Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: g6mbSv4isPyYpqhNlFbo/HoZJfesdmNttOgXguNafNI=
Subject key identifier: 1F:9D:46:8D:1E:94:C8:ED:A4:9A:69:89:2C:DC:BB:29:52:30:78:9E
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019FAC08004B0550C757C08B4F277B61960B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 04:00:33 +0000
Manifest this update: Wed 29 Jul 2026 04:00:33 +0000
Manifest next update: Thu 30 Jul 2026 04:00:33 +0000
Files and hashes: 1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: /ZR/nWKR+a5IX0tZozmF/STYHjlDWuDJVgqY5lzMQzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:00:4b:05:50:c7:57:c0:8b:4f:27:7b:61:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Jul 29 04:00:33 2026 GMT
Not After : Jul 30 04:00:33 2026 GMT
Subject: CN=1f9d468d1e94c8eda49a69892cdcbb295230789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:18:85:75:d2:b6:21:03:df:67:56:3c:88:
e0:a6:4e:03:9c:0d:ec:5a:12:a1:dc:7a:f5:aa:d0:
4f:b8:c8:7b:2a:0a:35:b7:0c:c8:9a:7f:b8:4b:d9:
9a:eb:5e:c8:81:4e:6d:57:e0:80:73:84:92:fe:0d:
51:c2:d8:92:f9:84:80:97:44:01:a8:0d:cf:94:21:
35:a1:58:bb:1a:a6:fb:34:fc:c8:24:9b:d6:41:96:
98:cf:c7:81:1b:0c:ed:68:cb:6f:70:28:15:06:9d:
e2:d9:0c:38:f8:a9:11:54:65:2a:51:94:39:16:0d:
f2:88:98:32:7e:15:08:c1:63:ca:10:09:d7:77:bc:
00:7c:b6:60:80:74:01:7d:b1:79:c9:35:9b:90:76:
52:ba:fa:67:1a:c3:ab:3d:14:9f:ed:ef:e9:f4:21:
03:c6:29:39:2f:e3:13:08:88:4a:7d:e8:fe:3f:ba:
0b:27:49:ad:50:6c:76:9c:6e:0b:bd:3f:e1:7a:1f:
cb:af:2c:d1:fe:17:81:42:d7:5a:fe:17:61:95:17:
9a:5e:6d:a5:1b:72:0b:82:29:a5:6b:e7:52:3f:8d:
cf:c5:c0:ea:4e:42:61:74:1a:53:86:8e:ac:40:e3:
db:19:89:45:a6:47:0e:f4:8c:dc:07:f4:65:9e:0c:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9D:46:8D:1E:94:C8:ED:A4:9A:69:89:2C:DC:BB:29:52:30:78:9E
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:4e:8e:19:96:63:e1:1c:9c:f4:10:61:df:87:5c:26:bb:
52:f0:23:2c:a5:11:1f:43:0f:a2:f6:d4:e4:b6:6c:e4:21:a3:
6d:30:de:28:c6:ae:57:30:dd:44:4c:03:95:95:6c:8a:f2:79:
65:58:f4:87:77:c6:da:14:21:75:38:26:c8:c0:68:93:76:5d:
41:b3:b0:17:96:b8:41:d9:94:1e:8c:ff:da:e1:03:58:9d:6c:
32:33:e6:4f:32:4e:d1:97:89:80:4b:20:6b:a1:b6:1f:29:67:
4f:ba:73:8e:24:9c:13:bb:c0:54:c9:18:3e:81:42:4c:4d:bf:
40:ee:87:c9:32:e3:ea:8b:db:a6:29:49:98:7f:2a:f5:03:32:
a1:82:7b:7b:3c:c3:00:07:d2:96:39:14:92:3f:25:2f:b7:05:
5a:7e:f7:1d:92:2d:f9:1a:16:81:26:83:e8:59:9a:5b:c2:26:
ad:57:1a:e8:8a:f6:de:eb:5a:bd:01:8c:43:53:71:e0:bb:e5:
63:53:1c:df:bb:a2:43:dc:10:45:30:93:12:73:23:16:55:2b:
21:ac:1c:56:ca:c1:4b:81:b3:0e:62:2b:3e:42:4b:93:76:f9:
46:db:a4:4d:55:16:01:e8:a1:d2:d8:66:7e:a6:ff:4f:b4:7d:
f0:bd:40:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCABLBVDHV8CLTyd7YZYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjYwNzI5MDQwMDMzWhcNMjYwNzMwMDQwMDMzWjAzMTEwLwYDVQQD
EygxZjlkNDY4ZDFlOTRjOGVkYTQ5YTY5ODkyY2RjYmIyOTUyMzA3ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0sYhXXStiED32dWPIjgpk4DnA3s
WhKh3Hr1qtBPuMh7Kgo1twzImn+4S9ma617IgU5tV+CAc4SS/g1RwtiS+YSAl0QB
qA3PlCE1oVi7Gqb7NPzIJJvWQZaYz8eBGwztaMtvcCgVBp3i2Qw4+KkRVGUqUZQ5
Fg3yiJgyfhUIwWPKEAnXd7wAfLZggHQBfbF5yTWbkHZSuvpnGsOrPRSf7e/p9CED
xik5L+MTCIhKfej+P7oLJ0mtUGx2nG4LvT/heh/LryzR/heBQtda/hdhlReaXm2l
G3ILgimla+dSP43PxcDqTkJhdBpTho6sQOPbGYlFpkcO9IzcB/Rlngw1vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+dRo0elMjtpJppiSzcuylSMHieMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGedOjhmW
Y+EcnPQQYd+HXCa7UvAjLKURH0MPovbU5LZs5CGjbTDeKMauVzDdREwDlZVsivJ5
ZVj0h3fG2hQhdTgmyMBok3ZdQbOwF5a4QdmUHoz/2uEDWJ1sMjPmTzJO0ZeJgEsg
a6G2HylnT7pzjiScE7vAVMkYPoFCTE2/QO6HyTLj6ovbpilJmH8q9QMyoYJ7ezzD
AAfSljkUkj8lL7cFWn73HZIt+RoWgSaD6FmaW8ImrVca6Ir23utavQGMQ1Nx4Lvl
Y1Mc37uiQ9wQRTCTEnMjFlUrIawcVsrBS4GzDmIrPkJLk3b5RtukTVUWAeih0thm
fqb/T7R98L1AUw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:06 2026 by rpki-client