Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: lq5/8kuSgRVzrzKL6xDqIPUQm5SW52Sl696O3sasgNI=
Subject key identifier: B7:24:F8:23:7A:C6:80:F1:CF:27:A2:CC:09:06:38:82:D7:29:01:C6
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019D9B50C1CC6C4D8E9AF4A8B7DE707CD308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 12:00:54 +0000
Manifest this update: Fri 17 Apr 2026 12:00:54 +0000
Manifest next update: Sat 18 Apr 2026 12:00:54 +0000
Files and hashes: 1: qb_7krEk2T7S9jRpJ5MSFDtkffo.roa (hash: lIEMjy8AMkagBEJxT4ffs+QK3qsE1qpnuVxbq8dmbpY=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: tkSzv0VcI1LoeL3ZWRFPbkDuLNIC4IxyN5EvXY0FROA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c1:cc:6c:4d:8e:9a:f4:a8:b7:de:70:7c:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Apr 17 12:00:54 2026 GMT
Not After : Apr 18 12:00:54 2026 GMT
Subject: CN=b724f8237ac680f1cf27a2cc09063882d72901c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:24:76:e3:9a:8d:7d:5b:56:f0:ef:c9:f8:
3c:da:6a:63:43:b0:e7:8b:6e:b9:36:9c:e8:b3:3e:
92:1a:ff:d3:53:36:e4:93:d8:01:d7:dd:da:7c:00:
af:23:49:66:36:d2:fe:3f:79:b8:98:f1:02:1c:c4:
32:0c:9d:a2:95:68:8b:99:9c:05:d3:7e:e2:fd:f4:
b4:53:7d:89:00:04:62:94:ff:f8:d7:e3:33:2a:bc:
d7:a7:74:a5:ac:f5:d8:d6:f6:ba:44:ed:3c:33:df:
1e:76:7f:af:20:1d:de:1b:95:bb:29:10:98:8c:15:
c9:4c:d4:35:42:07:0b:4a:38:fc:32:a9:34:f4:cf:
cf:c2:aa:6c:56:a2:c2:27:0c:de:91:8d:85:fe:98:
ff:b2:cc:27:85:f2:90:ee:59:9e:98:4b:12:bb:49:
91:56:43:51:ca:35:d2:19:50:48:a6:70:d5:7a:a9:
a3:b4:c9:79:30:3e:be:fb:15:50:56:4f:7d:eb:09:
e4:b9:ea:71:7d:65:e4:ca:47:54:c9:d4:fe:63:4d:
ce:bf:58:f6:2f:a3:a2:d0:f5:70:81:34:69:af:72:
f8:46:20:4d:20:04:c4:4c:9b:25:48:61:34:a1:93:
ee:1c:f5:20:c9:6b:70:35:c3:b4:a8:08:da:06:89:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:F8:23:7A:C6:80:F1:CF:27:A2:CC:09:06:38:82:D7:29:01:C6
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:27:75:0a:da:1a:03:78:ce:49:01:07:cf:e3:03:f1:65:
be:0d:56:68:47:9b:be:74:cf:e8:b2:61:8a:1f:c8:7c:78:53:
1b:8e:28:ed:18:3c:64:d0:86:58:b1:d3:6a:6f:12:10:09:90:
91:20:d8:25:ae:4c:69:ce:f5:33:a9:50:9c:81:34:f0:0e:06:
62:2d:72:4d:40:fa:1f:9e:e6:bc:de:15:53:39:a7:68:44:66:
8c:cd:46:fb:e9:23:05:76:b7:b5:b3:00:9b:d5:7f:61:36:be:
fd:69:42:46:84:26:92:f1:1d:75:2e:2d:56:53:3d:cb:27:af:
39:34:d2:59:57:ef:8c:8d:ab:ab:3f:e6:85:af:d5:a9:08:61:
65:ab:c6:8c:a3:39:f4:8e:d0:75:02:75:1a:04:f3:8c:b3:bb:
2d:f6:f4:64:0b:52:be:f5:9d:13:68:df:f4:60:96:83:ae:01:
13:56:c4:f9:f5:0a:6e:6b:21:48:92:a3:a2:13:c5:5f:fd:13:
ed:53:a0:a6:bf:47:05:d1:d9:48:9b:d5:83:ce:9f:c8:f8:c4:
eb:4f:12:cb:95:c6:e9:b6:6e:af:5b:ff:9c:87:ce:1a:86:7e:
f8:4e:f8:2c:9e:c2:ff:ef:2d:3b:0c:66:f1:c7:c5:28:fa:ec:
83:7f:54:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUMHMbE2OmvSot95wfNMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy
ZGI0NTUwHhcNMjYwNDE3MTIwMDU0WhcNMjYwNDE4MTIwMDU0WjAzMTEwLwYDVQQD
EyhiNzI0ZjgyMzdhYzY4MGYxY2YyN2EyY2MwOTA2Mzg4MmQ3MjkwMWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwckduOajX1bVvDvyfg82mpjQ7Dn
i265Npzosz6SGv/TUzbkk9gB193afACvI0lmNtL+P3m4mPECHMQyDJ2ilWiLmZwF
037i/fS0U32JAARilP/41+MzKrzXp3SlrPXY1va6RO08M98edn+vIB3eG5W7KRCY
jBXJTNQ1QgcLSjj8Mqk09M/PwqpsVqLCJwzekY2F/pj/sswnhfKQ7lmemEsSu0mR
VkNRyjXSGVBIpnDVeqmjtMl5MD6++xVQVk996wnkuepxfWXkykdUydT+Y03Ov1j2
L6Oi0PVwgTRpr3L4RiBNIATETJslSGE0oZPuHPUgyWtwNcO0qAjaBon9MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLck+CN6xoDxzyeizAkGOILXKQHGMB8GA1UdIwQY
MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt
YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0
LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY8ndQra
GgN4zkkBB8/jA/Flvg1WaEebvnTP6LJhih/IfHhTG44o7Rg8ZNCGWLHTam8SEAmQ
kSDYJa5Mac71M6lQnIE08A4GYi1yTUD6H57mvN4VUzmnaERmjM1G++kjBXa3tbMA
m9V/YTa+/WlCRoQmkvEddS4tVlM9yyevOTTSWVfvjI2rqz/mha/VqQhhZavGjKM5
9I7QdQJ1GgTzjLO7Lfb0ZAtSvvWdE2jf9GCWg64BE1bE+fUKbmshSJKjohPFX/0T
7VOgpr9HBdHZSJvVg86fyPjE608Sy5XG6bZur1v/nIfOGoZ++E74LJ7C/+8tOwxm
8cfFKPrsg39UaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:59 2026 by rpki-client