Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
File: ZTwsX-3AjoxdH2VGksPkVkDIou0.mft (raw, json)
Hash identifier: S9/1AnNeCmjYCdhuOzcm0znBaO0ioZHPoKaadNuv998=
Subject key identifier: 07:4E:43:72:6B:6D:B5:35:3F:41:2C:BC:EC:71:36:D4:4E:45:6D:AA
Authority key identifier: 65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
Certificate issuer: /CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Certificate serial: 019D98F445587EBC085CDFB3F810824A18FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
Manifest number: 0DC4
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: ZTwsX-3AjoxdH2VGksPkVkDIou0.crl (hash: yOUbdd5MBybSV8ec/aU20z0rU5E9wfEjr4HxSD+95Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:45:58:7e:bc:08:5c:df:b3:f8:10:82:4a:18:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=074e43726b6db5353f412cbcec7136d44e456daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:ee:cf:42:79:1a:fe:b4:1c:29:84:8a:43:
f9:9f:25:30:35:34:fb:b7:56:8d:a6:80:05:e9:a8:
03:c1:2d:f9:72:62:7f:a0:4f:55:94:de:55:54:12:
4f:51:71:65:a5:3a:87:2a:3c:7a:bb:a9:ed:08:33:
c2:df:24:cd:08:53:86:35:79:98:93:92:3c:0a:ca:
02:ad:93:3b:93:56:e3:88:4d:26:1d:c9:4f:da:3a:
39:2a:28:74:c5:0c:cc:2a:7c:8f:dc:85:25:64:54:
30:2a:9d:3e:ee:5f:53:65:e7:6b:be:52:23:ec:f9:
f2:1b:30:61:09:20:42:e9:a3:04:1a:9e:6a:40:9d:
36:74:2b:8e:07:a5:f2:3a:cd:9d:73:62:bf:53:69:
33:21:0f:9d:4c:e0:e1:2d:96:57:05:60:32:a7:47:
31:2e:7b:18:88:7c:8c:98:33:a0:b5:76:69:2c:26:
b2:6f:cb:7f:89:46:11:c0:ce:74:e3:da:63:42:ba:
05:9e:17:0f:be:51:23:07:ef:24:32:73:33:5a:3a:
fe:b9:6e:89:be:a0:50:8b:20:33:b2:00:0e:5e:e1:
61:5e:7d:36:ab:46:ce:93:f1:31:91:05:6c:51:9f:
36:71:cc:c5:75:4e:62:0e:df:15:a5:62:69:c1:91:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4E:43:72:6B:6D:B5:35:3F:41:2C:BC:EC:71:36:D4:4E:45:6D:AA
X509v3 Authority Key Identifier:
keyid:65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:b2:06:05:7d:20:2c:e1:37:58:2e:dc:0a:97:b4:52:f3:
aa:1e:05:2f:b4:b8:cb:1b:b6:52:99:b4:e4:65:3d:25:6c:90:
9c:f8:a8:27:68:9a:26:0b:e1:74:c4:a5:5a:5e:13:dd:95:66:
41:7b:b3:74:10:69:a2:06:0b:4f:28:15:31:e1:42:e8:39:1f:
05:cf:0e:3e:31:ac:87:88:39:8b:fe:5d:06:e3:80:a8:60:bd:
71:26:a4:ef:e5:53:05:d6:22:bd:80:fa:2f:da:c6:19:72:4e:
fa:d7:77:60:27:60:eb:1d:88:96:02:06:00:8d:d6:73:d8:59:
1d:b2:b2:36:76:88:0e:08:89:dd:8a:be:9e:4a:5e:5a:60:81:
1c:66:ed:31:22:9b:5e:7d:48:63:41:f7:42:c7:dc:cc:81:82:
86:fa:06:78:98:82:62:27:4f:93:9d:84:9c:35:33:47:60:b9:
cc:91:af:3e:11:d6:0e:7c:7e:7e:84:10:a3:d5:d3:8c:f1:1c:
4b:14:57:d6:1b:43:0d:6b:82:7c:68:64:bb:00:9e:5a:71:2b:
34:1a:03:94:2e:b0:fa:95:b1:45:08:7f:17:31:eb:e5:98:ae:
f8:28:09:86:87:f5:69:a3:7c:94:41:12:fd:d1:34:8d:c6:cf:
e8:ef:20:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9EVYfrwIXN+z+BCCShj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1M2MyYzVmZWRjMDhlOGM1ZDFmNjU0NjkyYzNlNDU2NDBj
OGEyZWQwHhcNMjYwNDE3MDEwMDM4WhcNMjYwNDE4MDEwMDM4WjAzMTEwLwYDVQQD
EygwNzRlNDM3MjZiNmRiNTM1M2Y0MTJjYmNlYzcxMzZkNDRlNDU2ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEnuz0J5Gv60HCmEikP5nyUwNTT7
t1aNpoAF6agDwS35cmJ/oE9VlN5VVBJPUXFlpTqHKjx6u6ntCDPC3yTNCFOGNXmY
k5I8CsoCrZM7k1bjiE0mHclP2jo5Kih0xQzMKnyP3IUlZFQwKp0+7l9TZedrvlIj
7PnyGzBhCSBC6aMEGp5qQJ02dCuOB6XyOs2dc2K/U2kzIQ+dTODhLZZXBWAyp0cx
LnsYiHyMmDOgtXZpLCayb8t/iUYRwM5049pjQroFnhcPvlEjB+8kMnMzWjr+uW6J
vqBQiyAzsgAOXuFhXn02q0bOk/ExkQVsUZ82cczFdU5iDt8VpWJpwZGGqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdOQ3JrbbU1P0EsvOxxNtRORW2qMB8GA1UdIwQY
MBaAFGU8LF/twI6MXR9lRpLD5FZAyKLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlR3c1gtM0Fqb3hkSDJWR2tzUGtWa0RJb3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMTUyZTAtYTdmYi00YWZjLTljNzAt
MWNjYjU0ZjM3MmFhLzEvWlR3c1gtM0Fqb3hkSDJWR2tzUGtWa0RJb3UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMTUyZTAtYTdmYi00YWZjLTljNzAtMWNjYjU0ZjM3MmFh
LzEvWlR3c1gtM0Fqb3hkSDJWR2tzUGtWa0RJb3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEayBgV9
ICzhN1gu3AqXtFLzqh4FL7S4yxu2Upm05GU9JWyQnPioJ2iaJgvhdMSlWl4T3ZVm
QXuzdBBpogYLTygVMeFC6DkfBc8OPjGsh4g5i/5dBuOAqGC9cSak7+VTBdYivYD6
L9rGGXJO+td3YCdg6x2IlgIGAI3Wc9hZHbKyNnaIDgiJ3Yq+nkpeWmCBHGbtMSKb
Xn1IY0H3QsfczIGChvoGeJiCYidPk52EnDUzR2C5zJGvPhHWDnx+foQQo9XTjPEc
SxRX1htDDWuCfGhkuwCeWnErNBoDlC6w+pWxRQh/FzHr5Ziu+CgJhof1aaN8lEES
/dE0jcbP6O8gIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:41 2026 by rpki-client