Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: aKQek1HARGZ6RTDNfWyOUYq3hbFY1bAT9CBNsZ1wU+M=
Subject key identifier: DF:12:DE:07:7D:62:BB:90:E3:20:32:BB:12:DD:83:31:08:A5:27:33
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019D9DAD8D166B992DF39CB3854A003408FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 1230
Signing time: Fri 17 Apr 2026 23:01:29 +0000
Manifest this update: Fri 17 Apr 2026 23:01:29 +0000
Manifest next update: Sat 18 Apr 2026 23:01:29 +0000
Files and hashes: 1: vMfnrpAebos3eaIEsMS2VFk8-QI.roa (hash: 4/jYsNoEYkp6fGrbtUoi3W/2IDsabtf81IB97bt4re0=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: zoAm3P+2gP8id9vVYWIBV9Srts2g5nFFNH6DNEIp3uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:8d:16:6b:99:2d:f3:9c:b3:85:4a:00:34:08:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Apr 17 23:01:29 2026 GMT
Not After : Apr 18 23:01:29 2026 GMT
Subject: CN=df12de077d62bb90e32032bb12dd833108a52733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:6c:4f:c9:f7:94:75:d6:0e:2d:08:af:36:
74:06:d0:31:7b:a4:ed:0f:dc:f6:2c:9b:41:8b:f0:
87:d7:d9:70:3b:f2:77:d7:57:95:e8:08:13:4b:bb:
6e:1c:4a:4b:e0:d7:e9:24:1d:3f:b6:42:75:f9:76:
ad:49:0e:94:7e:1a:03:1a:48:aa:cb:07:da:79:71:
70:b8:15:60:71:72:6d:39:fc:42:d5:70:f3:5a:00:
ed:d4:dc:fc:4e:5d:48:9c:8c:30:f2:f4:fc:8f:e0:
42:57:e6:b1:d8:49:31:a6:de:4e:f2:d9:db:8b:ea:
8f:1b:59:05:4b:81:1c:5e:e9:b5:41:5a:06:48:01:
7e:b4:ba:76:c4:e3:f1:f3:b3:c3:58:e1:19:f9:96:
50:1b:a4:c1:4b:74:d6:a3:d0:52:fd:cc:d5:2a:73:
2f:1a:05:cb:0e:af:3a:09:b4:6a:a7:93:31:31:1b:
8c:5d:8d:ba:19:e4:09:dc:a1:16:b8:05:61:b7:32:
f8:6c:68:e0:12:68:a0:73:5e:91:39:c3:46:e4:e3:
f5:9a:5e:de:f3:3a:a9:8e:45:47:f2:83:56:1f:03:
6f:58:10:bd:e2:d9:f3:a0:57:dd:06:ce:ad:d9:77:
b0:2c:fd:d8:30:0e:0a:10:ce:9e:99:41:6d:7b:66:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:12:DE:07:7D:62:BB:90:E3:20:32:BB:12:DD:83:31:08:A5:27:33
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:49:ed:ce:2f:4f:f6:15:5e:6c:ca:a2:2c:b1:21:21:8f:f0:
81:c0:0f:d0:e1:ec:f0:a1:00:a9:5f:c6:4a:44:61:5f:7c:05:
c2:d4:90:3e:15:24:de:43:bd:19:18:16:bf:9c:5d:92:5b:aa:
d5:b3:19:33:80:b0:59:f6:cc:9b:b4:eb:f8:c0:72:74:bf:a5:
65:2a:52:b5:7e:25:3d:77:f4:1f:8d:7c:ca:fa:0a:d5:4d:77:
54:60:d8:3c:54:df:e5:b3:50:5c:8c:4b:49:ee:59:53:19:50:
fc:96:6f:0c:71:5d:57:92:95:86:cb:bf:b5:d0:bc:40:e2:cb:
e4:05:f3:95:80:b6:18:28:cf:15:b7:82:be:24:7e:1c:d0:3c:
55:1d:58:f6:f7:44:8c:8e:97:d1:f4:8b:a4:15:69:25:58:1e:
54:ac:e6:ec:8d:32:6e:e5:e3:fd:03:49:eb:1a:49:2f:10:85:
e3:da:aa:f5:19:2a:0d:55:42:69:26:07:01:a0:3e:03:c3:0a:
7b:dc:a9:bc:27:4d:2a:b4:1f:3e:be:82:f4:70:27:f9:3f:2d:
bf:01:86:5d:1b:9d:1c:08:72:84:9b:28:ce:a6:cb:66:1a:57:
79:46:3d:28:30:9b:29:35:73:40:a2:6f:86:c5:80:d3:14:f9:
8f:89:f0:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drY0Wa5kt85yzhUoANAj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm
OWZjMGQwHhcNMjYwNDE3MjMwMTI5WhcNMjYwNDE4MjMwMTI5WjAzMTEwLwYDVQQD
EyhkZjEyZGUwNzdkNjJiYjkwZTMyMDMyYmIxMmRkODMzMTA4YTUyNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwENsT8n3lHXWDi0IrzZ0BtAxe6Tt
D9z2LJtBi/CH19lwO/J311eV6AgTS7tuHEpL4NfpJB0/tkJ1+XatSQ6UfhoDGkiq
ywfaeXFwuBVgcXJtOfxC1XDzWgDt1Nz8Tl1InIww8vT8j+BCV+ax2Ekxpt5O8tnb
i+qPG1kFS4EcXum1QVoGSAF+tLp2xOPx87PDWOEZ+ZZQG6TBS3TWo9BS/czVKnMv
GgXLDq86CbRqp5MxMRuMXY26GeQJ3KEWuAVhtzL4bGjgEmigc16ROcNG5OP1ml7e
8zqpjkVH8oNWHwNvWBC94tnzoFfdBs6t2XewLP3YMA4KEM6emUFte2bnRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8S3gd9YruQ4yAyuxLdgzEIpSczMB8GA1UdIwQY
MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt
ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0
LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEntzi9P
9hVebMqiLLEhIY/wgcAP0OHs8KEAqV/GSkRhX3wFwtSQPhUk3kO9GRgWv5xdkluq
1bMZM4CwWfbMm7Tr+MBydL+lZSpStX4lPXf0H418yvoK1U13VGDYPFTf5bNQXIxL
Se5ZUxlQ/JZvDHFdV5KVhsu/tdC8QOLL5AXzlYC2GCjPFbeCviR+HNA8VR1Y9vdE
jI6X0fSLpBVpJVgeVKzm7I0ybuXj/QNJ6xpJLxCF49qq9RkqDVVCaSYHAaA+A8MK
e9ypvCdNKrQfPr6C9HAn+T8tvwGGXRudHAhyhJsozqbLZhpXeUY9KDCbKTVzQKJv
hsWA0xT5j4nwTw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:57 2026 by rpki-client