Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: IybmNCBVxp84qcwpMGVal/yYwVHYzL9m1h6CSiLvJaU=
Subject key identifier: BF:AE:A7:AA:22:1D:46:13:01:D2:85:70:DA:43:A6:76:C9:90:E0:FD
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 019D9C9A382DB8DF99B9745C7CBBC76E8D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0CBF
Signing time: Fri 17 Apr 2026 18:00:45 +0000
Manifest this update: Fri 17 Apr 2026 18:00:45 +0000
Manifest next update: Sat 18 Apr 2026 18:00:45 +0000
Files and hashes: 1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=)
2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: 6VNpJr19qCmmSR3Z/skDFBDWQfYx9Lwi3xodNTP9BXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:38:2d:b8:df:99:b9:74:5c:7c:bb:c7:6e:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Apr 17 18:00:45 2026 GMT
Not After : Apr 18 18:00:45 2026 GMT
Subject: CN=bfaea7aa221d461301d28570da43a676c990e0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:56:f8:a9:1a:53:99:e5:db:50:78:1f:27:
2f:69:6c:20:10:db:a9:c1:7d:56:56:bf:12:92:a5:
f7:61:c1:40:ac:a1:f6:24:ac:c5:17:a6:bc:58:69:
cb:87:bd:52:98:e9:a7:4a:a3:35:55:98:e3:69:46:
be:9e:3c:80:2b:71:55:9f:f0:61:e3:cc:e2:4b:cf:
c7:74:27:ac:e4:cb:db:d2:a1:83:cf:e2:d8:0d:04:
e7:5a:96:a2:8d:34:a8:7c:fd:79:b2:6b:c3:9d:83:
d9:34:8b:99:78:3c:7c:d5:9a:cd:7c:eb:82:ed:99:
96:22:0a:b8:36:17:e5:c9:2d:d8:b7:5d:85:3e:b9:
93:fb:87:1f:22:dd:6d:50:94:85:3f:db:ee:94:29:
b5:91:82:85:40:5f:24:0a:48:9b:28:ce:88:e8:8c:
8e:0a:1c:0b:94:42:11:58:39:65:5d:42:39:b1:47:
90:ae:da:59:ab:18:76:a4:1a:10:1f:7b:1c:5b:d6:
08:6b:62:d9:29:9d:c2:04:18:dc:b5:ac:6d:1d:1a:
51:71:ef:40:bf:6f:35:73:74:86:b3:aa:e4:8f:c5:
35:29:48:e6:0d:54:3d:31:87:9c:5d:ae:6f:b6:ac:
2c:b2:8c:4b:48:7c:c7:88:e4:03:db:b3:fa:b7:42:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:A7:AA:22:1D:46:13:01:D2:85:70:DA:43:A6:76:C9:90:E0:FD
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:7d:98:02:8b:94:96:4c:41:72:3d:53:66:3e:61:21:79:
68:26:14:c5:40:34:49:cd:7c:c2:19:ee:9c:87:ac:b2:1a:37:
c2:a5:fc:ae:ca:d1:0c:44:d8:46:79:99:bd:1b:d3:ec:e4:87:
6d:8e:8a:1e:5c:a4:a0:e1:69:e4:0f:30:c2:39:32:3d:37:ab:
e4:4e:00:db:cd:52:05:8e:16:aa:2f:77:3b:ca:f5:bd:df:14:
29:d8:e5:c3:2b:9f:03:39:c9:55:dc:e9:3f:fc:e3:c6:26:8b:
5c:b3:b9:a9:91:2c:7d:43:06:8c:36:d9:e4:3a:39:f8:03:11:
00:c0:74:bd:4c:73:5e:b1:64:fb:ad:22:d0:b3:7b:b4:83:f9:
b1:78:c1:80:c4:a1:0e:5e:9e:f0:4b:65:00:bf:1e:fd:86:3d:
50:53:0a:17:4c:a6:d7:3e:d5:ac:b0:5f:6d:ee:6d:2e:47:a9:
e7:15:cf:95:9a:eb:cc:2d:cc:2a:d6:8d:db:3a:46:11:78:f0:
b9:5e:bb:e8:b0:ad:2f:f2:04:1e:89:0f:da:64:80:04:3d:7c:
b0:9a:ef:b2:26:42:fc:65:86:cc:7c:75:e7:52:fd:15:30:31:
45:d6:50:5d:e3:f7:bb:27:2e:50:9c:11:b8:a8:fa:58:b7:29:
36:3e:46:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmjgtuN+ZuXRcfLvHbo0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj
OWQ1MWYwHhcNMjYwNDE3MTgwMDQ1WhcNMjYwNDE4MTgwMDQ1WjAzMTEwLwYDVQQD
EyhiZmFlYTdhYTIyMWQ0NjEzMDFkMjg1NzBkYTQzYTY3NmM5OTBlMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9W+KkaU5nl21B4HycvaWwgENup
wX1WVr8SkqX3YcFArKH2JKzFF6a8WGnLh71SmOmnSqM1VZjjaUa+njyAK3FVn/Bh
48ziS8/HdCes5Mvb0qGDz+LYDQTnWpaijTSofP15smvDnYPZNIuZeDx81ZrNfOuC
7ZmWIgq4NhflyS3Yt12FPrmT+4cfIt1tUJSFP9vulCm1kYKFQF8kCkibKM6I6IyO
ChwLlEIRWDllXUI5sUeQrtpZqxh2pBoQH3scW9YIa2LZKZ3CBBjctaxtHRpRce9A
v281c3SGs6rkj8U1KUjmDVQ9MYecXa5vtqwssoxLSHzHiOQD27P6t0IkCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+up6oiHUYTAdKFcNpDpnbJkOD9MB8GA1UdIwQY
MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt
NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3
LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDZ9mAKL
lJZMQXI9U2Y+YSF5aCYUxUA0Sc18whnunIessho3wqX8rsrRDETYRnmZvRvT7OSH
bY6KHlykoOFp5A8wwjkyPTer5E4A281SBY4Wqi93O8r1vd8UKdjlwyufAznJVdzp
P/zjxiaLXLO5qZEsfUMGjDbZ5Do5+AMRAMB0vUxzXrFk+60i0LN7tIP5sXjBgMSh
Dl6e8EtlAL8e/YY9UFMKF0ym1z7VrLBfbe5tLkep5xXPlZrrzC3MKtaN2zpGEXjw
uV676LCtL/IEHokP2mSABD18sJrvsiZC/GWGzHx151L9FTAxRdZQXeP3uycuUJwR
uKj6WLcpNj5G8g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:31 2026 by rpki-client