Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: rF6SZShS77wc1xe0W0brGK098wl3qOa6jBhLwlREiGk=
Subject key identifier: CB:24:31:B7:4B:33:12:31:EE:30:46:39:F6:39:F9:0D:E0:0E:97:8B
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019D9A75301D4476B12965A426AB78018EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: Kqbt3xolrdmKo+soxjXobAf/Vd2vG3cBSvS5QIH/XuU=)
4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:30:1d:44:76:b1:29:65:a4:26:ab:78:01:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=cb2431b74b331231ee304639f639f90de00e978b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:23:70:8e:3f:ab:66:e6:55:14:d5:ce:bb:
72:f5:da:b3:21:a1:29:7b:d1:67:87:3b:91:0a:cc:
21:4c:78:e0:41:91:f7:fc:e6:eb:51:0a:f5:d5:46:
2c:78:7f:25:f8:58:81:1a:84:b1:40:23:f8:81:4e:
c6:c1:46:11:a7:99:2b:71:00:d2:82:0e:c7:79:52:
5f:d9:ea:00:ec:04:99:b5:bc:30:e8:2c:7b:10:50:
93:f6:92:a4:62:38:fc:e3:7f:0e:cf:bc:3d:e2:a3:
cc:12:b4:02:0b:2c:f3:fb:66:77:d3:5d:1b:66:00:
6d:fa:c5:54:1e:d7:06:50:77:62:bc:d0:0a:de:e0:
80:26:4d:8b:b6:f6:07:24:2c:15:4e:94:4c:d5:02:
28:e5:4f:14:07:9f:dd:b1:ce:80:b0:90:6b:66:91:
a7:92:4c:d9:85:9b:32:42:a0:8b:c2:77:31:37:28:
a2:19:2c:0f:e6:b7:7e:9a:8d:ca:9f:b3:83:2d:15:
7a:1c:9c:77:bb:6e:42:a8:d7:cb:63:76:d2:63:2e:
a6:38:2d:b0:69:99:5a:5e:74:d9:57:b4:5a:2e:6a:
2f:03:33:91:4d:c2:2b:6d:40:de:c9:94:79:86:6a:
38:1b:c5:a9:ba:f8:db:6b:d5:db:eb:a8:c0:b0:da:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:31:B7:4B:33:12:31:EE:30:46:39:F6:39:F9:0D:E0:0E:97:8B
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:db:ee:fe:1c:d3:ae:da:7b:40:5e:2b:9e:f5:1c:d1:b8:49:
1e:80:5b:9f:f8:b0:54:7a:27:c6:02:95:9a:5f:5f:fc:59:04:
48:c4:1b:30:05:24:66:2d:61:70:cc:aa:ab:ec:9d:97:f6:85:
a8:5d:0b:5e:ae:3f:65:2d:cf:b1:f3:21:4e:07:31:02:7a:eb:
0a:c2:e6:c4:f1:1e:0a:a3:08:df:cd:2f:50:80:f0:c3:96:b9:
3b:ba:90:c3:ba:09:80:36:7f:55:f9:1c:a7:70:af:0e:65:8b:
d8:9e:f0:41:1d:02:61:0d:eb:56:4e:b6:8a:a5:83:d7:19:a1:
e0:4d:ed:d0:57:b8:5a:28:9d:f6:71:df:3b:ac:f1:18:fb:82:
aa:cb:f6:47:dc:a5:0f:6a:95:cf:f1:5e:45:74:5e:c7:01:f7:
e7:4a:49:7d:4f:e9:aa:df:8d:a5:5e:39:2b:e2:e8:6d:79:31:
b4:10:33:12:ac:81:68:44:11:8f:45:2a:b4:2a:7b:2c:64:91:
a8:6f:26:97:88:28:74:c1:da:b5:47:87:eb:f6:79:fa:3d:85:
3a:71:33:71:f4:b3:30:47:fc:46:38:c7:99:a3:b6:98:84:66:
83:9a:9d:51:a7:fe:44:7e:44:63:7e:c4:13:7e:f8:2a:51:82:
8f:69:d8:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTAdRHaxKWWkJqt4AY7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1
NWJhZmIwHhcNMjYwNDE3MDgwMTA0WhcNMjYwNDE4MDgwMTA0WjAzMTEwLwYDVQQD
EyhjYjI0MzFiNzRiMzMxMjMxZWUzMDQ2MzlmNjM5ZjkwZGUwMGU5NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7YjcI4/q2bmVRTVzrty9dqzIaEp
e9FnhzuRCswhTHjgQZH3/ObrUQr11UYseH8l+FiBGoSxQCP4gU7GwUYRp5krcQDS
gg7HeVJf2eoA7ASZtbww6Cx7EFCT9pKkYjj8438Oz7w94qPMErQCCyzz+2Z3010b
ZgBt+sVUHtcGUHdivNAK3uCAJk2LtvYHJCwVTpRM1QIo5U8UB5/dsc6AsJBrZpGn
kkzZhZsyQqCLwncxNyiiGSwP5rd+mo3Kn7ODLRV6HJx3u25CqNfLY3bSYy6mOC2w
aZlaXnTZV7RaLmovAzORTcIrbUDeyZR5hmo4G8Wpuvjba9Xb66jAsNqxgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMskMbdLMxIx7jBGOfY5+Q3gDpeLMB8GA1UdIwQY
MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt
ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh
LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNvu/hzT
rtp7QF4rnvUc0bhJHoBbn/iwVHonxgKVml9f/FkESMQbMAUkZi1hcMyqq+ydl/aF
qF0LXq4/ZS3PsfMhTgcxAnrrCsLmxPEeCqMI380vUIDww5a5O7qQw7oJgDZ/Vfkc
p3CvDmWL2J7wQR0CYQ3rVk62iqWD1xmh4E3t0Fe4Wiid9nHfO6zxGPuCqsv2R9yl
D2qVz/FeRXRexwH350pJfU/pqt+NpV45K+LobXkxtBAzEqyBaEQRj0UqtCp7LGSR
qG8ml4godMHatUeH6/Z5+j2FOnEzcfSzMEf8RjjHmaO2mIRmg5qdUaf+RH5EY37E
E374KlGCj2nYKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:43 2026 by rpki-client