Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: nOOSVvbGDf359YCbkACUBvZ2yWjzA0ieyq6K1wThMrg=
Subject key identifier: D4:C8:35:54:57:54:34:5B:4B:47:84:70:C9:54:BE:64:B7:82:21:14
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 019D9C2CDE5AC9B52B3B623F82815E76573B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0F9A
Signing time: Fri 17 Apr 2026 16:01:19 +0000
Manifest this update: Fri 17 Apr 2026 16:01:19 +0000
Manifest next update: Sat 18 Apr 2026 16:01:19 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: FyXVsj0kpZ47iDn2nKHupYAfVY8CeiI7V88na4PlGdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:de:5a:c9:b5:2b:3b:62:3f:82:81:5e:76:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Apr 17 16:01:19 2026 GMT
Not After : Apr 18 16:01:19 2026 GMT
Subject: CN=d4c835545754345b4b478470c954be64b7822114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:40:a6:dc:79:24:8a:3a:c8:56:24:f0:94:
b9:96:6c:92:a5:bb:1f:c2:6d:9b:b8:b2:d8:88:f5:
76:6d:1e:00:17:a6:08:df:20:40:d5:5c:3a:d3:4b:
ab:73:15:27:71:0e:00:25:36:b2:d2:10:97:11:ed:
2a:95:e1:e6:e4:ba:64:a9:e8:e7:0b:85:70:fa:1d:
00:cd:cb:26:c8:01:dc:a1:c0:40:3c:ee:ee:36:64:
a8:ad:26:bd:6e:3c:b1:78:70:61:87:c1:a9:13:d4:
4a:32:b4:6f:05:01:a6:9c:85:88:05:94:5d:7a:23:
be:22:30:dc:3b:30:c8:fc:46:31:df:ff:3f:91:9a:
8b:05:32:4f:35:95:f5:77:81:c6:42:62:8b:ab:c6:
af:89:3c:96:d0:0b:df:31:03:0a:05:66:44:fd:8b:
86:1c:f9:4c:53:2f:e2:93:85:3c:4f:aa:d2:4f:b9:
d5:bb:67:5b:c8:9a:d4:2b:0b:02:d7:34:58:ef:0c:
da:03:f6:f9:8e:8f:6b:04:64:11:06:51:f1:1a:b7:
47:d0:57:46:f9:14:1b:4e:4a:9d:14:c7:17:89:3a:
84:ff:6e:f3:a0:74:9f:bd:13:f9:71:4d:94:62:9a:
f4:c7:67:b2:67:77:09:c6:42:e0:83:6e:e4:8c:f1:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:35:54:57:54:34:5B:4B:47:84:70:C9:54:BE:64:B7:82:21:14
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0e:eb:4d:d7:84:d6:e7:cf:81:2b:a6:f4:ad:d0:15:bf:28:
b8:83:d7:86:4f:2b:6c:1f:f9:d0:29:c0:9a:7e:10:50:36:89:
c0:d5:0e:fc:de:16:99:e1:81:3f:36:d1:1d:25:73:11:16:03:
6e:14:c8:eb:91:5d:34:3c:21:e7:09:76:ee:f9:d5:78:80:cb:
08:bd:e3:c7:58:da:a7:b3:c4:80:40:5a:6a:2c:6a:43:a4:c9:
7d:13:e5:09:a2:1b:70:50:26:51:c9:27:91:06:c8:05:b5:5d:
73:1b:e9:d4:8e:c9:f3:b9:27:3c:db:b4:53:cf:cb:c1:69:fc:
37:cd:f5:07:9f:a5:20:a0:ab:8b:b7:2a:11:f9:3c:02:d9:1f:
4c:2c:79:cd:60:f7:71:b4:86:e5:d5:6f:43:0e:5f:2e:f1:83:
c6:7c:ca:a5:a3:71:a1:82:83:eb:03:00:3a:58:bf:3b:d8:c0:
2d:2d:d2:71:b3:b6:04:10:4d:bb:76:21:18:1f:b1:1f:71:2d:
ee:d9:29:56:07:ca:9f:5d:18:8e:1e:01:21:6f:8b:f8:92:6d:
51:7b:dc:9a:bc:02:57:6b:1c:44:aa:c4:f0:53:af:f9:55:a9:
f8:16:71:df:c5:5b:d1:fd:84:9c:d5:21:1c:1f:5a:8e:91:ee:
ad:ef:c1:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLN5aybUrO2I/goFedlc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzVmNmZmNTY3YmRlOTMzOTRmZmYyODJmYWQ0MTdkYTBi
NTM2MTQwHhcNMjYwNDE3MTYwMTE5WhcNMjYwNDE4MTYwMTE5WjAzMTEwLwYDVQQD
EyhkNGM4MzU1NDU3NTQzNDViNGI0Nzg0NzBjOTU0YmU2NGI3ODIyMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDRAptx5JIo6yFYk8JS5lmySpbsf
wm2buLLYiPV2bR4AF6YI3yBA1Vw600urcxUncQ4AJTay0hCXEe0qleHm5Lpkqejn
C4Vw+h0AzcsmyAHcocBAPO7uNmSorSa9bjyxeHBhh8GpE9RKMrRvBQGmnIWIBZRd
eiO+IjDcOzDI/EYx3/8/kZqLBTJPNZX1d4HGQmKLq8aviTyW0AvfMQMKBWZE/YuG
HPlMUy/ik4U8T6rST7nVu2dbyJrUKwsC1zRY7wzaA/b5jo9rBGQRBlHxGrdH0FdG
+RQbTkqdFMcXiTqE/27zoHSfvRP5cU2UYpr0x2eyZ3cJxkLgg27kjPHlBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTINVRXVDRbS0eEcMlUvmS3giEUMB8GA1UdIwQY
MBaAFM019v9We96TOU//KC+tQX2gtTYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDct
NDRhMzA3NTQ1ZDc0LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDctNDRhMzA3NTQ1ZDc0
LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANA7rTdeE
1ufPgSum9K3QFb8ouIPXhk8rbB/50CnAmn4QUDaJwNUO/N4WmeGBPzbRHSVzERYD
bhTI65FdNDwh5wl27vnVeIDLCL3jx1jap7PEgEBaaixqQ6TJfRPlCaIbcFAmUckn
kQbIBbVdcxvp1I7J87knPNu0U8/LwWn8N831B5+lIKCri7cqEfk8AtkfTCx5zWD3
cbSG5dVvQw5fLvGDxnzKpaNxoYKD6wMAOli/O9jALS3ScbO2BBBNu3YhGB+xH3Et
7tkpVgfKn10Yjh4BIW+L+JJtUXvcmrwCV2scRKrE8FOv+VWp+BZx38Vb0f2EnNUh
HB9ajpHure/BGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:35 2026 by rpki-client