Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier: x1nyzasB4rGfJEmIhhvwppaK/mRWvK2zyCXuvc+Xpzg=
Subject key identifier: 24:74:D8:3F:42:06:8A:80:A8:F2:F0:15:39:EB:C7:2F:C7:5B:57:19
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial: 019D9AE318DE8C881F9CD86F72A5E9DCFF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number: 112A
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: 8sCPRrkwZNBHV+JnPfpPlh30y5Vg9p3YB2Gnu5iVgjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:18:de:8c:88:1f:9c:d8:6f:72:a5:e9:dc:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=2474d83f42068a80a8f2f01539ebc72fc75b5719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:cf:21:7f:62:8d:31:f6:1c:08:c8:43:5f:
90:a5:43:fe:e8:52:cd:2d:47:17:2f:38:85:dd:40:
e7:9c:a5:2f:60:f4:ee:2a:05:6c:17:f0:47:bb:30:
5e:a8:24:0a:47:5d:a4:75:32:6d:b9:8d:1e:c0:01:
89:a1:1d:0c:a8:de:0d:8c:0d:6e:18:55:8c:67:b7:
08:10:24:d0:26:91:27:08:39:0c:68:1c:e2:c6:78:
4d:00:d3:27:50:13:1a:e0:cb:62:c3:dc:cf:72:d5:
63:1d:d8:15:54:d7:b7:ed:94:df:33:b6:87:84:34:
7f:1a:6c:9d:20:fe:99:fd:7c:00:ba:4f:cc:91:1d:
88:81:8a:a0:6f:bd:f3:1d:31:a9:8a:50:30:26:a9:
b0:42:fe:cf:10:bc:4f:c9:b3:2e:c7:57:cd:3c:e6:
8b:88:a2:a0:95:2f:4e:e0:4b:7b:b2:db:9d:f7:f7:
9a:1b:02:d8:6f:89:8f:91:52:9d:54:c3:a9:97:ba:
8e:39:e7:80:bc:b6:36:32:86:3e:ed:03:7d:6e:fe:
7f:2f:bf:38:2b:12:ce:b0:06:48:39:68:08:27:75:
ab:2c:26:73:df:be:b1:e6:bd:a2:eb:bb:9b:bd:41:
7c:95:a8:36:c9:82:12:80:ee:16:53:86:bf:7b:f5:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:D8:3F:42:06:8A:80:A8:F2:F0:15:39:EB:C7:2F:C7:5B:57:19
X509v3 Authority Key Identifier:
keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:48:e5:ac:3c:6a:34:30:1b:a5:d5:aa:c8:05:d8:c0:bf:55:
4b:5a:92:2b:51:05:e5:4e:bb:31:3b:3e:c2:d8:b9:03:af:3f:
c3:96:0b:0d:aa:f7:c6:29:a9:aa:52:3e:e0:65:b0:36:fe:63:
ec:11:ce:a5:fe:67:29:23:3a:f9:80:d9:e5:c4:8e:7c:01:c1:
c4:c6:30:39:f5:bd:1d:ce:11:96:da:9c:74:68:fc:9f:a3:93:
71:6a:2b:ad:93:06:bd:26:fc:79:58:eb:e4:4d:c2:e4:f1:2a:
24:c9:8b:51:b1:d3:27:33:6c:2e:d6:ca:15:fc:6d:2e:72:f6:
77:23:69:9e:4f:12:aa:0c:e3:e6:32:7b:bf:30:3b:93:98:8a:
98:e8:ec:d6:26:00:50:12:de:c9:2e:9a:a0:cf:52:1e:a8:55:
4c:ab:27:6f:a8:f6:68:a1:61:de:c6:30:7d:6a:3a:6d:71:f6:
19:ba:d3:3e:89:6b:74:73:b0:7e:75:94:a4:13:09:6f:27:e0:
50:c1:b1:2a:8d:80:98:fc:3d:d0:31:04:e1:fd:a2:54:b7:93:
9c:f6:6f:b5:9a:20:95:78:43:4d:ef:2f:ec:65:b7:9a:2d:ce:
74:d5:87:ce:08:34:f0:07:81:74:c9:a5:d6:3d:34:9a:e9:68:
2f:10:b0:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xjejIgfnNhvcqXp3P9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OGNkMTQ5MWZhODRkNDgyMThkMzg2MGYzMzIzZGM5Yjg2
ODU3OGMwHhcNMjYwNDE3MTAwMTA3WhcNMjYwNDE4MTAwMTA3WjAzMTEwLwYDVQQD
EygyNDc0ZDgzZjQyMDY4YTgwYThmMmYwMTUzOWViYzcyZmM3NWI1NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeTPIX9ijTH2HAjIQ1+QpUP+6FLN
LUcXLziF3UDnnKUvYPTuKgVsF/BHuzBeqCQKR12kdTJtuY0ewAGJoR0MqN4NjA1u
GFWMZ7cIECTQJpEnCDkMaBzixnhNANMnUBMa4Mtiw9zPctVjHdgVVNe37ZTfM7aH
hDR/GmydIP6Z/XwAuk/MkR2IgYqgb73zHTGpilAwJqmwQv7PELxPybMux1fNPOaL
iKKglS9O4Et7stud9/eaGwLYb4mPkVKdVMOpl7qOOeeAvLY2MoY+7QN9bv5/L784
KxLOsAZIOWgIJ3WrLCZz376x5r2i67ubvUF8lag2yYISgO4WU4a/e/XhSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR02D9CBoqAqPLwFTnrxy/HW1cZMB8GA1UdIwQY
MBaAFGWM0UkfqE1IIY04YPMyPcm4aFeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWll6UlNSLW9UVWdoalRoZzh6STl5YmhvVjR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zYWQ5MzUtNjNhNy00MzRmLWI2OWQt
NDBhYTgzNDg2ZjhmLzEvWll6UlNSLW9UVWdoalRoZzh6STl5YmhvVjR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zYWQ5MzUtNjNhNy00MzRmLWI2OWQtNDBhYTgzNDg2Zjhm
LzEvWll6UlNSLW9UVWdoalRoZzh6STl5YmhvVjR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0jlrDxq
NDAbpdWqyAXYwL9VS1qSK1EF5U67MTs+wti5A68/w5YLDar3ximpqlI+4GWwNv5j
7BHOpf5nKSM6+YDZ5cSOfAHBxMYwOfW9Hc4RltqcdGj8n6OTcWorrZMGvSb8eVjr
5E3C5PEqJMmLUbHTJzNsLtbKFfxtLnL2dyNpnk8Sqgzj5jJ7vzA7k5iKmOjs1iYA
UBLeyS6aoM9SHqhVTKsnb6j2aKFh3sYwfWo6bXH2GbrTPolrdHOwfnWUpBMJbyfg
UMGxKo2AmPw90DEE4f2iVLeTnPZvtZoglXhDTe8v7GW3mi3OdNWHzgg08AeBdMml
1j00muloLxCwIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:46 2026 by rpki-client