Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: FJ3ksghet3BUdpvirQII0su5MEMMovKodXaiht1sRok=
Subject key identifier: BD:63:8F:11:7B:B4:13:13:7B:06:25:9D:7D:88:61:2F:D8:AF:A6:DA
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019D9962E5D78D7BE53862AB1C05F7C95C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1712
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: OuOJCRdP3PGsRBUPI91JGxqEbL0MHVIYVFxZfS+9uz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e5:d7:8d:7b:e5:38:62:ab:1c:05:f7:c9:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=bd638f117bb413137b06259d7d88612fd8afa6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:6e:7f:b7:8c:07:d6:6d:6e:02:37:6a:14:
1c:6f:f4:d6:f6:5f:35:30:0a:b4:07:63:f5:aa:c2:
8c:92:db:9e:39:3e:43:c4:ff:dd:e6:8e:d2:11:02:
10:6e:39:30:cc:65:51:ac:22:ff:52:0a:fe:34:51:
fd:d3:44:f6:c2:56:96:7e:0e:d5:36:02:cc:e6:3a:
7c:a2:09:f6:d5:6f:76:d5:fe:7a:88:b0:d0:94:a2:
64:01:9a:ae:4d:29:60:9c:42:7a:f2:eb:b7:c7:a3:
97:a1:f6:e2:9d:6e:32:3b:24:7c:f1:3f:d0:07:1d:
ee:d6:50:e3:21:99:8c:9a:5c:eb:0b:4b:6a:89:c4:
18:ad:3d:5f:58:d1:c2:4b:18:71:ad:ab:b5:34:46:
0a:53:60:83:dc:14:de:f1:94:63:7d:f2:29:b3:fb:
3f:e7:0b:92:46:34:64:84:7b:4e:30:65:80:ef:ad:
92:70:b9:61:b9:71:59:99:1a:a1:a8:bc:94:88:3a:
0b:05:63:2b:24:fb:d3:18:52:a9:78:45:30:30:dd:
d9:e7:e5:5f:ae:ae:62:80:23:d5:b9:ac:77:39:44:
d1:3e:5c:2f:7f:bf:3c:3a:7b:93:b1:6b:7b:ba:9b:
ab:d5:36:9c:f8:42:c7:bf:52:ce:8a:0a:1a:a3:50:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:8F:11:7B:B4:13:13:7B:06:25:9D:7D:88:61:2F:D8:AF:A6:DA
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:93:0d:40:99:d6:a3:5d:bc:4f:5b:0a:db:7b:9d:81:5b:c3:
45:8e:67:ef:48:33:bf:3d:64:13:71:cc:fe:f7:34:db:49:36:
c6:5f:ee:f4:2d:57:84:26:02:c0:48:a3:17:f4:99:5c:bf:88:
53:8a:6e:94:0e:7c:29:8c:57:c3:07:a1:9c:a5:15:f4:e5:22:
c8:0c:7d:4d:bb:1a:b6:f9:64:75:24:7d:42:02:b6:48:10:7e:
6b:0b:b6:1e:7e:1c:f8:25:da:15:a6:d7:2b:48:f1:12:93:a3:
d2:f2:d5:ba:42:37:81:f9:fd:ce:cd:80:2c:30:1b:ef:82:45:
4b:17:9c:fd:3f:e9:c7:95:4f:41:2d:1d:01:10:05:41:61:19:
ba:51:97:7d:0d:2e:d8:5e:d3:81:a6:0d:f8:e9:4e:1c:63:2b:
cb:24:8a:b8:0f:a0:51:3b:c6:58:dc:53:09:1b:77:3f:0e:ab:
9c:81:18:4b:ad:3c:11:c4:6e:4f:07:eb:7c:2b:b7:ec:0c:a7:
da:ec:ee:69:cb:3e:ca:e4:b8:9c:3c:b1:9a:03:86:cf:ec:3a:
3a:69:b5:ba:07:00:07:40:4c:29:c9:9f:e1:53:d5:d7:28:d0:
c4:de:4e:6a:68:ca:5e:0d:59:17:65:21:9d:fa:1d:fb:33:74:
d8:cb:65:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYuXXjXvlOGKrHAX3yVx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MjU5ZGVhM2U5Y2FlNmU4MTk1ODhjNWM5MTNmMDJkNDQx
MDM5OGIwHhcNMjYwNDE3MDMwMTI4WhcNMjYwNDE4MDMwMTI4WjAzMTEwLwYDVQQD
EyhiZDYzOGYxMTdiYjQxMzEzN2IwNjI1OWQ3ZDg4NjEyZmQ4YWZhNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGluf7eMB9ZtbgI3ahQcb/TW9l81
MAq0B2P1qsKMktueOT5DxP/d5o7SEQIQbjkwzGVRrCL/Ugr+NFH900T2wlaWfg7V
NgLM5jp8ogn21W921f56iLDQlKJkAZquTSlgnEJ68uu3x6OXofbinW4yOyR88T/Q
Bx3u1lDjIZmMmlzrC0tqicQYrT1fWNHCSxhxrau1NEYKU2CD3BTe8ZRjffIps/s/
5wuSRjRkhHtOMGWA762ScLlhuXFZmRqhqLyUiDoLBWMrJPvTGFKpeEUwMN3Z5+Vf
rq5igCPVuax3OUTRPlwvf788OnuTsWt7upur1Tac+ELHv1LOigoao1CM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1jjxF7tBMTewYlnX2IYS/Yr6baMB8GA1UdIwQY
MBaAFGYlneo+nK5ugZWIxckT8C1EEDmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQt
Y2JiZTMyNDJjMmJkLzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQtY2JiZTMyNDJjMmJk
LzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZMNQJnW
o128T1sK23udgVvDRY5n70gzvz1kE3HM/vc020k2xl/u9C1XhCYCwEijF/SZXL+I
U4pulA58KYxXwwehnKUV9OUiyAx9TbsatvlkdSR9QgK2SBB+awu2Hn4c+CXaFabX
K0jxEpOj0vLVukI3gfn9zs2ALDAb74JFSxec/T/px5VPQS0dARAFQWEZulGXfQ0u
2F7TgaYN+OlOHGMryySKuA+gUTvGWNxTCRt3Pw6rnIEYS608EcRuTwfrfCu37Ayn
2uzuacs+yuS4nDyxmgOGz+w6Omm1ugcAB0BMKcmf4VPV1yjQxN5OamjKXg1ZF2Uh
nfod+zN02MtlGg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:37 2026 by rpki-client