Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: f4QkrqH5NXh66yN7nE8S0R+3J7Fk/HQnZFrAbSo5L8o=
Subject key identifier: 65:5D:E3:9F:B7:AE:DD:46:DD:D5:73:CA:A5:1D:18:AC:18:33:56:F7
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 019D9B87C3EBCD812F87D8CBF83D660F0437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 08AB
Signing time: Fri 17 Apr 2026 13:00:59 +0000
Manifest this update: Fri 17 Apr 2026 13:00:59 +0000
Manifest next update: Sat 18 Apr 2026 13:00:59 +0000
Files and hashes: 1: EGCxmj_3P4OdgMPqYMZRoqDAaa0.roa (hash: F/HUrp6QsLnvcSoouuAdZYE36oDXQmOSKH9XVdoGe+Q=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: tc5FPacIpuGGlWrzANa8mlW+7rpBEx+Zp/46xnGkl34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c3:eb:cd:81:2f:87:d8:cb:f8:3d:66:0f:04:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Apr 17 13:00:59 2026 GMT
Not After : Apr 18 13:00:59 2026 GMT
Subject: CN=655de39fb7aedd46ddd573caa51d18ac183356f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:e6:8e:7f:27:bc:4e:e3:ee:58:d6:cc:4f:
25:72:d7:ab:48:14:0b:54:5a:e1:fb:32:e1:1a:dc:
67:81:67:7b:69:a4:74:9b:da:ea:02:94:fa:e0:e5:
2c:0c:9d:da:ac:39:f2:37:eb:af:f0:df:15:3d:88:
4f:99:32:fd:03:8d:bc:29:33:87:9c:16:6f:a9:24:
a7:de:0a:88:e2:09:09:aa:3a:23:7b:fc:8f:e9:af:
ed:06:8f:97:b9:77:a7:b8:cf:e3:ff:74:b8:52:93:
7a:da:60:19:26:98:14:fe:0e:84:82:e1:a0:b0:48:
29:02:ab:53:82:95:aa:04:2f:91:a0:12:29:7a:cd:
69:bb:49:3b:f8:f8:87:4a:f6:3a:a3:a3:17:00:69:
49:ce:38:42:15:d2:44:f4:65:2e:f3:bd:e6:79:6d:
84:f8:78:11:64:b9:be:8f:fd:ac:41:a0:e4:47:da:
56:3b:0d:1d:2f:31:bb:8a:ab:24:3a:3c:df:d4:c5:
8c:b2:5f:eb:78:12:d1:ec:ab:e9:cd:4b:76:85:ff:
a7:23:98:fa:1e:9c:de:88:14:14:f5:6f:c1:52:b8:
fa:b9:ea:9c:da:83:40:05:41:ab:0c:fd:76:62:a6:
80:82:c1:ba:b1:39:25:31:68:3e:60:e5:67:87:03:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:E3:9F:B7:AE:DD:46:DD:D5:73:CA:A5:1D:18:AC:18:33:56:F7
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:76:d6:8e:d5:00:47:f6:10:8b:80:e1:d8:1f:12:41:14:
59:0b:30:3c:3b:38:3b:73:2b:80:ed:44:48:25:2a:20:7d:96:
d5:f4:85:34:8c:1c:73:e6:58:15:d9:9d:93:03:8c:88:b2:d9:
af:a2:8d:ef:2e:cc:2a:c7:4e:7b:b7:50:a9:e2:2a:4f:5d:47:
04:67:e2:81:69:73:c6:b1:69:ce:42:61:ef:a6:2d:f4:7d:40:
66:d8:bd:0b:f8:ee:8c:b1:0c:59:15:00:6c:87:45:c6:67:c0:
3e:f5:37:e3:fe:f9:c2:13:4b:e5:60:e8:58:15:3f:83:53:81:
90:d3:5f:57:37:b5:67:93:e4:e9:1b:c9:74:b0:2c:5c:90:6b:
ae:a8:6c:15:e9:a8:29:e1:6d:70:33:51:59:e2:e8:74:89:d5:
65:e0:e7:59:9c:01:2c:5e:cf:bd:3f:5c:f3:aa:c1:6c:cf:3e:
91:89:ae:cd:55:f5:c3:4d:0e:1e:27:38:93:dc:09:02:16:7d:
ad:15:f9:71:6c:a0:4f:aa:6c:72:ef:22:7d:e6:fe:9f:c9:54:
9a:3e:ec:c8:6d:48:b9:17:b1:86:a9:a9:a7:c6:e4:57:f3:43:
c5:43:59:f2:a6:f6:e4:13:8f:6b:ce:44:16:ae:d3:ab:79:20:
03:61:13:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh8PrzYEvh9jL+D1mDwQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMWY3MzM0NTc5NGNlNDgxN2VhOTllOGQ4Y2ZjZWE3MWJk
NzgzNjcwHhcNMjYwNDE3MTMwMDU5WhcNMjYwNDE4MTMwMDU5WjAzMTEwLwYDVQQD
Eyg2NTVkZTM5ZmI3YWVkZDQ2ZGRkNTczY2FhNTFkMThhYzE4MzM1NmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzTmjn8nvE7j7ljWzE8lcterSBQL
VFrh+zLhGtxngWd7aaR0m9rqApT64OUsDJ3arDnyN+uv8N8VPYhPmTL9A428KTOH
nBZvqSSn3gqI4gkJqjoje/yP6a/tBo+XuXenuM/j/3S4UpN62mAZJpgU/g6EguGg
sEgpAqtTgpWqBC+RoBIpes1pu0k7+PiHSvY6o6MXAGlJzjhCFdJE9GUu873meW2E
+HgRZLm+j/2sQaDkR9pWOw0dLzG7iqskOjzf1MWMsl/reBLR7KvpzUt2hf+nI5j6
HpzeiBQU9W/BUrj6ueqc2oNABUGrDP12YqaAgsG6sTklMWg+YOVnhwM8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVd45+3rt1G3dVzyqUdGKwYM1b3MB8GA1UdIwQY
MBaAFM0fczRXlM5IF+qZ6NjPzqcb14NnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQt
N2YwZDA3YmE0YWYzLzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQtN2YwZDA3YmE0YWYz
LzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVd21o7V
AEf2EIuA4dgfEkEUWQswPDs4O3MrgO1ESCUqIH2W1fSFNIwcc+ZYFdmdkwOMiLLZ
r6KN7y7MKsdOe7dQqeIqT11HBGfigWlzxrFpzkJh76Yt9H1AZti9C/jujLEMWRUA
bIdFxmfAPvU34/75whNL5WDoWBU/g1OBkNNfVze1Z5Pk6RvJdLAsXJBrrqhsFemo
KeFtcDNRWeLodInVZeDnWZwBLF7PvT9c86rBbM8+kYmuzVX1w00OHic4k9wJAhZ9
rRX5cWygT6pscu8ifeb+n8lUmj7syG1IuRexhqmpp8bkV/NDxUNZ8qb25BOPa85E
Fq7Tq3kgA2ETXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:44 2026 by rpki-client