Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: EEQr5T4FTk5yvkh3D2Zi/ur5d2Hu7Ra6JjgkBb3O1w4=
Subject key identifier: FF:18:DF:6A:62:5B:A2:5B:90:FC:65:19:C5:EF:E4:36:9A:F5:B4:25
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 019D9CD0EC57D0FE6DA43A8CFA493E6A51E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 10C0
Signing time: Fri 17 Apr 2026 19:00:30 +0000
Manifest this update: Fri 17 Apr 2026 19:00:30 +0000
Manifest next update: Sat 18 Apr 2026 19:00:30 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: KGjFY0zruJNZfkNem7sGeibMLnM/q0SmuWccah7okac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d0:ec:57:d0:fe:6d:a4:3a:8c:fa:49:3e:6a:51:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Apr 17 19:00:30 2026 GMT
Not After : Apr 18 19:00:30 2026 GMT
Subject: CN=ff18df6a625ba25b90fc6519c5efe4369af5b425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:e0:0e:d0:55:1d:82:2b:80:7c:74:96:2e:
8d:c4:0a:40:1e:cc:f3:82:61:1e:5a:98:25:22:dd:
c4:ed:d6:40:78:aa:8a:14:8b:5c:f3:04:d5:8c:d3:
41:2c:b4:ee:a2:4a:9f:1c:ff:34:98:2b:11:fd:a2:
fb:fa:ef:a5:8b:57:a0:80:69:ee:f2:05:d3:86:cf:
c4:73:44:42:13:5b:f1:6e:03:59:54:ce:78:94:61:
db:9c:04:22:c5:0c:28:ba:e5:f8:79:93:94:76:c4:
04:31:f4:43:fe:af:f7:38:3c:25:49:ad:d4:75:e9:
b0:8e:f8:0c:7d:db:ea:b9:45:8f:7e:f0:2a:5d:0f:
22:e9:a8:7e:ed:93:94:a3:9a:3f:b0:9d:68:b0:c9:
31:ca:8b:34:3a:18:3a:90:b5:cc:51:30:c0:aa:c4:
01:4e:5a:99:c8:be:1d:6d:f9:fb:3e:2f:a2:52:a9:
8a:ce:ff:db:3e:2d:7e:16:c6:1a:05:c9:50:27:3b:
d7:ab:1d:84:50:7e:11:b8:e3:ce:f1:2e:ed:b8:e5:
54:27:4c:13:88:a9:eb:3c:b2:8d:25:7b:0e:1d:1d:
90:7c:06:4d:a3:37:51:8f:8a:66:b0:51:96:ed:f1:
d0:2e:51:5f:14:bd:2a:0f:89:b8:f6:d2:cd:47:4a:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:DF:6A:62:5B:A2:5B:90:FC:65:19:C5:EF:E4:36:9A:F5:B4:25
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:97:f7:ec:fc:b3:26:f4:12:df:46:bf:fc:f3:e9:29:5a:d7:
fe:75:4d:cd:e9:3b:8d:f0:3d:c1:ad:00:09:79:8c:32:dc:2d:
3d:75:36:3b:a8:06:db:89:28:76:9c:7c:d1:b1:54:c6:a4:32:
d9:95:78:95:1c:bb:14:ca:e2:e2:54:65:b6:da:c0:bd:0b:e2:
9b:37:f4:2f:33:c9:e7:96:b8:be:ca:7f:bd:7c:ad:db:fd:d7:
9d:17:cb:3e:6e:63:ce:86:fe:26:39:dc:8d:5a:54:15:d1:07:
aa:48:89:80:e1:0f:7b:a3:32:59:46:93:c3:15:64:d2:ab:8a:
68:d6:4a:e4:4a:45:60:c5:35:13:16:65:b2:0d:53:b7:98:1b:
db:d0:26:fd:03:aa:19:31:3a:29:9d:a3:d0:c9:5d:a9:18:00:
9c:f4:a1:e2:0b:76:c6:cf:1f:64:73:fa:6a:84:0b:09:13:e7:
f5:25:37:b2:ab:47:fe:f9:63:67:a1:2f:6e:30:c0:7b:b7:ab:
dd:08:82:2d:ef:b7:af:c2:fd:aa:03:cb:b2:be:11:a0:89:0b:
82:8c:d3:fc:da:80:47:77:a8:54:7c:1d:76:68:14:c0:3b:90:
a5:36:b9:54:e3:3f:fa:5a:48:a1:87:19:3f:fa:f2:a5:bf:0c:
42:79:bf:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0OxX0P5tpDqM+kk+alHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2
Mjc5ZWMwHhcNMjYwNDE3MTkwMDMwWhcNMjYwNDE4MTkwMDMwWjAzMTEwLwYDVQQD
EyhmZjE4ZGY2YTYyNWJhMjViOTBmYzY1MTljNWVmZTQzNjlhZjViNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RzgDtBVHYIrgHx0li6NxApAHszz
gmEeWpglIt3E7dZAeKqKFItc8wTVjNNBLLTuokqfHP80mCsR/aL7+u+li1eggGnu
8gXThs/Ec0RCE1vxbgNZVM54lGHbnAQixQwouuX4eZOUdsQEMfRD/q/3ODwlSa3U
demwjvgMfdvquUWPfvAqXQ8i6ah+7ZOUo5o/sJ1osMkxyos0Ohg6kLXMUTDAqsQB
TlqZyL4dbfn7Pi+iUqmKzv/bPi1+FsYaBclQJzvXqx2EUH4RuOPO8S7tuOVUJ0wT
iKnrPLKNJXsOHR2QfAZNozdRj4pmsFGW7fHQLlFfFL0qD4m49tLNR0q98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8Y32piW6JbkPxlGcXv5Daa9bQlMB8GA1UdIwQY
MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt
MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx
LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZf37Pyz
JvQS30a//PPpKVrX/nVNzek7jfA9wa0ACXmMMtwtPXU2O6gG24kodpx80bFUxqQy
2ZV4lRy7FMri4lRlttrAvQvimzf0LzPJ55a4vsp/vXyt2/3XnRfLPm5jzob+Jjnc
jVpUFdEHqkiJgOEPe6MyWUaTwxVk0quKaNZK5EpFYMU1ExZlsg1Tt5gb29Am/QOq
GTE6KZ2j0MldqRgAnPSh4gt2xs8fZHP6aoQLCRPn9SU3sqtH/vljZ6EvbjDAe7er
3QiCLe+3r8L9qgPLsr4RoIkLgozT/NqAR3eoVHwddmgUwDuQpTa5VOM/+lpIoYcZ
P/rypb8MQnm/7A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:33 2026 by rpki-client