguaWDA3iWFS8/6U/v
IvauIF/N0EoCgWKUrccQ5Uh5hAC2V8JSUaq1q2jXhOvnkcm7bJHNUiCO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNENfBJHFfPGtVv2rxPoa2zN/1HMB8GA1UdIwQY
MBaAFEc3eeanfH5YITGYdkzirA5r7mI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEt
NThkNjY0MjEwNjY5LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEtNThkNjY0MjEwNjY5
LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2g2W+F0
OTZgQvTACNoCR0RPnSULEDNFGZj4O2+Mv+kereYy8SysYXAMwfYoFiwTUVWvjE83
Jfw4lJ2RFP2H+J2emAuiWoe4XtvK7Hwwhl6vEKIQ4qg8HmYA6yvRJpA4xsBIfWJE
q8XSVN30QklT/6toSVh/KDS4URElUlWybvPpLjHMaI5KEH7ekQfalXvfYiI2HbY/
/rNVeZ0SfqspoJ+DoucUtroaEbaoRU4eNw4Vd2LhVjgId3po7qXCIQH0g9ftk6Jz
qxD1DdC5JAEH5wS8pBkRTyxdxu08XYFbSd4hQ2lAyZlVnIZ9hAJfwMzNgu57TLoa
lFhae0DiTXUZ0g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:18 2026 by rpki-client