Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
File: _ZRaQP7pGQtdrjV1RenSN91_Kr0.mft (raw, json)
Hash identifier: FUMOzHFFZL3b9xLWW+LPvH1vG9c9SGnmgTEsdSi6SQ8=
Subject key identifier: 0B:CE:62:B1:4E:74:96:58:88:10:62:91:7A:15:BA:AA:8E:EB:C5:C9
Authority key identifier: FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
Certificate issuer: /CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Certificate serial: 019FAC75F0848F0E43F8E08C399B8231BC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:38 +0000
Manifest this update: Wed 29 Jul 2026 06:00:38 +0000
Manifest next update: Thu 30 Jul 2026 06:00:38 +0000
Files and hashes: 1: FneKNxnzANLquvs5RDh285FbFjo.roa (hash: wM7MaFPVmqdgH2laeuL0dQ1Y/ck3S2iV1sW46582MtM=)
2: _ZRaQP7pGQtdrjV1RenSN91_Kr0.crl (hash: RHUuWg60FiG4NzomkQfEOHF7w1lZZw9A8pqefxaNUzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f0:84:8f:0e:43:f8:e0:8c:39:9b:82:31:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Validity
Not Before: Jul 29 06:00:38 2026 GMT
Not After : Jul 30 06:00:38 2026 GMT
Subject: CN=0bce62b14e749658881062917a15baaa8eebc5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:81:47:de:ff:09:e3:9a:7a:92:37:e2:7a:
af:99:f1:8d:31:9a:7d:3f:0e:af:bb:d4:75:f8:6a:
b9:fa:d8:73:31:f4:d4:01:92:8f:b5:9e:bb:43:01:
57:f5:00:ca:df:7c:0c:a2:c4:72:6d:43:9d:39:2b:
a8:22:05:32:82:fe:80:c6:7d:e6:3b:af:73:57:60:
c4:35:49:f1:60:89:1e:65:01:dc:4d:bd:5c:eb:20:
3f:5a:ba:ec:4d:77:75:1b:62:bd:d7:e6:3a:17:86:
de:bb:00:ed:bc:98:39:fb:45:a7:a5:15:86:8b:27:
50:7e:ea:80:ac:33:10:88:9c:08:69:35:33:2b:da:
f1:b8:65:51:45:75:a4:b0:18:5f:21:5d:bb:6a:07:
59:77:30:a4:6a:58:b8:c4:84:d3:64:98:3b:7d:78:
2b:85:a7:3e:fa:74:b7:83:6e:06:c6:45:97:97:f3:
0c:6f:17:41:7b:08:96:4e:26:9a:21:03:4e:7e:1f:
ea:24:b7:64:cf:60:73:57:63:0c:a3:85:28:6a:31:
cf:41:81:3c:48:28:01:a8:8e:0a:0d:f8:2b:f2:fa:
e2:4d:e5:c2:aa:14:4f:94:55:05:bd:7c:d5:da:69:
5c:3c:79:53:d7:23:27:13:1d:f9:51:1d:3e:53:7e:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:62:B1:4E:74:96:58:88:10:62:91:7A:15:BA:AA:8E:EB:C5:C9
X509v3 Authority Key Identifier:
keyid:FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7a:6d:f0:77:18:bc:f9:05:ea:b6:cc:c6:74:c6:59:1b:8f:
f7:d8:04:ee:f0:13:9b:39:77:4e:9d:cd:06:0b:e4:4e:a0:9f:
8d:55:a2:0e:ca:bc:5d:ec:2a:8f:4e:f0:4a:f5:e1:3d:65:80:
27:d2:f9:73:8f:7c:8d:c0:6e:50:a7:d1:bc:e8:08:bb:ec:6c:
04:ee:df:a6:fc:d2:97:a1:ac:c5:ce:85:81:08:cf:a3:d1:c7:
cc:f8:61:cb:7e:19:e9:4a:5e:1b:a8:cc:e5:54:78:c7:f7:21:
aa:c9:a0:e4:50:7b:97:b8:d1:14:52:31:28:62:28:05:91:88:
14:2f:ac:37:b8:51:bc:be:b2:10:8c:49:33:5a:4a:06:04:f3:
1d:59:0e:57:9f:93:c2:1a:1b:61:a4:9d:94:ec:92:d5:48:52:
e3:d1:2e:74:f8:a0:09:e4:24:d3:68:a9:db:99:ef:93:cd:c5:
6d:8b:c3:a4:2a:58:9f:0f:4b:48:f9:5a:48:98:77:39:88:0a:
ec:87:bd:33:87:90:fd:3d:41:71:d1:9e:f8:26:bb:75:1e:71:
59:5d:8b:d0:36:43:36:88:be:3a:ba:79:4e:57:cf:cc:81:27:
31:56:4b:25:8e:36:df:b1:1f:1f:20:16:e3:bd:16:ae:3a:57:
5b:96:11:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdfCEjw5D+OCMOZuCMbyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOTQ1YTQwZmVlOTE5MGI1ZGFlMzU3NTQ1ZTlkMjM3ZGQ3
ZjJhYmQwHhcNMjYwNzI5MDYwMDM4WhcNMjYwNzMwMDYwMDM4WjAzMTEwLwYDVQQD
EygwYmNlNjJiMTRlNzQ5NjU4ODgxMDYyOTE3YTE1YmFhYThlZWJjNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk26BR97/CeOaepI34nqvmfGNMZp9
Pw6vu9R1+Gq5+thzMfTUAZKPtZ67QwFX9QDK33wMosRybUOdOSuoIgUygv6Axn3m
O69zV2DENUnxYIkeZQHcTb1c6yA/WrrsTXd1G2K91+Y6F4beuwDtvJg5+0WnpRWG
iydQfuqArDMQiJwIaTUzK9rxuGVRRXWksBhfIV27agdZdzCkali4xITTZJg7fXgr
hac++nS3g24GxkWXl/MMbxdBewiWTiaaIQNOfh/qJLdkz2BzV2MMo4UoajHPQYE8
SCgBqI4KDfgr8vriTeXCqhRPlFUFvXzV2mlcPHlT1yMnEx35UR0+U36nBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvOYrFOdJZYiBBikXoVuqqO68XJMB8GA1UdIwQY
MBaAFP2UWkD+6RkLXa41dUXp0jfdfyq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHpt8HcY
vPkF6rbMxnTGWRuP99gE7vATmzl3Tp3NBgvkTqCfjVWiDsq8Xewqj07wSvXhPWWA
J9L5c498jcBuUKfRvOgIu+xsBO7fpvzSl6Gsxc6FgQjPo9HHzPhhy34Z6UpeG6jM
5VR4x/chqsmg5FB7l7jRFFIxKGIoBZGIFC+sN7hRvL6yEIxJM1pKBgTzHVkOV5+T
whobYaSdlOyS1UhS49EudPigCeQk02ip25nvk83FbYvDpCpYnw9LSPlaSJh3OYgK
7Ie9M4eQ/T1BcdGe+Ca7dR5xWV2L0DZDNoi+Orp5TlfPzIEnMVZLJY4237EfHyAW
470WrjpXW5YRPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:11 2026 by rpki-client