Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: jNp2dAbPok3AKwaQ3U11J+PUSuBjXYUNv2m7lheKQ/I=
Subject key identifier: 56:C3:82:91:B7:B3:5D:62:CA:25:DF:2E:40:FD:30:49:02:DD:E9:19
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019D9999523692AA688412F089E54F4B8C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 116C
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: R9cM1jFKzmXwrHyOFqMyxPAWCU835mtxZZeoBzPVaUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:52:36:92:aa:68:84:12:f0:89:e5:4f:4b:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=56c38291b7b35d62ca25df2e40fd304902dde919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:23:12:50:19:dc:62:c1:54:fa:69:fc:ef:b9:
94:59:8b:66:5f:0b:99:c1:36:4c:b4:3b:54:fa:a6:
ad:c0:87:ea:61:4b:66:34:b5:c0:2e:27:34:d8:95:
c2:72:e6:90:c3:76:25:84:b3:3a:93:43:d8:7a:cc:
eb:49:81:ed:b7:ff:f7:50:d7:f3:77:1c:48:cf:eb:
dc:91:5c:9d:91:e3:46:0d:4f:97:85:6b:1e:46:8f:
8d:82:68:07:4a:58:4f:a5:82:f4:d1:d5:ab:f2:21:
ab:09:d9:cc:3b:f2:c5:23:2b:fb:ba:d8:c3:02:27:
b3:9c:64:d8:e9:b6:cc:c7:61:b7:57:09:18:dc:9b:
42:2e:b7:3c:2b:93:ed:9f:21:51:36:1c:40:75:86:
74:7a:47:ef:51:7a:ef:f2:1f:04:49:4a:5e:4c:22:
64:76:20:34:4a:50:d8:6b:53:b7:eb:8f:30:ab:90:
c8:ad:97:06:31:1d:8e:72:67:3a:fd:5c:b4:be:8c:
81:8f:6b:44:4d:61:2f:e0:81:e9:81:8b:98:ea:83:
20:ee:ba:38:18:82:aa:59:d2:8e:fa:93:73:94:6f:
4a:f1:30:2e:7e:a3:29:66:73:ca:4f:5b:6c:d1:53:
75:b6:b3:64:92:c2:3c:7d:67:d1:be:aa:58:19:06:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:82:91:B7:B3:5D:62:CA:25:DF:2E:40:FD:30:49:02:DD:E9:19
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dd:c9:90:e9:66:37:0f:9f:2d:27:33:cd:42:11:3a:a0:5c:
dd:7e:51:0a:62:b6:49:17:17:b9:21:a4:78:71:19:d5:d8:29:
e4:9b:34:ff:7c:2c:8b:19:5d:ad:df:af:a5:17:d6:2d:28:b8:
3b:65:d4:06:0f:cb:87:56:f2:17:70:e3:21:fa:a6:01:cd:d1:
eb:22:e9:6b:08:ff:12:db:1d:dc:cf:86:da:62:94:12:84:f7:
ae:04:84:73:aa:4e:c0:7f:99:54:94:ed:87:47:20:5e:76:a5:
a1:bb:09:51:db:45:a4:f1:f5:66:e8:75:70:2a:07:6a:62:73:
ba:92:40:ef:58:a0:8d:ef:19:e5:35:b4:f4:7b:e1:fe:6a:ce:
34:81:5a:53:07:b2:6d:91:b1:e3:d8:a0:52:14:cd:95:af:f5:
38:97:14:e6:1f:6b:56:94:72:cd:8e:63:aa:2e:e1:0b:1b:fc:
5b:aa:47:67:2c:ed:8f:18:7f:3f:88:28:46:c8:d4:5f:b5:0c:
ec:e0:97:63:aa:43:5d:3f:67:58:72:60:69:28:7e:40:a3:d1:
bf:9e:9b:80:d3:dc:b6:54:d8:7b:62:c0:ab:ad:d5:71:21:77:
d7:2a:d9:51:27:51:5a:0e:cb:aa:c3:bb:d2:25:55:b7:77:f5:
21:8b:ac:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmVI2kqpohBLwieVPS4xxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1
ODUyMGMwHhcNMjYwNDE3MDQwMDU1WhcNMjYwNDE4MDQwMDU1WjAzMTEwLwYDVQQD
Eyg1NmMzODI5MWI3YjM1ZDYyY2EyNWRmMmU0MGZkMzA0OTAyZGRlOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/yMSUBncYsFU+mn877mUWYtmXwuZ
wTZMtDtU+qatwIfqYUtmNLXALic02JXCcuaQw3YlhLM6k0PYeszrSYHtt//3UNfz
dxxIz+vckVydkeNGDU+XhWseRo+NgmgHSlhPpYL00dWr8iGrCdnMO/LFIyv7utjD
AieznGTY6bbMx2G3VwkY3JtCLrc8K5PtnyFRNhxAdYZ0ekfvUXrv8h8ESUpeTCJk
diA0SlDYa1O3648wq5DIrZcGMR2Ocmc6/Vy0voyBj2tETWEv4IHpgYuY6oMg7ro4
GIKqWdKO+pNzlG9K8TAufqMpZnPKT1ts0VN1trNkksI8fWfRvqpYGQaDoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbDgpG3s11iyiXfLkD9MEkC3ekZMB8GA1UdIwQY
MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt
MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4
LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh93JkOlm
Nw+fLSczzUIROqBc3X5RCmK2SRcXuSGkeHEZ1dgp5Js0/3wsixldrd+vpRfWLSi4
O2XUBg/Lh1byF3DjIfqmAc3R6yLpawj/Etsd3M+G2mKUEoT3rgSEc6pOwH+ZVJTt
h0cgXnalobsJUdtFpPH1Zuh1cCoHamJzupJA71igje8Z5TW09Hvh/mrONIFaUwey
bZGx49igUhTNla/1OJcU5h9rVpRyzY5jqi7hCxv8W6pHZyztjxh/P4goRsjUX7UM
7OCXY6pDXT9nWHJgaSh+QKPRv56bgNPctlTYe2LAq63VcSF31yrZUSdRWg7LqsO7
0iVVt3f1IYusXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:37 2026 by rpki-client