Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: G7i/BXcMEcmjplYOlgkEWf547EY5dpwmKJDTnBkiMa0=
Subject key identifier: 99:A9:F1:E7:87:76:F7:9E:1E:14:05:6B:CA:C5:B4:F7:D2:DA:7A:34
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019D9C2CC6D9F97247952E70057245213D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0423
Signing time: Fri 17 Apr 2026 16:01:13 +0000
Manifest this update: Fri 17 Apr 2026 16:01:13 +0000
Manifest next update: Sat 18 Apr 2026 16:01:13 +0000
Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=)
2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=)
3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: wnh/wvgT2QqKHKwdZ4773sMyeD2qyh5iJ0vkJWaByik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:c6:d9:f9:72:47:95:2e:70:05:72:45:21:3d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Apr 17 16:01:13 2026 GMT
Not After : Apr 18 16:01:13 2026 GMT
Subject: CN=99a9f1e78776f79e1e14056bcac5b4f7d2da7a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:23:74:16:83:a2:85:4e:97:a7:24:39:4b:
d7:4e:e6:8c:1d:d4:2e:e6:1e:75:01:58:28:51:da:
4c:ad:b9:05:19:37:60:27:69:6a:6b:ea:22:2f:f2:
6c:58:d1:f2:aa:15:be:23:54:c9:58:7e:24:b3:92:
84:0e:ce:11:d8:33:e6:35:77:07:78:a9:9a:c0:4b:
4d:c0:4b:fe:19:61:72:b1:62:2c:31:1a:63:e3:ce:
ee:b1:53:76:d3:40:71:89:47:f7:6e:f8:34:12:8d:
5d:26:fb:00:9a:3e:42:bc:8d:71:1a:36:14:57:b6:
b2:02:e8:1c:00:75:f6:59:c8:d0:20:d0:ce:4c:b5:
f7:f3:14:a1:3c:c3:a3:78:0a:31:8c:e8:77:e2:36:
75:98:e5:ce:11:a9:1f:eb:ac:f0:61:97:ce:56:aa:
25:ce:c0:d7:a3:c2:a2:a2:2d:0f:73:fe:69:62:85:
d7:58:d5:0a:2d:62:8c:88:f2:be:0a:7d:cd:9b:ee:
01:7e:ee:e7:19:c5:6e:af:d3:38:d1:43:37:4c:92:
90:c8:2b:c1:7b:7c:67:93:9e:a1:76:55:8b:03:68:
dd:19:f2:60:77:9c:0a:89:8b:7a:b3:19:1e:54:37:
b8:45:89:38:57:88:5e:c3:b3:76:c7:a8:65:a9:57:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:F1:E7:87:76:F7:9E:1E:14:05:6B:CA:C5:B4:F7:D2:DA:7A:34
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f8:1e:f4:62:dc:32:54:1c:82:06:86:25:0c:e3:ed:ab:92:
a8:00:1d:45:59:46:c4:72:79:97:28:7f:7a:29:7d:3d:02:c1:
d6:79:5d:47:bc:11:8d:39:c8:20:55:7b:b7:6a:6a:69:b8:96:
83:19:8b:4e:b7:b4:39:48:18:e2:47:53:46:fb:ea:18:05:e4:
df:84:a9:a5:ae:a8:b3:f2:9a:0c:e6:4d:f4:97:69:8e:89:ee:
b1:90:cd:a8:ed:1d:fc:0a:25:bf:b2:0c:1a:83:70:31:a5:0b:
0a:d9:a6:a1:50:f2:b4:51:cb:41:55:ff:dd:dd:01:9c:2a:1d:
9e:e6:28:e6:4e:b6:f1:46:83:30:b7:40:c8:58:df:0f:5c:28:
e5:89:da:fd:63:2b:20:49:5f:18:d1:7f:8e:b8:53:ae:f9:8e:
c0:9e:d5:80:28:2c:42:2f:6a:59:04:88:04:b1:90:4e:ee:1d:
35:f9:a8:ca:b1:4f:30:3b:7a:7d:61:78:c1:00:28:ac:96:f1:
4f:e0:e8:c8:84:61:01:56:00:b3:a0:b0:a2:82:e8:3a:d0:b6:
a9:5e:fd:37:01:d5:57:d6:9f:2a:36:de:70:ae:da:59:d6:96:
80:08:7a:8e:9a:25:f5:e7:e1:5f:20:4e:28:23:02:e1:ec:37:
c7:c5:d6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLMbZ+XJHlS5wBXJFIT1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw
ZDJiOTgwHhcNMjYwNDE3MTYwMTEzWhcNMjYwNDE4MTYwMTEzWjAzMTEwLwYDVQQD
Eyg5OWE5ZjFlNzg3NzZmNzllMWUxNDA1NmJjYWM1YjRmN2QyZGE3YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfcjdBaDooVOl6ckOUvXTuaMHdQu
5h51AVgoUdpMrbkFGTdgJ2lqa+oiL/JsWNHyqhW+I1TJWH4ks5KEDs4R2DPmNXcH
eKmawEtNwEv+GWFysWIsMRpj487usVN200BxiUf3bvg0Eo1dJvsAmj5CvI1xGjYU
V7ayAugcAHX2WcjQINDOTLX38xShPMOjeAoxjOh34jZ1mOXOEakf66zwYZfOVqol
zsDXo8Kioi0Pc/5pYoXXWNUKLWKMiPK+Cn3Nm+4Bfu7nGcVur9M40UM3TJKQyCvB
e3xnk56hdlWLA2jdGfJgd5wKiYt6sxkeVDe4RYk4V4hew7N2x6hlqVfRYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmp8eeHdveeHhQFa8rFtPfS2no0MB8GA1UdIwQY
MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct
Yzk5NGZkMTc0ZTZlLzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl
LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPge9GLc
MlQcggaGJQzj7auSqAAdRVlGxHJ5lyh/eil9PQLB1nldR7wRjTnIIFV7t2pqabiW
gxmLTre0OUgY4kdTRvvqGAXk34Sppa6os/KaDOZN9JdpjonusZDNqO0d/Aolv7IM
GoNwMaULCtmmoVDytFHLQVX/3d0BnCodnuYo5k628UaDMLdAyFjfD1wo5Yna/WMr
IElfGNF/jrhTrvmOwJ7VgCgsQi9qWQSIBLGQTu4dNfmoyrFPMDt6fWF4wQAorJbx
T+DoyIRhAVYAs6CwooLoOtC2qV79NwHVV9afKjbecK7aWdaWgAh6jpol9efhXyBO
KCMC4ew3x8XWeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:25:40 2026 by rpki-client