Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: ROwd5MsGTKAhB1Zygr7vvv5rr5PYpk8wBdL4tY+WfQ0=
Subject key identifier: 38:43:08:E1:96:27:36:F4:21:61:38:DF:D0:94:8A:9C:43:12:1B:1A
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019D9850412BF5186C6DD136E9FB03E7AAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 11A4
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: Ym7GGSUDehAnyT1fT1Xh6oa5JhWSadWARW7OEaIJXXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:41:2b:f5:18:6c:6d:d1:36:e9:fb:03:e7:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=384308e1962736f4216138dfd0948a9c43121b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:f9:91:6b:6f:f4:6c:d7:42:35:59:10:74:
7a:95:89:12:6d:1e:3f:ed:71:60:6a:7e:57:d2:d6:
30:31:1a:b1:ed:87:da:94:3e:2a:81:da:69:c3:60:
7c:43:f2:3f:c2:b0:f6:ce:22:18:0b:6b:4f:ea:cf:
98:97:87:30:72:39:89:87:96:80:79:8d:d4:c6:59:
0d:2e:47:18:2a:3d:90:9e:dc:c7:3c:60:f5:f2:88:
c0:84:eb:09:d6:7f:1a:77:88:65:43:1a:2d:f7:41:
d7:85:6a:c2:69:97:61:3b:0e:29:6c:32:f4:7f:76:
77:62:b5:ab:09:34:09:c2:85:df:4b:2e:4a:ed:93:
ff:78:21:7b:14:d8:7d:86:0f:68:4f:34:fa:cf:6c:
f8:46:53:3e:eb:fc:c7:a8:4d:4a:de:18:3d:be:9a:
91:81:0c:1d:a8:ea:e0:5a:15:dd:44:c6:86:39:05:
ba:15:ab:74:c3:c1:a1:59:7e:c9:1c:63:76:15:47:
9b:32:b1:c4:7c:17:3b:a2:20:59:b6:6f:61:46:19:
50:ed:73:59:6c:6c:eb:68:b7:52:7e:88:a7:c8:1c:
c5:d8:ca:40:9a:d7:63:06:75:8a:20:9c:91:ee:36:
05:a9:bf:75:43:c8:b7:17:f7:22:1a:25:68:ea:eb:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:08:E1:96:27:36:F4:21:61:38:DF:D0:94:8A:9C:43:12:1B:1A
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c5:05:41:4c:af:d1:68:68:f3:f7:bb:b8:8b:8d:1c:ec:33:
7c:56:5e:37:98:da:e0:bd:a8:60:92:0a:8c:e0:17:cf:62:15:
7d:02:7a:c5:ca:05:b4:e7:f5:47:18:d9:2f:9f:fd:c5:fe:5b:
aa:37:e4:45:e8:9b:09:a4:f9:7c:eb:d8:6b:42:85:eb:99:ac:
9d:76:e5:2c:3d:2c:aa:52:1d:9a:50:b8:db:b0:e2:d3:e4:12:
49:4a:39:f6:3e:82:59:e3:31:18:35:4e:a6:8b:2a:24:84:44:
e6:23:99:63:44:e6:08:3e:a3:9b:fb:43:15:39:41:63:9e:67:
5a:68:64:e7:40:89:c0:d2:1e:e3:4e:f4:8b:28:ae:38:c5:63:
78:bc:67:b4:c5:1f:26:c0:7b:e1:90:b7:34:c5:6a:d6:79:45:
2a:f0:e4:16:d9:6a:2e:ee:d7:59:a5:36:5f:70:bf:8e:0d:95:
39:b5:4e:8a:09:74:bf:bb:6c:fc:84:1f:b3:0d:bf:93:78:65:
f3:81:12:64:75:05:50:59:d1:e4:3b:9d:2f:bc:18:10:26:67:
f0:a3:c6:9e:b8:48:a4:83:33:e2:eb:fe:17:83:ce:59:a3:24:
6f:a3:e3:c4:38:29:91:d3:15:d7:cb:12:ec:6f:95:ae:84:f7:
d0:90:3e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUEEr9RhsbdE26fsD56rVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0
OTAwNDAwHhcNMjYwNDE2MjIwMTI5WhcNMjYwNDE3MjIwMTI5WjAzMTEwLwYDVQQD
EygzODQzMDhlMTk2MjczNmY0MjE2MTM4ZGZkMDk0OGE5YzQzMTIxYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQL5kWtv9GzXQjVZEHR6lYkSbR4/
7XFgan5X0tYwMRqx7YfalD4qgdppw2B8Q/I/wrD2ziIYC2tP6s+Yl4cwcjmJh5aA
eY3UxlkNLkcYKj2QntzHPGD18ojAhOsJ1n8ad4hlQxot90HXhWrCaZdhOw4pbDL0
f3Z3YrWrCTQJwoXfSy5K7ZP/eCF7FNh9hg9oTzT6z2z4RlM+6/zHqE1K3hg9vpqR
gQwdqOrgWhXdRMaGOQW6Fat0w8GhWX7JHGN2FUebMrHEfBc7oiBZtm9hRhlQ7XNZ
bGzraLdSfoinyBzF2MpAmtdjBnWKIJyR7jYFqb91Q8i3F/ciGiVo6usS7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhDCOGWJzb0IWE439CUipxDEhsaMB8GA1UdIwQY
MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt
Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz
LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8UFQUyv
0Who8/e7uIuNHOwzfFZeN5ja4L2oYJIKjOAXz2IVfQJ6xcoFtOf1RxjZL5/9xf5b
qjfkReibCaT5fOvYa0KF65msnXblLD0sqlIdmlC427Di0+QSSUo59j6CWeMxGDVO
posqJIRE5iOZY0TmCD6jm/tDFTlBY55nWmhk50CJwNIe4070iyiuOMVjeLxntMUf
JsB74ZC3NMVq1nlFKvDkFtlqLu7XWaU2X3C/jg2VObVOigl0v7ts/IQfsw2/k3hl
84ESZHUFUFnR5DudL7wYECZn8KPGnrhIpIMz4uv+F4POWaMkb6PjxDgpkdMV18sS
7G+VroT30JA+cA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:19 2026 by rpki-client