Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: nKyGVykRoee3AHW4HXFI2ag2+S92n86InVhtq/RkzZQ=
Subject key identifier: 47:91:79:FD:D5:55:20:F2:6F:B4:D2:CA:B9:CD:4B:5E:62:42:45:04
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019FA7BDF519011BDC3CCB8EAFFD9260E54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1A1E
Signing time: Tue 28 Jul 2026 08:01:11 +0000
Manifest this update: Tue 28 Jul 2026 08:01:11 +0000
Manifest next update: Wed 29 Jul 2026 08:01:11 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: ZRWcaFP2lNAESYX_mW0VBxZBTAc.asa (hash: 3/7iwA3UKTDGkjOa2IbhOlBaTEtOKBbyoubltpbAgRk=)
3: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: G4sNrgeYieHbaXAwBHlRzon0PGLdWwYBfdr0MVwNV9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:f5:19:01:1b:dc:3c:cb:8e:af:fd:92:60:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jul 28 08:01:11 2026 GMT
Not After : Jul 29 08:01:11 2026 GMT
Subject: CN=479179fdd55520f26fb4d2cab9cd4b5e62424504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:73:35:10:ab:cc:43:b8:e4:cb:89:1e:c1:
5f:9b:7c:a6:6a:ce:94:b2:75:6c:6c:df:ff:1c:a9:
03:5b:5f:58:bf:d8:d3:45:4e:2b:ef:36:6e:ca:7d:
26:0d:9c:fd:b5:f6:8a:5c:d5:3e:70:6f:3e:79:e3:
75:24:49:03:34:ae:7f:a2:bb:7a:c6:77:62:3a:1a:
ed:9f:e1:54:8b:b4:98:0f:5f:d4:35:2a:52:73:68:
b2:95:75:29:20:6b:d2:06:d7:0a:28:fc:e3:c7:42:
5d:83:6b:23:f8:18:64:40:f1:91:40:66:09:66:df:
dc:0a:ea:57:5a:27:ee:c0:51:db:c3:fe:ca:71:ec:
46:10:e8:42:9e:48:6d:fc:1a:16:8b:c9:ab:65:01:
16:e9:d8:ac:70:35:c4:6c:2d:d3:1c:c6:05:9c:a3:
cf:06:c0:84:5e:1a:10:00:a8:58:66:1c:19:01:1d:
dc:af:88:1e:f8:5c:2f:dd:2c:9c:ec:c6:e3:df:6d:
72:80:30:c7:0b:6c:04:2e:20:09:5f:a0:e0:46:25:
0e:05:9a:13:9d:65:70:4d:3e:d6:cf:12:13:a0:c3:
70:d8:1d:41:0d:31:01:90:26:25:99:cd:63:31:01:
dc:09:46:3e:ef:94:d8:fe:28:69:61:9c:08:a7:c7:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:91:79:FD:D5:55:20:F2:6F:B4:D2:CA:B9:CD:4B:5E:62:42:45:04
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:e7:a8:04:67:e5:cb:df:19:1e:2a:0f:8f:8f:41:5d:c0:
da:12:f4:dd:57:11:dd:16:7c:ce:bc:1a:5e:9a:52:d3:35:74:
7a:1e:41:fd:0e:f9:9b:63:6e:08:56:c5:ee:1d:6e:b5:d4:b1:
92:ea:2a:c1:cc:bd:93:0d:86:c6:31:b1:21:ef:7f:14:49:bf:
5d:05:e6:df:c5:13:16:46:13:f8:db:65:be:b5:d2:74:42:3e:
93:40:27:b6:f8:a8:ac:89:31:25:b8:b5:73:98:f4:1b:3c:02:
88:7e:6b:b0:96:e8:33:c0:ff:f6:0a:09:9e:a8:75:53:f1:a6:
1e:91:71:57:32:ae:c6:b7:e3:42:78:17:bd:07:c7:ce:92:fa:
bb:d2:09:4c:2e:f7:c0:c6:89:ab:d3:22:7e:d9:46:25:bb:b6:
5d:fd:12:d9:d4:3f:f4:57:1e:6e:f7:1a:53:f0:d1:55:5f:35:
49:f3:01:d4:7b:1a:47:0e:71:62:f8:b9:ec:6f:7d:ee:cc:0d:
41:d1:e1:bf:c8:4a:4c:7a:08:67:71:ea:6c:12:76:42:08:92:
68:36:61:dc:ae:ec:b5:6b:f4:51:24:7e:c0:a8:4b:81:b5:1a:
ba:9d:1c:11:06:12:ea:19:dc:ac:2f:2a:f6:73:44:53:b8:e8:
1e:73:15:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvfUZARvcPMuOr/2SYOVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi
Yzc1M2IwHhcNMjYwNzI4MDgwMTExWhcNMjYwNzI5MDgwMTExWjAzMTEwLwYDVQQD
Eyg0NzkxNzlmZGQ1NTUyMGYyNmZiNGQyY2FiOWNkNGI1ZTYyNDI0NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvBzNRCrzEO45MuJHsFfm3ymas6U
snVsbN//HKkDW19Yv9jTRU4r7zZuyn0mDZz9tfaKXNU+cG8+eeN1JEkDNK5/ort6
xndiOhrtn+FUi7SYD1/UNSpSc2iylXUpIGvSBtcKKPzjx0Jdg2sj+BhkQPGRQGYJ
Zt/cCupXWifuwFHbw/7KcexGEOhCnkht/BoWi8mrZQEW6discDXEbC3THMYFnKPP
BsCEXhoQAKhYZhwZAR3cr4ge+Fwv3Syc7Mbj321ygDDHC2wELiAJX6DgRiUOBZoT
nWVwTT7WzxIToMNw2B1BDTEBkCYlmc1jMQHcCUY+75TY/ihpYZwIp8e4aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeRef3VVSDyb7TSyrnNS15iQkUEMB8GA1UdIwQY
MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt
OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy
LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwXnqARn
5cvfGR4qD4+PQV3A2hL03VcR3RZ8zrwaXppS0zV0eh5B/Q75m2NuCFbF7h1utdSx
kuoqwcy9kw2GxjGxIe9/FEm/XQXm38UTFkYT+NtlvrXSdEI+k0AntviorIkxJbi1
c5j0GzwCiH5rsJboM8D/9goJnqh1U/GmHpFxVzKuxrfjQngXvQfHzpL6u9IJTC73
wMaJq9MiftlGJbu2Xf0S2dQ/9FcebvcaU/DRVV81SfMB1HsaRw5xYvi57G997swN
QdHhv8hKTHoIZ3HqbBJ2QgiSaDZh3K7stWv0USR+wKhLgbUaup0cEQYS6hncrC8q
9nNEU7joHnMVDw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:57 2026 by rpki-client