Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: 2bt2xzsDhp19HjYxq4vpq0wJNC2L89A6q8/rmFvUzwA=
Subject key identifier: 1A:B6:AD:BE:C3:B9:1D:D1:89:AB:CA:90:47:43:20:D3:7E:6F:A7:53
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019D9B5169A802865DE90ACFCFD2AFDF3E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0F10
Signing time: Fri 17 Apr 2026 12:01:37 +0000
Manifest this update: Fri 17 Apr 2026 12:01:37 +0000
Manifest next update: Sat 18 Apr 2026 12:01:37 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: eoP1FUPNU1R1KycrQxtiPcXGQL5zdQHFhAK55DhEsJs=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:69:a8:02:86:5d:e9:0a:cf:cf:d2:af:df:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Apr 17 12:01:37 2026 GMT
Not After : Apr 18 12:01:37 2026 GMT
Subject: CN=1ab6adbec3b91dd189abca90474320d37e6fa753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:3a:00:f7:5e:b0:3e:77:cf:13:75:4f:d0:
3c:b4:a2:2b:87:6e:de:dc:1e:b6:1b:bb:85:de:6d:
bd:44:c4:59:dc:93:94:ca:fa:d3:5d:b3:a4:72:d0:
57:db:bf:5b:78:d5:c4:44:59:60:20:03:b8:dc:85:
4f:f8:02:41:99:42:2b:94:6e:c0:8f:9a:67:60:6c:
a0:f7:ea:59:fb:b9:43:d3:0f:80:78:15:3a:69:af:
24:87:32:94:63:68:54:63:08:0b:df:2c:0f:82:16:
7c:f5:58:c7:96:94:c7:c5:a2:a7:63:57:31:b4:92:
e6:bf:4f:fd:01:f1:15:b9:ce:66:ba:90:7d:7c:a1:
3f:b6:86:51:00:78:b8:72:92:b5:d8:8b:8f:38:4c:
4b:98:29:e2:04:eb:e0:5f:30:01:b8:d1:7f:b0:2d:
1d:25:a1:7f:ea:f3:88:df:3f:a1:d5:b9:de:d6:25:
ce:68:8a:b9:3a:77:f2:fc:27:15:ab:36:70:28:83:
ea:02:14:b2:73:3d:25:71:50:d6:d9:7b:28:0b:2c:
7b:3b:94:a1:92:bb:70:a9:53:8f:f1:c2:db:52:54:
a5:ad:61:24:4c:58:d2:27:99:ad:dd:5d:d6:09:51:
b6:c7:dc:68:2b:b1:99:94:db:5f:d7:ce:e0:17:3b:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:AD:BE:C3:B9:1D:D1:89:AB:CA:90:47:43:20:D3:7E:6F:A7:53
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ba:81:3b:80:97:1e:01:ca:39:98:d0:01:ca:3f:9b:0e:8e:
06:da:d5:a4:03:a2:eb:24:31:3d:48:ba:ec:b3:d3:56:43:81:
af:31:7e:01:f6:60:f7:6a:a9:90:76:d1:ac:19:66:10:71:1d:
0e:e1:6f:d0:51:8f:31:0a:9f:25:5f:82:b9:73:88:52:a8:86:
d4:99:e7:a4:9d:e1:ea:1f:01:de:81:fe:4b:c8:7c:05:c7:9e:
8f:5f:25:02:6a:3f:be:f3:75:54:08:76:61:09:06:56:7e:bd:
30:29:3f:52:b3:b4:1c:68:78:81:79:d5:20:cf:42:99:54:ce:
95:2d:e5:cd:92:6d:58:ee:e4:0f:7e:c7:f2:ec:b3:d4:44:65:
50:dc:73:dc:2d:c6:55:e2:73:70:df:c9:dc:76:5c:9c:32:83:
28:78:00:ac:5f:99:da:19:78:f8:c9:92:c2:5a:67:3f:a4:fc:
4d:aa:bb:fa:ec:e2:54:33:b1:fe:1b:a1:a2:72:4f:ec:81:50:
e3:9e:f8:6c:65:00:72:1e:3d:22:d0:97:4f:bc:3b:38:93:e3:
cf:0f:0b:9d:bc:77:be:7c:b6:56:61:b7:5d:ea:5d:b1:2b:16:
33:14:ae:09:9d:4f:08:86:e1:48:14:1f:3b:3f:0c:d9:f7:dd:
c2:a6:d4:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUWmoAoZd6QrPz9Kv3z6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDFmOGZiNmFkZDI3MmI0NmM0MDZiMTg4NWM5MzI5NWIx
ZjRiOGMwHhcNMjYwNDE3MTIwMTM3WhcNMjYwNDE4MTIwMTM3WjAzMTEwLwYDVQQD
EygxYWI2YWRiZWMzYjkxZGQxODlhYmNhOTA0NzQzMjBkMzdlNmZhNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhY6APdesD53zxN1T9A8tKIrh27e
3B62G7uF3m29RMRZ3JOUyvrTXbOkctBX279beNXERFlgIAO43IVP+AJBmUIrlG7A
j5pnYGyg9+pZ+7lD0w+AeBU6aa8khzKUY2hUYwgL3ywPghZ89VjHlpTHxaKnY1cx
tJLmv0/9AfEVuc5mupB9fKE/toZRAHi4cpK12IuPOExLmCniBOvgXzABuNF/sC0d
JaF/6vOI3z+h1bne1iXOaIq5Onfy/CcVqzZwKIPqAhSycz0lcVDW2XsoCyx7O5Sh
krtwqVOP8cLbUlSlrWEkTFjSJ5mt3V3WCVG2x9xoK7GZlNtf187gFzsChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq2rb7DuR3RiavKkEdDINN+b6dTMB8GA1UdIwQY
MBaAFGbR+Ptq3ScrRsQGsYhckylbH0uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDkt
YTU5ZDEzNTBkZWVjLzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDktYTU5ZDEzNTBkZWVj
LzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7qBO4CX
HgHKOZjQAco/mw6OBtrVpAOi6yQxPUi67LPTVkOBrzF+AfZg92qpkHbRrBlmEHEd
DuFv0FGPMQqfJV+CuXOIUqiG1JnnpJ3h6h8B3oH+S8h8Bceej18lAmo/vvN1VAh2
YQkGVn69MCk/UrO0HGh4gXnVIM9CmVTOlS3lzZJtWO7kD37H8uyz1ERlUNxz3C3G
VeJzcN/J3HZcnDKDKHgArF+Z2hl4+MmSwlpnP6T8Taq7+uziVDOx/huhonJP7IFQ
4574bGUAch49ItCXT7w7OJPjzw8Lnbx3vny2VmG3XepdsSsWMxSuCZ1PCIbhSBQf
Oz8M2ffdwqbU7A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:28 2026 by rpki-client