Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: 0ju82gu8OJHv5w/PRaXdFRd0OXlgd9WB8sL9JIw8i1A=
Subject key identifier: 28:FA:6E:52:A1:A8:E8:B5:BD:22:9D:C1:66:9A:B4:12:B9:05:D0:8F
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 019D9961F1768C170E481BCF96DBC7682EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 03:00:25 +0000
Manifest this update: Fri 17 Apr 2026 03:00:25 +0000
Manifest next update: Sat 18 Apr 2026 03:00:25 +0000
Files and hashes: 1: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=)
2: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: ejB+IzjZwZEvJ6LwjFPAY4S7XcU1zJf8QdoIFcSP2XU=)
3: f56SXyzVaFxPipkSbWjQspBnG6k.asa (hash: kTkK/KuPdlPU1v4Iqn9nm0PLfpF6FLDnJnaGt4nEmLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f1:76:8c:17:0e:48:1b:cf:96:db:c7:68:2e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Apr 17 03:00:25 2026 GMT
Not After : Apr 18 03:00:25 2026 GMT
Subject: CN=28fa6e52a1a8e8b5bd229dc1669ab412b905d08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:ae:d5:3d:a1:5c:ed:d5:93:64:57:44:9f:
38:1b:5a:4b:1f:3a:27:f4:7e:b7:5f:a3:58:54:f4:
81:40:b8:73:95:52:1e:91:21:c9:9f:88:56:2a:1d:
0e:00:f5:37:5b:31:c5:3e:10:23:38:a4:d1:0a:7f:
86:98:70:94:15:1e:d5:82:70:bb:cc:e9:7e:56:77:
16:c0:80:b2:52:99:00:70:a6:52:57:e0:22:f9:45:
2c:6c:f0:47:b7:f7:b7:8f:b3:f8:e3:23:0f:24:8c:
2d:6c:a3:e6:fb:67:3a:66:ef:88:d0:78:86:4b:f8:
fe:8c:6b:3b:4e:3a:80:5f:90:a8:54:4b:1f:a3:09:
17:ea:b6:bb:cd:1c:d4:26:9c:f7:8e:95:9f:aa:6e:
f8:b4:d1:0c:ce:3c:1a:13:23:a3:3e:94:df:b2:35:
23:36:9d:88:7b:17:ca:75:ff:e4:ac:d8:24:ea:45:
6d:fd:77:28:91:df:9d:8b:f5:07:55:dc:dd:8f:d6:
53:04:a7:4b:12:ca:e0:03:71:9c:1f:08:ea:3e:7b:
19:39:8f:1e:e6:07:b7:9d:6a:a3:01:78:48:10:b0:
cd:b6:0d:31:cf:8a:ec:fa:71:3e:6a:5a:aa:c9:90:
f4:8d:02:f2:99:27:93:18:4e:61:b5:2b:c3:07:71:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:6E:52:A1:A8:E8:B5:BD:22:9D:C1:66:9A:B4:12:B9:05:D0:8F
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:76:19:74:a3:ff:d9:09:35:d1:7c:5e:31:3b:b3:27:98:27:
0f:83:80:4f:18:f4:87:a8:79:48:57:3c:02:bb:c0:68:f4:e3:
a2:bc:8f:27:12:7a:02:35:b5:93:d0:88:22:71:cc:d5:12:3d:
22:37:a6:73:41:06:df:b7:99:22:8e:99:46:6b:15:9a:79:e2:
df:ce:ce:3e:77:66:2b:7c:65:19:dc:06:ef:0c:87:82:1e:2a:
85:0f:4e:bc:1c:0e:7d:54:d4:46:bd:b5:fc:64:36:be:5b:21:
33:e7:e8:28:85:c9:76:0f:e4:2e:3f:d6:5c:d8:51:3d:a8:eb:
d7:e6:9f:e4:52:1e:8f:2a:42:e7:f7:e7:61:14:5b:bf:66:1d:
a0:dc:2d:81:ac:02:91:31:2a:5c:23:3b:df:41:ef:ce:78:77:
09:82:02:b7:54:78:bc:67:36:a6:72:28:25:93:19:1a:ac:17:
d6:3e:af:0e:11:64:d4:95:65:94:85:b2:16:1f:5e:c7:ab:0b:
c9:cb:b4:ad:7e:7f:3f:fe:04:5e:cd:4b:1b:15:c7:cb:5f:ec:
86:25:02:a8:e6:52:2d:15:27:37:19:e8:7b:33:ef:86:49:f5:
16:66:97:c7:6d:ca:16:0a:14:c7:a0:50:29:94:44:5d:38:18:
57:d4:52:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfF2jBcOSBvPltvHaC6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh
OWI4OGIwHhcNMjYwNDE3MDMwMDI1WhcNMjYwNDE4MDMwMDI1WjAzMTEwLwYDVQQD
EygyOGZhNmU1MmExYThlOGI1YmQyMjlkYzE2NjlhYjQxMmI5MDVkMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaCu1T2hXO3Vk2RXRJ84G1pLHzon
9H63X6NYVPSBQLhzlVIekSHJn4hWKh0OAPU3WzHFPhAjOKTRCn+GmHCUFR7VgnC7
zOl+VncWwICyUpkAcKZSV+Ai+UUsbPBHt/e3j7P44yMPJIwtbKPm+2c6Zu+I0HiG
S/j+jGs7TjqAX5CoVEsfowkX6ra7zRzUJpz3jpWfqm74tNEMzjwaEyOjPpTfsjUj
Np2IexfKdf/krNgk6kVt/Xcokd+di/UHVdzdj9ZTBKdLEsrgA3GcHwjqPnsZOY8e
5ge3nWqjAXhIELDNtg0xz4rs+nE+alqqyZD0jQLymSeTGE5htSvDB3FL9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj6blKhqOi1vSKdwWaatBK5BdCPMB8GA1UdIwQY
MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt
MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3
LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHYZdKP/
2Qk10XxeMTuzJ5gnD4OATxj0h6h5SFc8ArvAaPTjoryPJxJ6AjW1k9CIInHM1RI9
Ijemc0EG37eZIo6ZRmsVmnni387OPndmK3xlGdwG7wyHgh4qhQ9OvBwOfVTURr21
/GQ2vlshM+foKIXJdg/kLj/WXNhRPajr1+af5FIejypC5/fnYRRbv2YdoNwtgawC
kTEqXCM730Hvznh3CYICt1R4vGc2pnIoJZMZGqwX1j6vDhFk1JVllIWyFh9ex6sL
ycu0rX5/P/4EXs1LGxXHy1/shiUCqOZSLRUnNxnoezPvhkn1FmaXx23KFgoUx6BQ
KZREXTgYV9RSew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:32 2026 by rpki-client