Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
File: PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json)
Hash identifier: VxlA/xLrW23yFZaHy6xLSo7qutkakJkz5n4bhm3hLgI=
Subject key identifier: D9:28:F0:4D:AC:44:A9:69:8D:3D:82:5C:A6:ED:93:A4:F4:8C:63:7D
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Certificate issuer: /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial: 019D9AABDC7667161C91AB36941906B16C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: g+lLG0crrr/gzGLdwk2Iwrb8LHtI8sSeT3rrmGfjDJw=)
2: zdHtSRxpJBMjN_Z0z26JXK0mycs.roa (hash: lc2L7OCAHky1r/MwYr4M0nrrYwYly2np0Be8FYu8I7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:dc:76:67:16:1c:91:ab:36:94:19:06:b1:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=d928f04dac44a9698d3d825ca6ed93a4f48c637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:ca:da:c1:9f:49:1e:82:47:8a:7e:10:dc:
b8:a3:84:df:25:7a:d7:d4:b1:6a:6a:7c:db:9c:4a:
19:24:2d:ea:d9:92:3c:12:11:42:ea:d4:ed:6e:3d:
9b:26:ef:5f:50:ce:51:c7:f8:43:d4:05:bc:cd:8b:
a1:56:39:17:d5:69:f1:cf:00:f4:a7:59:bb:8f:dc:
ea:2b:ad:d5:7c:b4:a0:4c:b0:5f:1d:90:ca:75:bc:
dd:50:24:e2:92:2b:94:1d:4d:13:5d:98:cc:35:78:
78:b3:7a:98:dc:8c:3b:53:8f:84:35:c7:64:13:f0:
ce:a9:fc:65:4d:a0:1b:ef:b4:8c:72:6b:62:9b:8a:
0e:99:25:26:2f:a2:e6:48:ac:87:35:7f:75:1d:f7:
ee:82:2e:f3:33:13:8a:2f:05:b6:76:ed:41:17:db:
76:ec:05:a3:74:13:48:92:87:66:4f:58:f0:28:b0:
fc:3a:de:7c:4f:e6:35:c3:ab:2b:bb:d7:aa:df:ec:
59:34:78:a6:8d:1c:d7:6c:84:db:ed:6e:ce:0f:46:
1c:4a:5f:c0:f9:b5:aa:3d:6f:16:58:2f:f3:4a:d3:
7e:38:aa:c2:27:f8:b3:ac:5e:62:f1:fa:8d:bf:fb:
06:d4:6e:00:f6:d4:9d:32:b8:21:ef:65:83:a0:9e:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:F0:4D:AC:44:A9:69:8D:3D:82:5C:A6:ED:93:A4:F4:8C:63:7D
X509v3 Authority Key Identifier:
keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9f:72:22:7b:fc:f2:19:bc:e6:bd:1a:fe:4e:62:a0:0c:61:
ba:69:68:4e:88:c4:34:c9:ae:3c:13:73:b1:fa:9c:38:a0:0e:
e7:ca:5d:68:96:e8:fd:fb:8c:63:7c:d9:e6:83:30:2c:f0:01:
84:55:8f:77:d9:ce:b1:1d:be:95:46:e1:13:0a:71:06:0b:07:
fd:f6:e1:08:11:d2:ee:0d:25:d9:f8:85:cc:ab:b1:74:b1:b5:
dc:03:46:f1:1d:43:2d:1b:51:18:d1:c6:18:ac:41:89:35:15:
38:dd:2a:ee:2b:d6:b3:c9:82:c2:8a:2b:9e:74:64:3b:68:aa:
23:a6:51:44:64:29:d0:35:6f:ba:90:2a:0c:1d:b9:a2:5a:31:
48:43:8c:2b:ce:7d:9c:36:2a:75:3e:34:5d:19:d9:54:31:95:
f5:48:07:04:b6:df:fe:95:71:9d:22:ff:24:5f:3b:01:f3:a3:
f0:5f:dd:c9:d3:40:5c:32:b1:bc:fe:ec:a7:a1:d1:74:94:67:
68:83:0a:10:f7:9a:ba:ad:e1:ae:d3:6f:15:d2:e0:e9:27:1d:
a3:3b:c4:aa:d6:6a:b8:6a:87:82:49:49:bb:a5:b6:ef:ad:68:
12:91:6c:0b:96:01:46:1d:cc:48:4f:8a:8d:e6:7d:37:0b:14:
01:58:7e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq9x2ZxYckas2lBkGsWwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTk0NGU4ZjU2NTFiMWJkMmYwYTllMDA2ODY1ZjNhNmI4
MWViNjEwHhcNMjYwNDE3MDkwMDQ3WhcNMjYwNDE4MDkwMDQ3WjAzMTEwLwYDVQQD
EyhkOTI4ZjA0ZGFjNDRhOTY5OGQzZDgyNWNhNmVkOTNhNGY0OGM2MzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygzK2sGfSR6CR4p+ENy4o4TfJXrX
1LFqanzbnEoZJC3q2ZI8EhFC6tTtbj2bJu9fUM5Rx/hD1AW8zYuhVjkX1WnxzwD0
p1m7j9zqK63VfLSgTLBfHZDKdbzdUCTikiuUHU0TXZjMNXh4s3qY3Iw7U4+ENcdk
E/DOqfxlTaAb77SMcmtim4oOmSUmL6LmSKyHNX91Hffugi7zMxOKLwW2du1BF9t2
7AWjdBNIkodmT1jwKLD8Ot58T+Y1w6sru9eq3+xZNHimjRzXbITb7W7OD0YcSl/A
+bWqPW8WWC/zStN+OKrCJ/izrF5i8fqNv/sG1G4A9tSdMrgh72WDoJ6SxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNko8E2sRKlpjT2CXKbtk6T0jGN9MB8GA1UdIwQY
MBaAFD2ZROj1ZRsb0vCp4AaGXzprgethMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80YmZmNzItYmE1Yi00NTI4LThjNDIt
N2Y2YjlmMTA0MGZkLzEvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80YmZmNzItYmE1Yi00NTI4LThjNDItN2Y2YjlmMTA0MGZk
LzEvUFpsRTZQVmxHeHZTOEtuZ0JvWmZPbXVCNjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZ9yInv8
8hm85r0a/k5ioAxhumloTojENMmuPBNzsfqcOKAO58pdaJbo/fuMY3zZ5oMwLPAB
hFWPd9nOsR2+lUbhEwpxBgsH/fbhCBHS7g0l2fiFzKuxdLG13ANG8R1DLRtRGNHG
GKxBiTUVON0q7ivWs8mCwoornnRkO2iqI6ZRRGQp0DVvupAqDB25oloxSEOMK859
nDYqdT40XRnZVDGV9UgHBLbf/pVxnSL/JF87AfOj8F/dydNAXDKxvP7sp6HRdJRn
aIMKEPeauq3hrtNvFdLg6ScdozvEqtZquGqHgklJu6W2761oEpFsC5YBRh3MSE+K
jeZ9NwsUAVh+YA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:44 2026 by rpki-client