Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: 9EQRZRfEvmCO0p7/cx5A/kxY37sVfNW1pzz7Aodrrh0=
Subject key identifier: 04:51:0F:01:B4:E6:02:21:97:16:B0:12:83:5D:61:B0:27:52:92:E1
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 019D98BD3D2123801C43C2D2A74E97EF0E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=)
2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: 8IOyXXAXi2BvKEY/WCQzQMgq2t7HvBUY049RWvYwC50=)
3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3d:21:23:80:1c:43:c2:d2:a7:4e:97:ef:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=04510f01b4e602219716b012835d61b0275292e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:a5:3c:c2:13:92:69:b5:d2:0c:7e:88:c7:
9a:e5:eb:e5:8f:bd:fb:c0:1b:33:b9:5c:22:99:7f:
2c:62:57:1e:65:cb:38:05:d8:e7:ad:e6:71:54:c8:
e5:14:55:dc:5a:bb:c3:4f:c9:66:d1:09:24:4e:af:
ea:ea:89:6f:56:36:df:cd:28:91:f7:e7:8c:e9:08:
7b:32:44:13:b2:c9:04:bd:ff:87:54:88:57:b2:b1:
ec:23:3a:06:3a:33:ca:fc:8d:87:be:d4:c2:6e:92:
53:d2:9c:23:70:96:03:b1:78:ef:35:a5:70:91:aa:
ef:09:54:24:ce:6d:ca:3d:dd:16:00:57:ff:51:a9:
51:53:11:f7:04:72:58:58:94:24:9d:b7:56:40:f5:
ab:31:fc:cc:44:82:ab:8f:94:23:0a:83:59:ed:39:
51:28:56:30:1b:a7:87:18:fe:ea:2b:24:77:23:e1:
c7:8f:0e:6b:d4:cc:94:40:80:6a:2c:fc:4f:2e:36:
0c:a5:21:eb:ec:a4:aa:da:b1:3d:88:e4:cf:a1:d6:
17:13:c9:47:eb:f9:6f:1d:b8:8f:36:e1:c4:39:57:
d2:01:e4:0d:9f:2d:da:bf:39:bf:79:59:c6:35:c6:
b3:a0:e6:93:42:5d:78:58:6d:87:15:5f:14:20:56:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:51:0F:01:B4:E6:02:21:97:16:B0:12:83:5D:61:B0:27:52:92:E1
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d3:51:a3:8a:17:9f:72:59:75:e0:0f:97:a2:87:6b:e0:47:
b9:57:7d:ea:a8:03:48:dd:00:77:3f:f4:c5:9d:bb:75:f2:7f:
25:63:52:28:8b:50:a1:3a:f9:db:2a:d8:ac:af:d0:06:f4:7d:
c9:06:db:95:7d:77:55:6a:fb:3b:ba:29:e3:87:08:f0:73:78:
78:ce:89:41:cf:9b:fb:b1:4c:bc:e1:38:6a:14:df:37:54:a0:
72:65:3e:de:f9:3a:ec:fd:b5:10:c9:ab:1a:7b:dc:2b:fd:39:
08:54:aa:88:d2:f2:a7:4e:3b:0d:20:f8:72:d3:da:5b:40:d0:
ec:38:d7:c5:e6:32:ad:3d:8e:d9:cd:8a:90:8c:36:a0:cb:83:
86:bc:8c:9c:b7:fb:bc:2b:9b:a0:8a:d1:ca:37:c6:70:80:60:
76:b0:6f:b5:84:42:48:ad:df:3f:2b:bf:87:5a:2f:a4:81:1d:
36:52:ab:b1:24:1a:7f:cf:bb:f3:1b:7e:93:f3:b2:bd:b8:88:
32:ca:36:62:db:7e:86:27:d2:f2:fe:e1:44:a5:d4:7b:44:51:
fc:38:c9:05:65:fa:ff:73:ca:13:1c:93:ce:49:f5:d9:b6:e1:
c1:4f:3a:6d:19:1c:70:ae:3b:27:45:0f:05:73:bb:d5:d4:94:
e7:06:7d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvT0hI4AcQ8LSp06X7w5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy
NDc4YTUwHhcNMjYwNDE3MDAwMDMxWhcNMjYwNDE4MDAwMDMxWjAzMTEwLwYDVQQD
EygwNDUxMGYwMWI0ZTYwMjIxOTcxNmIwMTI4MzVkNjFiMDI3NTI5MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ylPMITkmm10gx+iMea5evlj737
wBszuVwimX8sYlceZcs4BdjnreZxVMjlFFXcWrvDT8lm0QkkTq/q6olvVjbfzSiR
9+eM6Qh7MkQTsskEvf+HVIhXsrHsIzoGOjPK/I2HvtTCbpJT0pwjcJYDsXjvNaVw
karvCVQkzm3KPd0WAFf/UalRUxH3BHJYWJQknbdWQPWrMfzMRIKrj5QjCoNZ7TlR
KFYwG6eHGP7qKyR3I+HHjw5r1MyUQIBqLPxPLjYMpSHr7KSq2rE9iOTPodYXE8lH
6/lvHbiPNuHEOVfSAeQNny3avzm/eVnGNcazoOaTQl14WG2HFV8UIFbhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARRDwG05gIhlxawEoNdYbAnUpLhMB8GA1UdIwQY
MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt
YWI4ZTk3ZDg1NWNjLzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj
LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9NRo4oX
n3JZdeAPl6KHa+BHuVd96qgDSN0Adz/0xZ27dfJ/JWNSKItQoTr52yrYrK/QBvR9
yQbblX13VWr7O7op44cI8HN4eM6JQc+b+7FMvOE4ahTfN1SgcmU+3vk67P21EMmr
GnvcK/05CFSqiNLyp047DSD4ctPaW0DQ7DjXxeYyrT2O2c2KkIw2oMuDhryMnLf7
vCuboIrRyjfGcIBgdrBvtYRCSK3fPyu/h1ovpIEdNlKrsSQaf8+78xt+k/OyvbiI
Mso2Ytt+hifS8v7hRKXUe0RR/DjJBWX6/3PKExyTzkn12bbhwU86bRkccK47J0UP
BXO71dSU5wZ99g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:45 2026 by rpki-client