Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: r5Xj6LfE35+d69MlhL0dsxMaDIzgmtFqnly7C+lF9OA=
Subject key identifier: 11:B6:55:32:89:E4:4C:9D:78:C9:F9:68:1F:5C:4F:5A:88:35:10:5F
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 019D9818F4840DCF113D4244C1A5CDA73EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 1228
Signing time: Thu 16 Apr 2026 21:01:05 +0000
Manifest this update: Thu 16 Apr 2026 21:01:05 +0000
Manifest next update: Fri 17 Apr 2026 21:01:05 +0000
Files and hashes: 1: 1gUVsb5eptHPfkWeIDJOnBtjCdM.roa (hash: 9UbrzakbahLSL538GmtoWSL/CzBIwVc0sR6kEFLy4PE=)
2: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: C+6334A/har7wn8tfOt3lDNk438ayZaEyOS/OW0UNWY=)
3: uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa (hash: zVkALHO/eizkLv+esnlztVcjRzvGtYoCejf9vSgdAPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f4:84:0d:cf:11:3d:42:44:c1:a5:cd:a7:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Apr 16 21:01:05 2026 GMT
Not After : Apr 17 21:01:05 2026 GMT
Subject: CN=11b6553289e44c9d78c9f9681f5c4f5a8835105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:52:7e:3b:cd:5e:5c:8e:c3:0c:eb:c7:53:
f9:a9:34:ab:42:b8:83:8f:d9:c8:4e:94:67:d6:8e:
f6:89:f4:bd:b6:ea:95:e2:a1:3f:f1:32:6a:e7:91:
97:da:09:ef:ef:3f:1b:28:21:49:3b:e0:74:6c:6e:
d2:9d:e8:e7:7e:9c:b1:c5:02:84:d4:05:61:23:b8:
48:29:2e:54:fb:3d:56:9e:ad:ca:fe:81:4a:05:3e:
c8:93:96:8b:6e:cc:9b:97:27:48:cf:d7:dd:5d:52:
36:7b:fc:e2:bb:4c:0b:68:6b:a7:82:6c:37:18:d8:
08:7a:f7:05:26:5e:ce:fe:86:c9:94:71:a0:68:e1:
b4:c5:ed:c5:18:dc:3a:27:20:19:37:69:dd:ee:d6:
bf:13:77:b3:d2:3f:ef:42:64:b4:07:81:38:de:27:
2b:c5:08:0f:33:6c:e9:11:85:e3:69:ff:6e:02:d1:
d7:90:dc:cb:c3:a9:c6:b1:cf:64:01:9a:6c:a0:66:
e8:02:01:ff:f4:b1:88:a5:f5:f7:86:4a:68:09:24:
6c:c2:59:a8:0d:85:52:37:c1:c3:8a:6d:e7:73:22:
cb:49:d7:9c:9b:22:83:78:4d:29:44:91:46:5a:ce:
5d:f2:36:d8:dc:b0:b4:c2:55:57:f0:5a:56:b1:1c:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:55:32:89:E4:4C:9D:78:C9:F9:68:1F:5C:4F:5A:88:35:10:5F
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:80:54:4a:02:7c:a9:c8:9d:ae:f6:30:70:8b:96:db:d4:cc:
d3:b1:73:98:64:95:c1:41:92:33:d2:be:bd:5c:28:73:ce:a4:
39:16:7d:e3:0d:6c:bd:1f:ca:fc:28:18:94:56:4a:24:00:d0:
41:bd:dc:65:f6:10:d2:72:4a:66:c5:b1:33:dd:09:fa:d3:0a:
e7:16:e3:36:26:f1:0e:33:0a:d7:72:a7:a4:3a:62:72:91:a6:
a9:f0:85:47:b5:a2:02:1d:a7:fc:a9:a9:0a:44:4f:41:2a:73:
87:17:fd:d0:78:df:f7:e4:8a:29:df:af:34:16:47:23:93:10:
81:ed:ee:7a:57:a4:af:26:b4:e0:f7:cc:b6:f7:1f:88:bb:cf:
ba:b2:3e:19:13:d7:de:e3:f3:c7:27:1d:4e:3f:fc:2b:20:3b:
33:cc:62:48:c0:bb:41:61:ac:b7:b7:77:29:47:9a:19:64:74:
87:9b:f6:a4:89:92:56:ee:4f:f7:ac:8e:59:c5:36:69:a0:8a:
97:95:86:c5:3a:81:b3:80:af:79:a3:f2:9a:41:a3:47:1a:fa:
1b:4a:b8:eb:5d:df:de:a2:10:f9:45:c2:ce:05:ad:1f:96:df:
40:93:dc:e3:03:be:ce:a9:17:f4:11:24:5d:1a:66:1d:35:4a:
42:47:03:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGPSEDc8RPUJEwaXNpz7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4
MDljZjkwHhcNMjYwNDE2MjEwMTA1WhcNMjYwNDE3MjEwMTA1WjAzMTEwLwYDVQQD
EygxMWI2NTUzMjg5ZTQ0YzlkNzhjOWY5NjgxZjVjNGY1YTg4MzUxMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve1SfjvNXlyOwwzrx1P5qTSrQriD
j9nITpRn1o72ifS9tuqV4qE/8TJq55GX2gnv7z8bKCFJO+B0bG7SnejnfpyxxQKE
1AVhI7hIKS5U+z1Wnq3K/oFKBT7Ik5aLbsyblydIz9fdXVI2e/ziu0wLaGungmw3
GNgIevcFJl7O/obJlHGgaOG0xe3FGNw6JyAZN2nd7ta/E3ez0j/vQmS0B4E43icr
xQgPM2zpEYXjaf9uAtHXkNzLw6nGsc9kAZpsoGboAgH/9LGIpfX3hkpoCSRswlmo
DYVSN8HDim3ncyLLSdecmyKDeE0pRJFGWs5d8jbY3LC0wlVX8FpWsRy4uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG2VTKJ5EydeMn5aB9cT1qINRBfMB8GA1UdIwQY
MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt
NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy
LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoBUSgJ8
qcidrvYwcIuW29TM07FzmGSVwUGSM9K+vVwoc86kORZ94w1svR/K/CgYlFZKJADQ
Qb3cZfYQ0nJKZsWxM90J+tMK5xbjNibxDjMK13KnpDpicpGmqfCFR7WiAh2n/Kmp
CkRPQSpzhxf90Hjf9+SKKd+vNBZHI5MQge3uelekrya04PfMtvcfiLvPurI+GRPX
3uPzxycdTj/8KyA7M8xiSMC7QWGst7d3KUeaGWR0h5v2pImSVu5P96yOWcU2aaCK
l5WGxTqBs4CveaPymkGjRxr6G0q4613f3qIQ+UXCzgWtH5bfQJPc4wO+zqkX9BEk
XRpmHTVKQkcDUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:06 2026 by rpki-client