Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
File: dZSaAgpSrHxVFICFzj7-LQKq09k.mft (raw, json)
Hash identifier: rqGFwv0tcjFh28ctVa6xSmBSKJiijxyCju4cCfXTMUo=
Subject key identifier: EA:13:34:03:D1:5B:19:62:F0:2C:67:70:D8:9F:E6:A8:31:87:33:D3
Authority key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Certificate issuer: /CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Certificate serial: 019FAA88A7D856F24F8394F250C8706A3C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:50 +0000
Manifest this update: Tue 28 Jul 2026 21:01:50 +0000
Manifest next update: Wed 29 Jul 2026 21:01:50 +0000
Files and hashes: 1: cfG8GDhSC5IbhMcmwnrArCxDK5A.roa (hash: FkrvdsSSTjBBdNtO3cQ3OTlfM00z/ndv4EdJpdqE/pM=)
2: dZSaAgpSrHxVFICFzj7-LQKq09k.crl (hash: Cj64XgOCYRpuCzwna6ahi3c33AWVn8aTOMj96Zs9do4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a7:d8:56:f2:4f:83:94:f2:50:c8:70:6a:3c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Validity
Not Before: Jul 28 21:01:50 2026 GMT
Not After : Jul 29 21:01:50 2026 GMT
Subject: CN=ea133403d15b1962f02c6770d89fe6a8318733d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:49:49:45:ca:4f:17:c1:c7:65:01:bf:e6:
e6:15:aa:2c:73:bb:ea:ee:19:8f:c7:44:ff:be:52:
7a:03:04:ca:1d:76:27:32:8d:f0:f5:64:20:9a:9b:
aa:ff:de:4d:4d:e6:01:6c:a9:b7:37:6c:7b:77:9d:
ef:ca:7d:1c:b5:22:4d:ec:53:18:e0:38:aa:12:8d:
49:df:f8:5b:db:1f:9c:44:3f:e3:04:ac:49:01:3b:
6a:95:d2:a1:e2:f9:fa:22:5b:c5:e9:42:de:20:34:
2f:d6:de:ec:04:1b:66:4f:0d:d2:f7:2d:df:f1:5d:
11:20:b2:b4:c6:47:95:57:59:5e:0c:26:d5:84:f1:
6a:24:fd:56:d4:ee:3e:73:62:82:7f:34:39:f6:0a:
64:a9:a8:6e:d6:6a:3e:6b:79:53:5f:c9:f0:e2:e8:
4c:b3:94:93:65:f3:53:41:96:d3:4a:62:06:1a:67:
5e:e2:97:d0:4b:26:de:68:e9:2b:41:21:c5:12:37:
42:52:ba:55:19:36:34:f4:34:9b:8a:91:a9:84:2e:
c1:6d:9a:3f:57:cc:8b:f2:7c:be:53:f0:3d:b1:cc:
83:37:d3:8f:f2:eb:3c:aa:4a:b0:7f:0c:2b:72:25:
55:73:69:36:0d:db:88:3d:80:d1:af:0e:60:a4:0b:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:34:03:D1:5B:19:62:F0:2C:67:70:D8:9F:E6:A8:31:87:33:D3
X509v3 Authority Key Identifier:
keyid:75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:b5:96:c5:51:b9:ec:b3:73:64:74:1f:5a:7f:a5:67:07:
16:54:06:41:97:8b:47:61:5c:b9:61:6f:e9:64:71:d3:a5:97:
f4:5c:93:60:ff:6b:f7:66:ab:82:28:3f:5a:6e:6b:56:6d:16:
95:61:51:1d:15:64:a9:09:db:ba:0d:8e:bb:aa:3f:7a:df:cc:
89:a4:8e:c1:cd:18:3a:e7:f7:55:1f:0c:c2:04:0a:73:f6:94:
82:b3:05:4e:85:0d:ab:05:a7:64:0f:81:46:07:86:19:ee:28:
a5:03:65:0a:e7:ed:2c:21:fb:0c:1c:d9:b8:43:5e:d4:9f:bd:
e6:89:19:36:0d:82:97:44:83:44:fc:cf:b1:f5:fb:1a:28:24:
2d:42:0a:44:b7:e7:8e:59:9e:ab:ad:c4:1b:a0:64:91:45:ca:
69:c1:ba:eb:dc:a9:f4:d9:83:32:06:81:24:83:f3:e1:da:0c:
47:d8:0a:47:cb:56:db:87:fc:cb:03:e7:42:cb:62:88:e3:43:
88:41:d6:3d:c3:f9:1b:ea:8f:86:95:02:4b:cd:c8:04:50:fd:
6d:62:57:fb:38:c5:28:7b:36:7d:60:9f:90:a6:95:db:c0:4e:
bd:77:04:c2:f1:68:40:37:96:0f:0e:ce:9b:bf:b2:b2:b5:84:
8b:dd:ec:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiKfYVvJPg5TyUMhwajyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTQ5YTAyMGE1MmFjN2M1NTE0ODA4NWNlM2VmZTJkMDJh
YWQzZDkwHhcNMjYwNzI4MjEwMTUwWhcNMjYwNzI5MjEwMTUwWjAzMTEwLwYDVQQD
EyhlYTEzMzQwM2QxNWIxOTYyZjAyYzY3NzBkODlmZTZhODMxODczM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUtJSUXKTxfBx2UBv+bmFaosc7vq
7hmPx0T/vlJ6AwTKHXYnMo3w9WQgmpuq/95NTeYBbKm3N2x7d53vyn0ctSJN7FMY
4DiqEo1J3/hb2x+cRD/jBKxJATtqldKh4vn6IlvF6ULeIDQv1t7sBBtmTw3S9y3f
8V0RILK0xkeVV1leDCbVhPFqJP1W1O4+c2KCfzQ59gpkqahu1mo+a3lTX8nw4uhM
s5STZfNTQZbTSmIGGmde4pfQSybeaOkrQSHFEjdCUrpVGTY09DSbipGphC7BbZo/
V8yL8ny+U/A9scyDN9OP8us8qkqwfwwrciVVc2k2DduIPYDRrw5gpAu1GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoTNAPRWxli8CxncNif5qgxhzPTMB8GA1UdIwQY
MBaAFHWUmgIKUqx8VRSAhc4+/i0CqtPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpTYUFncFNySHhWRklDRnpqNy1MUUtxMDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt
MWIxYzgyNmU3YjhlLzEvZFpTYUFncFNySHhWRklDRnpqNy1MUUtxMDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl
LzEvZFpTYUFncFNySHhWRklDRnpqNy1MUUtxMDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNS1lsVR
ueyzc2R0H1p/pWcHFlQGQZeLR2FcuWFv6WRx06WX9FyTYP9r92argig/Wm5rVm0W
lWFRHRVkqQnbug2Ou6o/et/MiaSOwc0YOuf3VR8MwgQKc/aUgrMFToUNqwWnZA+B
RgeGGe4opQNlCuftLCH7DBzZuENe1J+95okZNg2Cl0SDRPzPsfX7GigkLUIKRLfn
jlmeq63EG6BkkUXKacG669yp9NmDMgaBJIPz4doMR9gKR8tW24f8ywPnQstiiOND
iEHWPcP5G+qPhpUCS83IBFD9bWJX+zjFKHs2fWCfkKaV28BOvXcEwvFoQDeWDw7O
m7+ysrWEi93sJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:47 2026 by rpki-client