Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: aSO93VBUdHZ5HPC0JrpYqtpY3D7iQSw4sZxa8Z02hYE=
Subject key identifier: 10:12:DF:2A:54:60:71:D3:58:1C:1E:E2:72:6D:80:20:66:D9:54:3F
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 019D98BD443F5CF9B3F62033ABA330B03BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: 8UvKwz+VvY0o/jxmUSXx4beWkYmb1bErwqQ7J6qcP84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:44:3f:5c:f9:b3:f6:20:33:ab:a3:30:b0:3b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=1012df2a546071d3581c1ee2726d802066d9543f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:a2:9e:13:23:d2:6f:be:37:e2:a9:d8:91:
01:59:52:1b:7f:92:52:13:c3:13:cb:99:be:1f:f9:
8b:26:af:3c:bb:f6:5c:7c:f9:b0:f8:d1:b1:e8:53:
6d:ed:99:9f:dd:26:de:3f:7a:41:8f:88:7d:fd:20:
79:02:30:f9:8f:80:0c:af:bf:b3:4f:91:74:8c:84:
90:23:da:2f:19:19:38:2d:21:ef:ea:5a:5b:df:26:
86:53:cf:fe:37:ed:b9:95:58:cd:d9:80:35:ea:73:
d4:d4:5c:31:fa:f1:be:cc:63:f8:71:f8:f8:01:02:
10:0a:7f:4e:f3:47:83:4f:93:e4:9f:61:76:4e:09:
37:b1:83:71:27:58:9c:e3:a9:f1:fd:67:57:1f:9e:
fd:0e:c9:70:3e:bf:65:4f:f1:9e:12:fb:e4:f4:2b:
b6:c4:fc:4e:6c:c9:a4:66:53:33:47:6c:c5:f4:03:
b9:a5:24:58:92:33:9c:ab:17:64:f2:dd:b1:e5:8c:
09:c9:cd:c7:e1:97:2c:cd:c1:db:be:23:76:1c:11:
df:20:e6:76:f4:0b:28:ce:4f:ef:92:be:b3:cd:b6:
32:5d:5d:fe:a5:f5:3a:27:ca:d9:1c:c6:3f:33:67:
1b:84:be:e5:22:24:8f:23:97:90:93:63:84:38:3d:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:DF:2A:54:60:71:D3:58:1C:1E:E2:72:6D:80:20:66:D9:54:3F
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0f:fd:d8:2e:69:05:f4:78:d0:e1:2a:46:41:8e:01:52:fd:
c8:08:15:64:12:11:f9:d4:fa:5c:4b:ee:df:e9:06:2c:84:6e:
c4:c5:1f:6d:11:63:cd:09:28:41:ed:56:72:06:75:67:b5:ee:
4c:15:6c:3a:78:90:11:23:67:4d:0e:19:5a:e3:06:6f:22:d7:
6b:02:d3:99:4b:6a:07:42:f5:d7:69:06:08:41:9e:1b:18:87:
4c:dd:59:4b:f0:b2:0a:b7:ee:86:d6:33:4a:a7:7b:d0:e6:e3:
75:48:94:79:7e:0d:47:e5:8f:5a:ed:1e:b1:e2:de:de:c6:82:
21:b8:7b:19:2f:21:93:05:3c:61:b7:f8:52:2a:6e:7e:b0:6e:
16:6d:d6:e2:df:bd:31:99:d4:7e:d3:11:ae:ec:e4:51:ad:ba:
82:d6:df:9c:83:ab:0d:31:ef:10:3d:40:52:7d:f1:f2:22:b0:
a1:9b:ff:e6:13:aa:66:11:78:d9:1c:22:64:19:3f:92:f6:65:
5d:4b:70:94:9c:32:8c:a0:44:de:a0:a8:5a:49:89:a7:04:58:
72:17:85:1e:33:c6:48:c8:5f:54:9b:7c:25:54:ad:78:6a:7d:
36:06:da:c4:6b:4e:96:c5:98:68:04:bc:92:c1:1e:78:04:14:
cd:99:09:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvUQ/XPmz9iAzq6MwsDu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1
NzA1NDAwHhcNMjYwNDE3MDAwMDMzWhcNMjYwNDE4MDAwMDMzWjAzMTEwLwYDVQQD
EygxMDEyZGYyYTU0NjA3MWQzNTgxYzFlZTI3MjZkODAyMDY2ZDk1NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TeinhMj0m++N+Kp2JEBWVIbf5JS
E8MTy5m+H/mLJq88u/ZcfPmw+NGx6FNt7Zmf3SbeP3pBj4h9/SB5AjD5j4AMr7+z
T5F0jISQI9ovGRk4LSHv6lpb3yaGU8/+N+25lVjN2YA16nPU1Fwx+vG+zGP4cfj4
AQIQCn9O80eDT5Pkn2F2Tgk3sYNxJ1ic46nx/WdXH579DslwPr9lT/GeEvvk9Cu2
xPxObMmkZlMzR2zF9AO5pSRYkjOcqxdk8t2x5YwJyc3H4ZcszcHbviN2HBHfIOZ2
9Asozk/vkr6zzbYyXV3+pfU6J8rZHMY/M2cbhL7lIiSPI5eQk2OEOD1zjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAS3ypUYHHTWBwe4nJtgCBm2VQ/MB8GA1UdIwQY
MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt
NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2
LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA/92C5p
BfR40OEqRkGOAVL9yAgVZBIR+dT6XEvu3+kGLIRuxMUfbRFjzQkoQe1WcgZ1Z7Xu
TBVsOniQESNnTQ4ZWuMGbyLXawLTmUtqB0L112kGCEGeGxiHTN1ZS/CyCrfuhtYz
Sqd70ObjdUiUeX4NR+WPWu0eseLe3saCIbh7GS8hkwU8Ybf4UipufrBuFm3W4t+9
MZnUftMRruzkUa26gtbfnIOrDTHvED1AUn3x8iKwoZv/5hOqZhF42RwiZBk/kvZl
XUtwlJwyjKBE3qCoWkmJpwRYcheFHjPGSMhfVJt8JVSteGp9NgbaxGtOlsWYaAS8
ksEeeAQUzZkJcg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:50 2026 by rpki-client