Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
File: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft (raw, json)
Hash identifier: 1IVSaNOJeMLTH4uRBI2ZvxdeLG8j1uy/63bfOwWTVzc=
Subject key identifier: CA:2F:B5:A7:7A:D6:DA:97:30:BC:AF:32:84:05:FD:1E:E9:EB:C0:83
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019FAC76299C455A5A1FB8DB21B15F881F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:52 +0000
Manifest this update: Wed 29 Jul 2026 06:00:52 +0000
Manifest next update: Thu 30 Jul 2026 06:00:52 +0000
Files and hashes: 1: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (hash: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=)
2: KCG2jhdDWc9bOUDAuVYJDwPA_IM.roa (hash: XSPZXPjtWmH3tsooKgIJCC9hK4ebdbO48OGaE0GPJDQ=)
3: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (hash: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=)
4: ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl (hash: i/K6pA7YFc6lkBUB3gFPlRxHiCUzk3TFIMkbk7OgWqo=)
5: boyjYBR7CeYYqBubps31ePeRjKg.roa (hash: 44PfnVaKtdz7BnqSwnT3jqIEnA/Gm5oPQKvw5imMG+E=)
6: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (hash: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=)
7: kTamAiL6qOOf57nIraLXQq7irIk.roa (hash: djhCgJi8JfOsutJAAl8lRxYE0HKm1fCZVH28XEIjiKY=)
8: lZHIjG7NZwuEiIUXn9PLMVcVIzA.roa (hash: PwjbCusxHYbPcriuRl5QcW2dN5wg11/a1p9YKj/rRnQ=)
9: pOkq5deJnN6boK6s5xEuzkj_cGg.roa (hash: J7cGVPgbOqr7KYHw8zUxLmdbPeKxga24cigIY5mS8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:29:9c:45:5a:5a:1f:b8:db:21:b1:5f:88:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 29 06:00:52 2026 GMT
Not After : Jul 30 06:00:52 2026 GMT
Subject: CN=ca2fb5a77ad6da9730bcaf328405fd1ee9ebc083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:6c:cd:4e:52:75:ff:90:f2:a2:3c:06:59:
88:a9:fb:a9:9a:c3:33:13:d1:22:70:26:b9:c1:37:
0e:2c:a5:c7:0a:4f:dd:d9:dd:69:18:1a:83:23:34:
cc:ba:f3:e9:02:3a:8a:b1:96:7e:7b:d4:60:33:3f:
72:90:46:87:96:c2:ab:2b:7a:81:b0:93:65:20:ff:
d8:5c:7f:0e:4f:24:34:54:0f:7a:69:fd:76:b1:5c:
7b:cf:9b:e4:ec:2c:eb:c9:ad:c9:77:79:d0:6d:37:
5e:20:08:3c:a6:03:c5:54:eb:ba:3e:d3:e5:8d:a3:
41:82:b4:11:5d:63:98:77:57:e1:08:78:55:ca:1a:
1b:fe:45:0b:a9:9f:a2:e2:d1:ac:c2:be:03:ad:9a:
a8:4c:ad:b5:66:96:a5:66:67:60:6e:53:8f:ba:02:
84:2c:95:ea:0b:78:74:9b:ea:d5:7b:9e:a2:ce:20:
0f:82:a3:71:bd:7d:08:a8:5c:90:1c:22:73:de:3a:
48:e9:99:fc:2c:ea:80:93:3c:b2:40:f3:8c:c0:60:
1c:bc:fe:ea:23:c5:7f:bc:15:34:90:a1:4a:6c:b0:
08:e0:aa:8a:39:ad:20:31:8f:d3:44:9e:2c:46:aa:
56:f8:69:5d:60:0c:53:21:9a:19:a4:d9:03:b6:53:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:B5:A7:7A:D6:DA:97:30:BC:AF:32:84:05:FD:1E:E9:EB:C0:83
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3b:d0:95:04:6b:0e:a2:f2:04:38:2e:10:9d:2e:36:a3:60:
20:42:25:9b:e2:cf:23:4a:c8:5a:ea:5b:d0:64:f3:c4:3b:c1:
43:fb:ec:f0:5d:dd:f8:cb:31:3c:e6:53:71:14:6d:3b:c9:75:
38:e1:2d:51:b1:67:df:65:ed:22:5b:6b:bf:cd:5c:a8:a5:50:
2c:bf:06:34:17:69:94:41:a0:a1:f1:ce:1a:5f:bc:eb:53:17:
19:c1:77:ea:2f:06:bf:5a:c4:00:30:62:0f:c7:38:da:b4:41:
21:ba:b3:72:f3:53:1c:1c:22:50:1f:7b:e0:3a:c1:8e:58:cb:
2a:05:23:64:d8:68:2a:8e:3e:96:fc:40:c4:d6:e9:85:c3:6b:
0b:d2:2d:57:86:23:5a:1a:4f:21:ca:64:93:52:4f:15:8c:0a:
46:e9:01:51:b5:06:ca:64:39:50:cf:c4:bb:35:48:cd:86:91:
d3:73:96:b8:c2:4d:e0:6f:70:2c:0d:38:4a:a4:97:1e:ff:50:
e0:8b:4a:ec:f0:c0:19:70:78:bc:bc:a6:f5:6f:51:61:9b:86:
22:00:b1:37:97:f4:b8:e0:52:0e:91:fc:6e:89:c2:dd:47:0a:
86:5f:c4:5b:cc:d6:00:93:6a:ca:ad:ab:ba:ee:f8:f6:7f:33:
68:e5:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:24 2026 by rpki-client