Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: XY8z8h31pQ8de0LAKcL0oIIy4yCHmV6lcx4a50yTIBQ=
Subject key identifier: 07:69:12:FC:1F:E4:4C:9D:F2:9A:A3:A5:94:75:09:D6:D8:4C:F8:33
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 019D98F51857792A8A19F2F73FAA3B901D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:32 +0000
Manifest this update: Fri 17 Apr 2026 01:01:32 +0000
Manifest next update: Sat 18 Apr 2026 01:01:32 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: YXWjCrcDpa3PCOv4v5m3H/x5LShBpYtqGpEhA4dVlFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:18:57:79:2a:8a:19:f2:f7:3f:aa:3b:90:1d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Apr 17 01:01:32 2026 GMT
Not After : Apr 18 01:01:32 2026 GMT
Subject: CN=076912fc1fe44c9df29aa3a5947509d6d84cf833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:44:a1:2b:3a:d5:e1:da:6d:1f:fc:5d:c6:
c7:aa:0e:e8:8c:60:fd:c3:6f:3a:8d:77:80:a6:2e:
27:d0:5f:aa:af:7c:bb:5e:ba:83:2f:44:e6:6f:15:
8d:ab:38:91:e3:4a:65:60:6d:da:7b:6a:84:92:57:
68:cf:e6:47:1f:52:45:99:2f:7e:61:5c:26:8f:5b:
3b:31:9f:c1:d6:7d:7a:31:f6:3b:45:b7:94:ff:1b:
7a:57:a1:b4:93:b7:e2:86:d7:db:68:bc:33:35:56:
cc:60:76:5a:b1:a8:68:7d:ab:fe:47:aa:83:ce:2b:
e0:c1:7c:0d:32:6d:f2:9c:ea:38:e4:4b:b5:fc:52:
06:55:46:84:0a:49:1d:8b:6c:47:79:4e:00:42:26:
7f:ed:d8:3a:d8:e7:fe:e7:21:31:6c:56:ad:c0:21:
a2:74:c1:97:94:cf:ca:4f:66:11:ae:77:ba:d8:49:
cb:03:89:ad:f6:63:9f:0a:3d:a5:c2:12:d2:b3:7f:
0a:d6:55:fe:45:56:0e:50:66:1d:cd:d8:0c:39:c2:
30:7c:2f:55:0c:ac:7d:73:28:79:06:85:60:b7:60:
65:5d:ba:ce:8a:3d:3a:d2:21:2e:1a:a3:66:93:d2:
72:31:b1:22:1c:85:f5:25:bf:4f:62:71:6d:5c:5c:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:69:12:FC:1F:E4:4C:9D:F2:9A:A3:A5:94:75:09:D6:D8:4C:F8:33
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2e:75:65:c3:c7:e4:6a:53:22:3b:61:ac:8e:94:ae:91:43:
88:44:31:6a:05:49:f6:24:44:e3:37:88:8f:94:c0:7d:0d:60:
4a:5e:8c:20:9a:0b:61:d0:70:1c:87:61:db:58:38:50:7d:5a:
f2:7d:94:26:b7:b3:91:29:cc:60:2a:86:cb:5a:ee:61:22:32:
61:62:82:38:d9:4c:d0:3e:88:04:db:b3:a9:e1:fd:65:c5:00:
97:9f:31:43:d4:aa:47:2b:05:67:72:84:5a:56:83:df:e2:60:
36:ef:19:3b:8a:b9:5b:54:c9:e8:90:47:ad:21:cb:2d:79:e2:
9c:44:6e:77:55:ce:a6:b3:a1:fa:cf:c6:ac:52:9e:4e:9e:20:
6b:77:fc:f2:4c:b2:aa:ba:09:7f:16:c6:61:e3:7d:a5:72:6f:
07:19:41:4f:78:4b:f4:df:2d:0a:dc:bb:ca:95:75:32:00:f1:
7e:e3:e2:0c:e9:41:50:05:41:19:73:4d:32:bd:6f:a8:10:95:
80:6d:b1:08:59:cf:59:81:1a:7c:c1:8b:23:0f:60:ae:2f:cf:
42:19:ba:58:36:a1:81:f3:71:74:eb:3b:0e:bf:3c:80:0d:6e:
f8:47:80:17:fe:89:c2:40:cb:99:06:21:44:96:ce:91:06:bf:
82:6e:1d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9RhXeSqKGfL3P6o7kB2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzkzNWYwOGQ3ZjA2NTJkZDg1NjIyMDA1N2M0NjRhZWQ1
MjBlMTIwHhcNMjYwNDE3MDEwMTMyWhcNMjYwNDE4MDEwMTMyWjAzMTEwLwYDVQQD
EygwNzY5MTJmYzFmZTQ0YzlkZjI5YWEzYTU5NDc1MDlkNmQ4NGNmODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOdEoSs61eHabR/8XcbHqg7ojGD9
w286jXeApi4n0F+qr3y7XrqDL0TmbxWNqziR40plYG3ae2qEkldoz+ZHH1JFmS9+
YVwmj1s7MZ/B1n16MfY7RbeU/xt6V6G0k7fihtfbaLwzNVbMYHZasahofav+R6qD
zivgwXwNMm3ynOo45Eu1/FIGVUaECkkdi2xHeU4AQiZ/7dg62Of+5yExbFatwCGi
dMGXlM/KT2YRrne62EnLA4mt9mOfCj2lwhLSs38K1lX+RVYOUGYdzdgMOcIwfC9V
DKx9cyh5BoVgt2BlXbrOij060iEuGqNmk9JyMbEiHIX1Jb9PYnFtXFxsgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdpEvwf5Eyd8pqjpZR1CdbYTPgzMB8GA1UdIwQY
MBaAFJs5NfCNfwZS3YViIAV8RkrtUg4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xYmEyNTItOTNjMS00MTU5LTk1YTct
MGUwMTE3NjFiMWIxLzEvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xYmEyNTItOTNjMS00MTU5LTk1YTctMGUwMTE3NjFiMWIx
LzEvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy51ZcPH
5GpTIjthrI6UrpFDiEQxagVJ9iRE4zeIj5TAfQ1gSl6MIJoLYdBwHIdh21g4UH1a
8n2UJrezkSnMYCqGy1ruYSIyYWKCONlM0D6IBNuzqeH9ZcUAl58xQ9SqRysFZ3KE
WlaD3+JgNu8ZO4q5W1TJ6JBHrSHLLXninERud1XOprOh+s/GrFKeTp4ga3f88kyy
qroJfxbGYeN9pXJvBxlBT3hL9N8tCty7ypV1MgDxfuPiDOlBUAVBGXNNMr1vqBCV
gG2xCFnPWYEafMGLIw9gri/PQhm6WDahgfNxdOs7Dr88gA1u+EeAF/6JwkDLmQYh
RJbOkQa/gm4dow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:24:25 2026 by rpki-client