Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier: Cnh//jo1WrsNAbSQ/RNmHNV49gzS3WEZO7xPuY42IT8=
Subject key identifier: CD:1B:8D:79:B3:B2:BB:5F:41:17:C4:99:65:63:05:4E:5E:52:C8:99
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 019FA74FC3813913D7C4161F408BE7F4C014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number: DF
Signing time: Tue 28 Jul 2026 06:00:50 +0000
Manifest this update: Tue 28 Jul 2026 06:00:50 +0000
Manifest next update: Wed 29 Jul 2026 06:00:50 +0000
Files and hashes: 1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
2: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: JsvaAKlAiubcWmfMiGB+2vHNkN2Q3mq0P0GUhM7cl24=)
3: tY2WtQaeJpuUmJI8VN0JtvLm7nM.roa (hash: KjixT4XxmdU3bVJwP3k9mRsSDgi6HnBSPdfTCDjkwQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:c3:81:39:13:d7:c4:16:1f:40:8b:e7:f4:c0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Jul 28 06:00:50 2026 GMT
Not After : Jul 29 06:00:50 2026 GMT
Subject: CN=cd1b8d79b3b2bb5f4117c4996563054e5e52c899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:8e:a0:77:4b:e6:d8:22:33:b8:69:b8:41:
7a:e0:5c:05:1a:52:53:2f:f1:1a:84:f6:f7:27:df:
5e:00:59:58:5d:42:1f:1e:fc:46:23:c6:8b:f3:65:
dd:d8:ab:be:12:58:d9:5e:0f:72:c0:17:b9:ef:a5:
af:6b:f4:56:25:4d:90:9e:71:c7:8b:c9:05:fe:fa:
21:87:a2:2b:0e:ec:eb:c9:a1:38:67:01:e3:7c:fd:
1f:22:44:25:26:35:8a:fa:07:7b:63:ab:2a:6f:67:
d7:e0:1b:9c:8a:31:3f:af:84:2b:33:99:eb:69:ae:
01:c7:7e:9a:1b:9a:ee:d4:32:b7:a0:fc:78:21:c8:
da:63:e0:7f:2c:44:27:a6:13:47:a9:51:49:2c:b5:
bb:91:f4:1a:b0:7a:2a:b9:8f:4e:a5:83:86:16:2d:
ab:90:62:ff:ae:52:cb:d5:c6:3f:30:28:94:a4:cb:
40:9d:80:d8:74:5f:e2:71:3d:8b:24:ce:21:11:36:
73:c5:9b:b5:03:f2:eb:b4:90:85:80:52:5b:95:8b:
99:cd:8e:62:78:30:ff:40:11:8f:80:c6:bf:d0:c2:
8f:0a:97:e6:b1:31:12:0c:96:4a:01:38:0a:9a:50:
89:d6:74:f4:c6:22:a7:6f:b1:ca:bd:0c:c2:46:f0:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:8D:79:B3:B2:BB:5F:41:17:C4:99:65:63:05:4E:5E:52:C8:99
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:41:1b:b4:1d:ca:36:d0:ad:a8:c9:9d:ca:41:64:9a:99:1b:
b7:e1:3d:b4:1e:92:55:1f:0a:57:eb:6d:16:28:70:3d:15:1e:
36:0c:1c:b9:7e:55:cc:48:f6:d0:d6:c8:86:52:58:bb:72:4b:
cb:16:90:c5:25:a8:30:c8:5c:90:61:52:1f:ad:59:82:d8:0c:
28:99:3a:41:aa:8a:1d:c4:14:f3:e6:53:41:3f:33:e0:21:e8:
46:fd:ad:5d:ab:c4:85:63:bc:01:e6:fa:b3:2a:e9:12:3b:81:
44:b6:47:c7:61:46:53:7d:57:aa:a8:71:d5:9a:f3:33:54:db:
5d:b3:93:5f:8a:99:73:13:45:8b:58:0a:49:4a:bd:de:4c:09:
c7:ce:49:0e:19:2d:d3:4c:b0:2d:eb:58:bb:48:e8:4c:3c:7e:
c4:6e:98:5a:50:db:b3:3d:81:40:ce:0e:44:b2:1a:0e:26:80:
ba:b0:91:78:a9:b5:12:67:55:da:c7:34:b4:9f:4f:fa:b5:a8:
37:1b:35:8e:ea:71:fa:8e:9f:2e:2b:16:d4:b2:73:43:c8:7d:
5c:35:84:9e:20:9d:d1:52:0b:b5:8f:1c:23:e4:56:c8:f5:42:
cc:ca:6c:13:fb:a3:e0:b5:2f:75:d7:72:10:98:be:12:57:17:
63:a8:0d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nT8OBORPXxBYfQIvn9MAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDNmMWY2M2MxMDA5YzQyYTY4OTE5ODYzYTliOGJhODU3
ODY3MzAwHhcNMjYwNzI4MDYwMDUwWhcNMjYwNzI5MDYwMDUwWjAzMTEwLwYDVQQD
EyhjZDFiOGQ3OWIzYjJiYjVmNDExN2M0OTk2NTYzMDU0ZTVlNTJjODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IqOoHdL5tgiM7hpuEF64FwFGlJT
L/EahPb3J99eAFlYXUIfHvxGI8aL82Xd2Ku+EljZXg9ywBe576Wva/RWJU2QnnHH
i8kF/vohh6IrDuzryaE4ZwHjfP0fIkQlJjWK+gd7Y6sqb2fX4BucijE/r4QrM5nr
aa4Bx36aG5ru1DK3oPx4IcjaY+B/LEQnphNHqVFJLLW7kfQasHoquY9OpYOGFi2r
kGL/rlLL1cY/MCiUpMtAnYDYdF/icT2LJM4hETZzxZu1A/LrtJCFgFJblYuZzY5i
eDD/QBGPgMa/0MKPCpfmsTESDJZKATgKmlCJ1nT0xiKnb7HKvQzCRvCjIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0bjXmzsrtfQRfEmWVjBU5eUsiZMB8GA1UdIwQY
MBaAFGbT8fY8EAnEKmiRmGOpuLqFeGcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEt
NWEyZTlkNjY5NWZjLzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZDE1N2UtMjY3Zi00M2E0LWFlMGEtNWEyZTlkNjY5NWZj
LzEvWnRQeDlqd1FDY1FxYUpHWVk2bTR1b1Y0WnpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskEbtB3K
NtCtqMmdykFkmpkbt+E9tB6SVR8KV+ttFihwPRUeNgwcuX5VzEj20NbIhlJYu3JL
yxaQxSWoMMhckGFSH61ZgtgMKJk6QaqKHcQU8+ZTQT8z4CHoRv2tXavEhWO8Aeb6
syrpEjuBRLZHx2FGU31Xqqhx1ZrzM1TbXbOTX4qZcxNFi1gKSUq93kwJx85JDhkt
00ywLetYu0joTDx+xG6YWlDbsz2BQM4ORLIaDiaAurCReKm1EmdV2sc0tJ9P+rWo
Nxs1jupx+o6fLisW1LJzQ8h9XDWEniCd0VILtY8cI+RWyPVCzMpsE/uj4LUvdddy
EJi+ElcXY6gN5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:29 2026 by rpki-client