Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: 2uNKeNHN3ebExjUkxbw2ccDIFZ1Uu/inoG6q4rZVRxE=
Subject key identifier: 9D:63:47:58:3B:74:72:51:9D:55:28:CE:FE:D4:A7:06:D2:E2:0C:76
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 019D9AE38D23A26B3E7D54CD7300CD3D20BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 10A1
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: 9djG5mdhGoYmiZ5dsqZwxKiOc3YAWirD6TUXDLLfYrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8d:23:a2:6b:3e:7d:54:cd:73:00:cd:3d:20:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=9d6347583b7472519d5528cefed4a706d2e20c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:aa:dc:ee:12:e2:0f:ad:d6:c1:42:c9:bd:
52:6e:e4:0b:0c:b3:ed:4a:e8:ab:28:5f:2b:59:79:
d5:28:25:c4:bb:90:d1:54:d2:0f:4b:b6:ef:bb:67:
25:68:74:39:ae:8f:72:2f:86:2e:ac:3f:5d:34:66:
ea:48:6a:21:66:8b:3b:8e:92:09:26:2c:ac:5f:2c:
1a:d8:9b:e9:2e:75:dc:17:c9:15:46:02:bb:b5:64:
db:46:21:db:04:4b:64:11:ab:14:98:33:ef:8a:e7:
9b:33:e6:c6:f4:71:8d:10:9c:a7:78:b7:eb:af:bf:
ca:18:6d:a5:b7:be:90:9f:a8:c5:a2:91:7d:ba:49:
cf:f2:42:de:a8:2a:47:b7:d2:0d:62:bf:11:25:92:
99:f8:d4:c4:c3:d0:e9:04:b8:b1:17:f3:94:21:be:
96:07:49:31:91:88:51:c6:36:db:78:4f:10:fd:b2:
5b:88:3a:55:37:d5:e7:97:39:a5:05:50:25:dd:c7:
eb:36:12:05:f6:b1:0e:7a:6a:3d:96:d2:08:d7:77:
63:bf:1b:4d:af:d0:ae:be:85:29:3f:ac:57:44:b0:
32:8e:4e:00:04:6a:da:3f:d3:30:97:a2:47:6d:46:
a8:32:04:63:3f:12:4d:ec:79:55:ae:8b:f1:84:e4:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:47:58:3B:74:72:51:9D:55:28:CE:FE:D4:A7:06:D2:E2:0C:76
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ba:ab:5d:fb:65:d0:1e:49:ee:b5:05:eb:ca:0c:59:97:e7:
93:61:d2:1e:2e:bb:a0:56:54:d2:9a:de:16:e8:79:d3:57:1c:
04:e7:6b:35:59:72:12:4a:7b:8f:47:44:23:36:88:e7:b4:5a:
22:cc:59:cd:74:c1:23:9a:e4:05:38:1a:da:10:e7:80:2e:fd:
fa:81:86:ba:ec:4b:b5:f9:2e:f8:14:42:23:a5:f1:07:9c:2a:
e5:03:bd:84:17:c2:ec:67:d9:bf:2f:6c:da:42:83:c9:45:85:
a8:9c:68:e9:04:31:c3:38:cb:6e:d2:4c:1a:ca:a6:93:af:17:
2e:1e:6a:6c:1f:89:5a:99:0d:96:e6:06:90:e2:2b:81:1a:24:
df:3d:d0:99:d0:5d:cd:af:c3:03:58:ca:29:1b:c0:0a:35:2b:
b2:cd:fc:ad:62:76:b2:88:0c:09:02:96:76:9b:64:7e:4e:4e:
39:30:61:79:21:ac:91:a9:36:64:c0:76:e0:3f:c1:8d:65:ef:
f9:36:42:fe:6c:57:7a:67:0e:e9:3a:eb:b5:18:fc:71:bc:6e:
fc:6d:c7:e4:2f:7a:0b:84:07:a6:b3:4a:f4:56:41:c5:9d:d2:
b8:80:e8:50:dd:3e:24:2d:96:48:4e:45:5d:28:85:e2:8e:9b:
23:4d:13:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a440joms+fVTNcwDNPSC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODNhOTZjZjUxMWE2NzkxOWQ5MDBmM2ZjOTM0MDk5MzQx
Zjg3ZDgwHhcNMjYwNDE3MTAwMTM3WhcNMjYwNDE4MTAwMTM3WjAzMTEwLwYDVQQD
Eyg5ZDYzNDc1ODNiNzQ3MjUxOWQ1NTI4Y2VmZWQ0YTcwNmQyZTIwYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns2q3O4S4g+t1sFCyb1SbuQLDLPt
SuirKF8rWXnVKCXEu5DRVNIPS7bvu2claHQ5ro9yL4YurD9dNGbqSGohZos7jpIJ
JiysXywa2JvpLnXcF8kVRgK7tWTbRiHbBEtkEasUmDPviuebM+bG9HGNEJyneLfr
r7/KGG2lt76Qn6jFopF9uknP8kLeqCpHt9INYr8RJZKZ+NTEw9DpBLixF/OUIb6W
B0kxkYhRxjbbeE8Q/bJbiDpVN9XnlzmlBVAl3cfrNhIF9rEOemo9ltII13djvxtN
r9CuvoUpP6xXRLAyjk4ABGraP9Mwl6JHbUaoMgRjPxJN7HlVrovxhOQz6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1jR1g7dHJRnVUozv7UpwbS4gx2MB8GA1UdIwQY
MBaAFGaDqWz1EaZ5GdkA8/yTQJk0H4fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgt
YWUzMDY4NmM4NTg5LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgtYWUzMDY4NmM4NTg5
LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7qrXftl
0B5J7rUF68oMWZfnk2HSHi67oFZU0preFuh501ccBOdrNVlyEkp7j0dEIzaI57Ra
IsxZzXTBI5rkBTga2hDngC79+oGGuuxLtfku+BRCI6XxB5wq5QO9hBfC7GfZvy9s
2kKDyUWFqJxo6QQxwzjLbtJMGsqmk68XLh5qbB+JWpkNluYGkOIrgRok3z3QmdBd
za/DA1jKKRvACjUrss38rWJ2sogMCQKWdptkfk5OOTBheSGskak2ZMB24D/BjWXv
+TZC/mxXemcO6TrrtRj8cbxu/G3H5C96C4QHprNK9FZBxZ3SuIDoUN0+JC2WSE5F
XSiF4o6bI00T3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:55 2026 by rpki-client