Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: RCehlbtI+tsdUGLvIGGCg4sgp6DYWGozyKfXrc0najY=
Subject key identifier: D4:CE:0B:2B:69:93:62:AC:69:8F:C9:13:57:FF:70:37:D1:FF:66:4F
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 019D9B87CE73C8A5996D73E3B6821882AB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 115B
Signing time: Fri 17 Apr 2026 13:01:01 +0000
Manifest this update: Fri 17 Apr 2026 13:01:01 +0000
Manifest next update: Sat 18 Apr 2026 13:01:01 +0000
Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=)
2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: pUSk3M5Z9RICF1dHYDNF4Rusqa5uFGkVNoqZP6CAG8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ce:73:c8:a5:99:6d:73:e3:b6:82:18:82:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Apr 17 13:01:01 2026 GMT
Not After : Apr 18 13:01:01 2026 GMT
Subject: CN=d4ce0b2b699362ac698fc91357ff7037d1ff664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:db:3c:76:b0:02:4b:4a:2b:50:b9:1c:5c:
0a:83:52:7b:49:0f:b5:35:0d:74:2f:5d:83:5a:a4:
a1:ff:53:39:7d:ff:bd:b8:10:f4:26:5c:f9:37:f4:
98:2a:15:10:37:b5:27:72:9e:46:79:ea:06:53:0c:
fb:27:9b:bc:11:fe:ac:46:4a:3f:81:c5:08:a3:f6:
8f:8b:71:dc:f0:7c:b0:0a:2f:dc:e0:b5:3e:aa:8c:
01:39:43:70:33:1d:b6:43:08:64:c0:1a:a7:59:51:
f0:f7:e8:68:d7:5d:fa:ee:67:51:8d:8c:14:50:ed:
1b:59:f4:44:cd:91:e7:85:97:aa:84:6a:a8:e2:24:
3b:bf:38:89:99:3c:bc:ae:5d:96:0f:f7:48:30:c2:
ea:65:e4:a6:ef:09:db:3b:d4:84:e2:29:44:81:6a:
c6:47:4a:5e:36:4f:b7:68:68:fa:0b:b6:16:7e:be:
a1:65:59:06:16:d1:7b:25:60:bb:5c:55:58:71:f6:
3e:a1:9d:f2:e4:e5:64:73:9f:d2:bd:c8:32:5c:02:
32:07:50:cb:ec:33:75:b0:b6:0a:37:e0:26:ab:da:
f7:4a:ca:a5:ea:e4:4a:b0:0b:c2:27:03:ce:1c:d6:
76:4b:e9:f4:87:de:3b:a9:48:0b:0a:45:43:3e:eb:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:0B:2B:69:93:62:AC:69:8F:C9:13:57:FF:70:37:D1:FF:66:4F
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:32:2e:06:b5:93:64:e5:42:27:36:f1:d2:46:eb:4a:e1:34:
d1:4a:89:3b:03:5d:72:d5:05:ad:3c:a2:02:eb:7a:d4:6f:ef:
80:31:16:ba:88:8f:3a:9c:e7:1f:c2:05:a6:35:a4:89:d7:5e:
1d:7e:12:9a:51:3b:a6:8f:ba:1f:24:76:49:32:1d:1e:14:1c:
a9:4b:57:82:73:f1:8f:7a:51:71:5f:27:9b:fb:1b:89:ae:eb:
3e:83:15:04:c9:ac:df:f6:32:b3:b9:05:e9:ff:5f:79:ef:e6:
db:db:a4:ec:5e:01:e1:c7:47:9e:cb:c6:72:73:db:3a:75:29:
60:79:41:71:a3:e8:60:3b:57:ce:ba:b9:ca:65:f1:43:0b:40:
2d:d9:4e:7b:74:d0:c1:26:73:70:11:34:ab:e4:81:1b:bd:79:
83:c4:70:7b:1f:da:7d:c1:28:6d:95:40:ae:40:d6:5b:7f:22:
24:87:9e:ef:98:b4:03:d0:6a:8e:df:69:84:d0:80:3f:b4:7f:
53:b3:79:f2:c0:db:22:0a:f3:f1:e0:fe:bd:ff:82:ac:7c:39:
53:f3:b6:11:33:8a:a6:54:0b:72:d6:98:c1:92:63:83:60:02:
52:2b:49:f1:f2:10:25:cb:39:84:de:e9:ae:f5:2f:ca:62:32:
f5:b5:cd:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh85zyKWZbXPjtoIYgqsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw
Yzg4N2QwHhcNMjYwNDE3MTMwMTAxWhcNMjYwNDE4MTMwMTAxWjAzMTEwLwYDVQQD
EyhkNGNlMGIyYjY5OTM2MmFjNjk4ZmM5MTM1N2ZmNzAzN2QxZmY2NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns7bPHawAktKK1C5HFwKg1J7SQ+1
NQ10L12DWqSh/1M5ff+9uBD0Jlz5N/SYKhUQN7Uncp5GeeoGUwz7J5u8Ef6sRko/
gcUIo/aPi3Hc8HywCi/c4LU+qowBOUNwMx22QwhkwBqnWVHw9+ho11367mdRjYwU
UO0bWfREzZHnhZeqhGqo4iQ7vziJmTy8rl2WD/dIMMLqZeSm7wnbO9SE4ilEgWrG
R0peNk+3aGj6C7YWfr6hZVkGFtF7JWC7XFVYcfY+oZ3y5OVkc5/SvcgyXAIyB1DL
7DN1sLYKN+Amq9r3Ssql6uRKsAvCJwPOHNZ2S+n0h947qUgLCkVDPuv9HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTOCytpk2KsaY/JE1f/cDfR/2ZPMB8GA1UdIwQY
MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt
NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw
LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETIuBrWT
ZOVCJzbx0kbrSuE00UqJOwNdctUFrTyiAut61G/vgDEWuoiPOpznH8IFpjWkidde
HX4SmlE7po+6HyR2STIdHhQcqUtXgnPxj3pRcV8nm/sbia7rPoMVBMms3/Yys7kF
6f9fee/m29uk7F4B4cdHnsvGcnPbOnUpYHlBcaPoYDtXzrq5ymXxQwtALdlOe3TQ
wSZzcBE0q+SBG715g8Rwex/afcEobZVArkDWW38iJIee75i0A9Bqjt9phNCAP7R/
U7N58sDbIgrz8eD+vf+CrHw5U/O2ETOKplQLctaYwZJjg2ACUitJ8fIQJcs5hN7p
rvUvymIy9bXNGg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:50 2026 by rpki-client