Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: X1iMf3aG78XMgXDLDwzmCn0jhcGEYglqPZHgkrB61mc=
Subject key identifier: D2:CF:80:90:A4:7A:E2:66:02:3E:FA:B4:63:E4:9D:3F:6A:59:F4:BB
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019DA29D13372062CDF4DFC147F9012D4A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 1515
Signing time: Sat 18 Apr 2026 22:01:36 +0000
Manifest this update: Sat 18 Apr 2026 22:01:36 +0000
Manifest next update: Sun 19 Apr 2026 22:01:36 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: T7z7aYvHBMwHCB+XnyG5vcFfS5YMUS812OG9gdG2DZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9d:13:37:20:62:cd:f4:df:c1:47:f9:01:2d:4a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Apr 18 22:01:36 2026 GMT
Not After : Apr 19 22:01:36 2026 GMT
Subject: CN=d2cf8090a47ae266023efab463e49d3f6a59f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:3e:27:60:2a:24:ee:b1:00:91:33:37:ca:
4a:88:52:47:66:1d:45:4a:92:b9:a0:83:95:5b:eb:
b5:f9:d1:5c:ee:41:99:ec:af:92:51:17:85:ad:59:
5c:9c:1d:55:88:a3:f9:ed:d3:65:9b:0e:fe:66:e5:
43:12:16:4b:f4:9d:a9:a1:24:a6:56:c4:58:7e:a7:
44:0f:09:bf:ba:e4:06:1c:74:52:9a:8a:a3:c8:8c:
77:2a:d1:6b:04:60:86:c1:ae:2c:df:ff:6d:d8:a1:
5d:3c:0f:61:35:fb:a4:86:4c:04:b6:86:0f:26:07:
2a:0b:be:b8:3c:75:54:de:67:ba:24:f0:8d:3e:e8:
9e:cc:12:60:28:f9:5f:4f:26:ca:01:8d:23:47:0d:
e0:0e:b4:f7:7a:67:78:a9:8d:8d:f8:fe:41:8b:c0:
02:f8:b9:1d:5a:99:62:4b:76:e3:31:0e:c1:d8:ed:
a4:23:d5:08:ef:f5:08:ba:7a:3a:6a:bb:d1:cb:01:
40:77:50:fd:63:4b:61:4c:70:df:9d:33:cd:cc:a3:
87:78:85:dc:bf:64:af:84:97:5f:d7:92:9d:c0:8e:
26:6b:7d:dd:ad:3c:2a:b0:2f:50:4a:11:3f:cb:b2:
3c:5a:2f:e7:88:90:ca:a7:d5:94:41:d4:1a:8e:96:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CF:80:90:A4:7A:E2:66:02:3E:FA:B4:63:E4:9D:3F:6A:59:F4:BB
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:49:13:96:36:5d:ce:31:98:7a:6e:7a:a4:51:2b:be:e9:
36:27:07:d0:70:d5:ec:c1:c3:8e:bf:48:05:ac:c5:1b:30:d4:
be:dd:88:ab:bc:25:99:f4:22:51:68:bf:d9:34:fa:f2:9a:28:
34:e8:94:a4:23:91:3d:91:22:be:8c:17:c8:13:04:1e:ab:7d:
ce:ec:08:4d:01:52:eb:27:c6:34:ce:6a:86:8e:93:1e:7f:8a:
1e:b8:89:4a:bc:33:87:54:6f:16:a2:39:49:a4:45:16:ab:de:
c5:f6:f6:2b:e2:c2:a4:8d:bc:cb:64:1a:2c:52:8f:b1:28:e5:
97:90:71:20:97:4c:ad:55:50:ef:47:d6:c0:18:fc:ef:cb:e2:
08:05:bc:57:4b:ce:fd:82:90:9f:84:fd:d7:18:b6:95:54:35:
23:b3:66:64:ef:b4:34:4d:56:cb:0e:ae:f9:a9:d6:2c:f7:40:
1b:fc:52:44:ca:b8:70:53:e2:36:15:6b:70:6b:87:09:6c:04:
5a:a0:f7:f8:3f:e0:fb:36:80:40:b7:fb:e6:90:ac:62:38:21:
6b:26:f1:8f:74:6e:bf:49:d4:f6:f1:c9:33:b2:8a:f2:db:33:
f4:9e:f0:c6:34:7f:66:37:5f:54:b3:97:4a:0a:77:c3:8c:ed:
40:73:02:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inRM3IGLN9N/BR/kBLUpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw
ZjU2MWUwHhcNMjYwNDE4MjIwMTM2WhcNMjYwNDE5MjIwMTM2WjAzMTEwLwYDVQQD
EyhkMmNmODA5MGE0N2FlMjY2MDIzZWZhYjQ2M2U0OWQzZjZhNTlmNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYI+J2AqJO6xAJEzN8pKiFJHZh1F
SpK5oIOVW+u1+dFc7kGZ7K+SUReFrVlcnB1ViKP57dNlmw7+ZuVDEhZL9J2poSSm
VsRYfqdEDwm/uuQGHHRSmoqjyIx3KtFrBGCGwa4s3/9t2KFdPA9hNfukhkwEtoYP
JgcqC764PHVU3me6JPCNPuiezBJgKPlfTybKAY0jRw3gDrT3emd4qY2N+P5Bi8AC
+LkdWpliS3bjMQ7B2O2kI9UI7/UIuno6arvRywFAd1D9Y0thTHDfnTPNzKOHeIXc
v2SvhJdf15KdwI4ma33drTwqsC9QShE/y7I8Wi/niJDKp9WUQdQajpbYFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLPgJCkeuJmAj76tGPknT9qWfS7MB8GA1UdIwQY
MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt
MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2
LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrpJE5Y2
Xc4xmHpueqRRK77pNicH0HDV7MHDjr9IBazFGzDUvt2Iq7wlmfQiUWi/2TT68poo
NOiUpCORPZEivowXyBMEHqt9zuwITQFS6yfGNM5qho6THn+KHriJSrwzh1RvFqI5
SaRFFqvexfb2K+LCpI28y2QaLFKPsSjll5BxIJdMrVVQ70fWwBj878viCAW8V0vO
/YKQn4T91xi2lVQ1I7NmZO+0NE1Wyw6u+anWLPdAG/xSRMq4cFPiNhVrcGuHCWwE
WqD3+D/g+zaAQLf75pCsYjghaybxj3Ruv0nU9vHJM7KK8tsz9J7wxjR/ZjdfVLOX
Sgp3w4ztQHMCQQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:16 2026 by rpki-client