Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: T0PfSpbYDmKHhPLhREqGdCzVPtK4wMtqp8/qELLT/KE=
Subject key identifier: 84:46:87:82:2C:02:02:E1:78:87:2D:57:19:D2:E8:DA:EF:94:FB:BE
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019D9AAC200AF92937F7563E95611D9E1E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: dy/thFbKo1IbDfk+r0fJYvP1J74h59to1DXATdfQtHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:20:0a:f9:29:37:f7:56:3e:95:61:1d:9e:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=844687822c0202e178872d5719d2e8daef94fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:23:ba:b8:b3:15:be:6c:55:fa:36:77:7d:
df:fe:57:fe:09:88:05:96:69:8d:09:79:86:1d:09:
7b:12:62:8e:d8:2c:15:f5:b8:e7:0e:b2:6a:2e:c1:
5a:41:5c:09:f4:c2:d6:1e:da:b7:60:f5:86:df:9d:
9c:30:bd:24:5a:43:88:16:92:5e:d1:a0:07:29:5c:
e5:66:92:f7:ca:96:83:13:db:c8:1a:df:b4:74:44:
5f:0c:25:ce:bf:b7:a7:21:61:aa:24:e4:fc:40:4f:
a6:c9:06:12:65:56:d0:75:f8:f4:d5:70:ef:6d:cf:
1e:b2:fd:d2:6b:41:55:1d:bf:58:dc:c1:65:1e:ee:
9f:7c:9b:2e:a1:33:51:94:69:18:de:db:8b:fa:16:
c9:ba:67:b8:03:eb:c5:68:4a:63:2e:8e:91:88:72:
d2:57:b5:e9:fb:36:35:33:53:b6:eb:c8:de:bc:e9:
d8:53:86:33:2a:64:e9:6e:67:3f:ee:e4:f4:44:77:
13:96:5d:02:49:1e:37:cc:13:c0:eb:75:9d:b7:62:
db:95:0f:b9:27:66:42:86:8d:86:c6:cb:1a:80:aa:
05:2f:06:aa:f1:e9:13:03:de:25:2c:85:63:c6:2e:
85:60:61:b5:68:83:6c:0a:80:3f:14:37:18:f4:a6:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:87:82:2C:02:02:E1:78:87:2D:57:19:D2:E8:DA:EF:94:FB:BE
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:ba:60:ae:4e:3d:bb:f9:44:50:a7:2b:6d:6c:14:eb:40:
f6:3b:48:ec:59:ed:e6:df:69:71:0d:7c:fb:3f:64:0b:01:10:
a0:01:db:ab:da:b6:a4:5f:be:fe:90:b4:07:a0:a1:50:0e:50:
87:d1:1e:fd:eb:a6:2d:d7:e8:45:91:d7:a8:b7:75:0c:3d:bc:
e7:5c:32:1e:9d:41:3e:ac:7c:81:84:5c:b9:a7:ff:4e:b8:ae:
40:53:e5:8f:9a:db:45:b5:5b:89:d5:33:fb:a2:2c:09:3f:01:
c4:b7:2c:c7:0e:9f:ca:07:bb:6f:52:2f:85:e8:f1:d8:39:80:
94:94:b5:9b:88:29:5f:2b:3d:5a:07:93:23:85:67:ab:d2:d2:
00:0e:96:d9:ae:b0:b5:2f:1e:70:70:82:d6:08:fc:bc:10:c0:
bd:95:86:75:85:a7:14:a7:59:e3:a9:6e:5e:8f:9c:9a:f7:e5:
f0:78:cf:62:39:7f:dc:0a:bb:00:6b:93:9e:fd:41:13:95:4e:
69:8b:ab:ca:b9:72:93:8e:79:57:49:a4:23:f7:9c:a8:ee:3f:
13:19:06:80:33:07:93:7b:6d:a1:e2:f0:6c:25:7a:77:9e:52:
c8:55:4f:c9:5a:1f:f0:35:c1:3c:88:d8:26:1e:6a:80:dd:54:
48:7b:9b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arCAK+Sk391Y+lWEdnh6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri
ODQ3NGQwHhcNMjYwNDE3MDkwMTA0WhcNMjYwNDE4MDkwMTA0WjAzMTEwLwYDVQQD
Eyg4NDQ2ODc4MjJjMDIwMmUxNzg4NzJkNTcxOWQyZThkYWVmOTRmYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmcjurizFb5sVfo2d33f/lf+CYgF
lmmNCXmGHQl7EmKO2CwV9bjnDrJqLsFaQVwJ9MLWHtq3YPWG352cML0kWkOIFpJe
0aAHKVzlZpL3ypaDE9vIGt+0dERfDCXOv7enIWGqJOT8QE+myQYSZVbQdfj01XDv
bc8esv3Sa0FVHb9Y3MFlHu6ffJsuoTNRlGkY3tuL+hbJume4A+vFaEpjLo6RiHLS
V7Xp+zY1M1O268jevOnYU4YzKmTpbmc/7uT0RHcTll0CSR43zBPA63Wdt2LblQ+5
J2ZCho2GxssagKoFLwaq8ekTA94lLIVjxi6FYGG1aINsCoA/FDcY9KYwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRGh4IsAgLheIctVxnS6NrvlPu+MB8GA1UdIwQY
MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt
ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi
LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALya6YK5O
Pbv5RFCnK21sFOtA9jtI7Fnt5t9pcQ18+z9kCwEQoAHbq9q2pF++/pC0B6ChUA5Q
h9Ee/eumLdfoRZHXqLd1DD2851wyHp1BPqx8gYRcuaf/TriuQFPlj5rbRbVbidUz
+6IsCT8BxLcsxw6fyge7b1Ivhejx2DmAlJS1m4gpXys9WgeTI4Vnq9LSAA6W2a6w
tS8ecHCC1gj8vBDAvZWGdYWnFKdZ46luXo+cmvfl8HjPYjl/3Aq7AGuTnv1BE5VO
aYuryrlyk455V0mkI/ecqO4/ExkGgDMHk3ttoeLwbCV6d55SyFVPyVof8DXBPIjY
Jh5qgN1USHub1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:24 2026 by rpki-client