Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: Nd/cF3kTiGq+9zJHGN7W8T9uzr6myKHX5gY6oS2uRVQ=
Subject key identifier: B9:AD:A6:F7:ED:18:E6:0D:E2:47:D5:2E:FC:FE:16:94:37:CF:AA:74
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019FAB63B835218E02991D42A9B491BF7B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 085F
Signing time: Wed 29 Jul 2026 01:01:06 +0000
Manifest this update: Wed 29 Jul 2026 01:01:06 +0000
Manifest next update: Thu 30 Jul 2026 01:01:06 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: prUkZPZ+uma3eum6R5xpx3zdVcSeNnz/VM36i97RpWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:b8:35:21:8e:02:99:1d:42:a9:b4:91:bf:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jul 29 01:01:06 2026 GMT
Not After : Jul 30 01:01:06 2026 GMT
Subject: CN=b9ada6f7ed18e60de247d52efcfe169437cfaa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:8f:6f:97:cb:bd:c8:b5:07:f5:43:e8:e4:
28:bb:f9:16:a0:69:b4:77:52:56:4c:44:1a:a9:43:
1c:65:34:5d:34:66:cc:fd:84:dd:92:25:46:2c:9b:
85:98:af:22:11:da:b6:31:e7:ec:54:51:0d:00:6d:
ea:c2:4f:74:fd:2c:ca:a6:5f:77:05:99:83:8e:cc:
aa:12:25:e1:d2:e9:cc:95:bb:e3:75:cc:08:84:da:
6c:73:3d:f0:0f:ba:63:d4:e5:c6:7c:c8:3a:85:db:
3e:ae:7e:a3:d3:fe:df:e1:65:db:5a:a6:49:dd:16:
91:5b:34:55:52:9f:aa:cc:4c:3d:40:c3:e5:c8:13:
c5:ca:af:ef:35:dd:f8:06:f4:20:a4:6b:5d:75:49:
96:8e:c0:1f:ab:db:ec:c7:c1:ef:9d:69:1b:bd:25:
63:f7:5a:c2:43:b5:66:bb:78:11:4c:a6:bb:d7:73:
b2:69:2e:58:7d:13:83:b1:10:0c:7f:c6:c8:b6:3d:
9b:82:21:1f:10:dc:5a:14:14:d1:e7:a8:9e:b0:b4:
a0:f5:0e:6d:0c:c0:2f:66:30:19:3a:d2:6e:c1:0e:
aa:9c:ac:0e:63:52:73:19:5d:10:73:9e:dd:a4:58:
37:38:50:ca:56:68:14:97:b6:f3:f0:5e:b0:1a:ef:
29:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:A6:F7:ED:18:E6:0D:E2:47:D5:2E:FC:FE:16:94:37:CF:AA:74
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:69:2a:a0:4c:4f:0b:6e:d8:a2:a8:e8:47:c1:32:5d:dc:e4:
a0:e1:64:f0:2d:0b:30:0c:66:9f:b4:db:4d:12:9e:64:c3:fc:
2c:fb:9c:26:6d:42:a1:b2:c2:39:0f:04:a3:da:53:4a:50:1e:
04:81:f3:f7:fa:5a:91:03:7a:99:2a:99:b2:35:e1:c0:46:73:
98:86:23:81:91:23:cf:13:53:bf:76:bd:51:56:db:6d:2e:82:
38:e1:48:c5:c3:14:e4:e5:5c:a8:95:5f:73:0e:9b:7d:6e:89:
d3:01:d6:1c:83:da:e7:1b:cd:51:b3:72:8c:ab:00:7d:d4:60:
5f:1b:9c:c0:6e:b8:6a:76:39:a9:e7:0d:ed:ad:f3:41:7b:f3:
8a:f1:e1:f2:c2:2e:97:58:a0:56:ea:b0:fc:14:46:fd:e0:33:
a2:e9:e7:60:55:ca:cd:bc:64:2d:f9:c4:40:42:bd:a7:fd:a0:
25:56:e5:9a:78:97:31:22:4c:40:87:aa:95:db:dc:76:38:7b:
98:90:65:70:88:17:69:ef:93:7c:f8:b7:bd:62:0f:03:6f:f3:
12:25:dc:cf:e1:9e:48:d8:3c:b1:9c:cf:12:51:ea:84:ce:1b:
b6:9d:29:40:9f:a5:9c:fa:65:ec:c5:37:03:8f:74:af:18:c0:
3f:69:24:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY7g1IY4CmR1CqbSRv3uSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk4ZjdmM2Q1YjNiODJkY2ZkZWM5MDJiMDNmNzMzZDg5
NWRhZTcwHhcNMjYwNzI5MDEwMTA2WhcNMjYwNzMwMDEwMTA2WjAzMTEwLwYDVQQD
EyhiOWFkYTZmN2VkMThlNjBkZTI0N2Q1MmVmY2ZlMTY5NDM3Y2ZhYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVGPb5fLvci1B/VD6OQou/kWoGm0
d1JWTEQaqUMcZTRdNGbM/YTdkiVGLJuFmK8iEdq2MefsVFENAG3qwk90/SzKpl93
BZmDjsyqEiXh0unMlbvjdcwIhNpscz3wD7pj1OXGfMg6hds+rn6j0/7f4WXbWqZJ
3RaRWzRVUp+qzEw9QMPlyBPFyq/vNd34BvQgpGtddUmWjsAfq9vsx8HvnWkbvSVj
91rCQ7Vmu3gRTKa713OyaS5YfRODsRAMf8bItj2bgiEfENxaFBTR56iesLSg9Q5t
DMAvZjAZOtJuwQ6qnKwOY1JzGV0Qc57dpFg3OFDKVmgUl7bz8F6wGu8pqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmtpvftGOYN4kfVLvz+FpQ3z6p0MB8GA1UdIwQY
MBaAFM05j389WzuC3P3skCsD9zPYldrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAt
YWM1OGIyODdmYjY0LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAtYWM1OGIyODdmYjY0
LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2kqoExP
C27YoqjoR8EyXdzkoOFk8C0LMAxmn7TbTRKeZMP8LPucJm1CobLCOQ8Eo9pTSlAe
BIHz9/pakQN6mSqZsjXhwEZzmIYjgZEjzxNTv3a9UVbbbS6COOFIxcMU5OVcqJVf
cw6bfW6J0wHWHIPa5xvNUbNyjKsAfdRgXxucwG64anY5qecN7a3zQXvzivHh8sIu
l1igVuqw/BRG/eAzounnYFXKzbxkLfnEQEK9p/2gJVblmniXMSJMQIeqldvcdjh7
mJBlcIgXae+TfPi3vWIPA2/zEiXcz+GeSNg8sZzPElHqhM4btp0pQJ+lnPpl7MU3
A490rxjAP2kkTQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:20 2026 by rpki-client