Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: ykvOlVNeFGJVAO//D6ZwE53YFEIn7KtGveZa+PaFTck=
Subject key identifier: 34:C9:55:11:3E:D7:C6:B4:25:CC:F9:46:A1:7E:18:0F:60:AA:13:80
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 019D9A3E3BA75C6EB326D502F2210E263DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:01:02 +0000
Manifest this update: Fri 17 Apr 2026 07:01:02 +0000
Manifest next update: Sat 18 Apr 2026 07:01:02 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: zNENuP4MkKEgPWeM1LmvMePowhOFFT1b1a0gt9GD3nw=)
2: sWEyZCi5NDwyUie3aWYd5IPmfuw.roa (hash: TSCcBZmyzZxP3eOaeaIBX8e9nFHBHGiKk40P3OCJfbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3b:a7:5c:6e:b3:26:d5:02:f2:21:0e:26:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Apr 17 07:01:02 2026 GMT
Not After : Apr 18 07:01:02 2026 GMT
Subject: CN=34c955113ed7c6b425ccf946a17e180f60aa1380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:2d:18:5d:de:59:56:d0:e0:cc:d5:11:bf:
b7:73:74:66:53:e6:d1:a4:72:e5:d2:b6:b1:2a:ab:
31:56:0c:33:fd:2d:58:a2:af:a3:c8:ff:59:93:e1:
5b:c3:27:d1:df:d3:06:2e:f3:98:d7:e4:e3:7f:3d:
d2:72:95:c1:31:c1:a8:c8:7e:9d:96:ff:51:f5:39:
15:25:07:a8:eb:50:8c:89:52:cf:b9:c8:0b:03:c4:
0a:aa:79:12:6e:47:e1:4b:10:b9:51:a7:a5:5c:f2:
66:32:d1:5d:22:dc:e4:44:c9:7a:71:fb:e6:d0:6e:
2c:ac:e2:9c:54:78:9a:56:1d:0b:b5:ee:95:11:98:
33:32:c3:74:23:49:d8:14:d4:3f:88:5d:a2:62:7d:
89:af:5a:d1:a8:0d:4b:8e:62:ef:55:4a:a2:67:e9:
94:39:39:bf:db:25:48:48:35:a7:41:cd:6d:bf:12:
e6:23:d9:9f:9d:5b:f2:7b:8a:b4:a1:44:14:33:a5:
12:31:00:2f:a0:5f:98:1f:a8:01:cc:51:1d:55:7b:
4c:18:22:a3:75:66:ba:c8:00:12:e8:a4:77:bf:69:
43:c4:b3:cd:6a:c1:a8:90:73:62:b8:76:b0:e4:f0:
d7:b2:a2:bc:3d:39:d4:70:7c:1e:e5:f7:fd:b8:9f:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:55:11:3E:D7:C6:B4:25:CC:F9:46:A1:7E:18:0F:60:AA:13:80
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e6:21:2b:4c:7c:08:78:45:f3:15:ea:ff:2d:9a:55:1f:8c:
45:b2:28:77:1c:08:40:d4:e9:7a:19:14:75:80:97:b6:d3:c8:
98:f6:de:3c:e8:9c:c5:81:4e:1f:e7:9e:a1:b4:87:c6:92:9e:
96:4c:ae:9c:70:ff:71:d6:e8:96:ea:08:df:52:6f:4a:91:5c:
6c:3d:4a:e6:ee:9c:46:e7:b2:ba:fe:cf:b3:05:c2:bf:e2:9f:
f9:bf:a1:b9:8f:22:e5:d8:a0:60:3e:a8:56:1e:8e:24:1f:81:
9c:33:07:66:3d:29:23:b9:1e:9c:6f:f3:68:b4:fb:61:a2:30:
a4:0d:14:63:87:38:b4:dd:72:17:b3:71:1b:01:a4:af:f8:8d:
5a:68:27:9a:37:11:8c:6b:e9:d6:1a:7a:8b:c1:25:bf:e1:65:
30:dd:dd:42:29:89:56:39:3b:19:fa:78:0d:27:fb:39:6e:f4:
dd:c6:18:19:ae:ce:8b:b4:bf:cb:d8:61:7f:61:52:a3:fd:38:
71:2e:e8:b6:c3:12:16:ef:68:8c:55:32:8d:4f:ea:d1:4a:c8:
1b:5a:22:62:e3:58:40:d9:98:c5:64:91:44:e6:f5:ce:d6:99:
bc:cb:97:48:34:bc:44:67:15:85:bf:a6:78:de:fa:a5:25:d5:
00:0e:42:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPjunXG6zJtUC8iEOJj24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2FlNWVkN2NhOGJkNWY4ZWZmMzBiMGU0N2FiNGRmOTM4
MjhmZjEwHhcNMjYwNDE3MDcwMTAyWhcNMjYwNDE4MDcwMTAyWjAzMTEwLwYDVQQD
EygzNGM5NTUxMTNlZDdjNmI0MjVjY2Y5NDZhMTdlMTgwZjYwYWExMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR0tGF3eWVbQ4MzVEb+3c3RmU+bR
pHLl0raxKqsxVgwz/S1Yoq+jyP9Zk+FbwyfR39MGLvOY1+Tjfz3ScpXBMcGoyH6d
lv9R9TkVJQeo61CMiVLPucgLA8QKqnkSbkfhSxC5UaelXPJmMtFdItzkRMl6cfvm
0G4srOKcVHiaVh0Lte6VEZgzMsN0I0nYFNQ/iF2iYn2Jr1rRqA1LjmLvVUqiZ+mU
OTm/2yVISDWnQc1tvxLmI9mfnVvye4q0oUQUM6USMQAvoF+YH6gBzFEdVXtMGCKj
dWa6yAAS6KR3v2lDxLPNasGokHNiuHaw5PDXsqK8PTnUcHwe5ff9uJ+a0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTJVRE+18a0Jcz5RqF+GA9gqhOAMB8GA1UdIwQY
MBaAFGZ65e18qL1fjv8wsOR6tN+Tgo/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2Ut
NGE5Y2UyMTMxYjQyLzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2UtNGE5Y2UyMTMxYjQy
LzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOYhK0x8
CHhF8xXq/y2aVR+MRbIodxwIQNTpehkUdYCXttPImPbePOicxYFOH+eeobSHxpKe
lkyunHD/cdboluoI31JvSpFcbD1K5u6cRueyuv7PswXCv+Kf+b+huY8i5digYD6o
Vh6OJB+BnDMHZj0pI7kenG/zaLT7YaIwpA0UY4c4tN1yF7NxGwGkr/iNWmgnmjcR
jGvp1hp6i8Elv+FlMN3dQimJVjk7Gfp4DSf7OW703cYYGa7Oi7S/y9hhf2FSo/04
cS7otsMSFu9ojFUyjU/q0UrIG1oiYuNYQNmYxWSRROb1ztaZvMuXSDS8RGcVhb+m
eN76pSXVAA5CQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:25 2026 by rpki-client