Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: A5Qyn+JipKMYnaUbbcXTfJ/KAjjYNeW/aZOdy49XAc8=
Subject key identifier: CB:3B:39:37:D6:B5:76:F5:C2:B1:EE:26:C5:17:7F:E4:20:60:8D:23
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019D992B2C2F08CA1297947A5CDAC6924635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: 3kDRvhyYGLhqA-55XbpAGrLNvl0.roa (hash: Kd1IvjvDoUSLBaI4Td/hVyTLL9UmLBvq34CNcLf8TLU=)
2: QApS9RyloD4NoDnpEa95FuDk1ZI.roa (hash: CiFqNnH0ZASzXfep2jny9mXvFUeXbEdlqNdwXPVsg/I=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: vCHY9IOXcRj4LTUXrPHHgsnXTo74ZOyhL4TBPoIwCLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2c:2f:08:ca:12:97:94:7a:5c:da:c6:92:46:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=cb3b3937d6b576f5c2b1ee26c5177fe420608d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:db:30:cc:7f:b1:c0:37:cc:d2:7b:42:3a:
fc:7c:10:80:74:eb:f8:91:69:19:b8:c5:0d:06:a2:
ae:5c:d4:8a:9f:57:63:22:84:0b:bd:0c:15:a2:f8:
cb:28:38:01:6e:3b:39:b6:bd:0a:79:14:45:31:29:
8f:90:cd:b6:34:f5:bc:9f:33:61:42:fc:ce:45:f1:
2e:74:fb:27:a2:56:3f:14:54:a1:12:a3:c8:e8:73:
8a:e4:5c:5e:d5:d2:80:a0:73:cd:ee:af:34:bc:a5:
13:1f:fb:70:04:83:bf:03:21:5d:f3:72:f5:40:25:
1d:23:a4:3c:d5:4f:1c:85:bb:c1:40:a1:96:6b:2e:
12:7e:42:8e:b3:09:d7:a0:00:33:f1:a6:00:ee:03:
fa:cc:72:48:a1:e7:2a:81:12:a0:88:82:24:7d:29:
36:d6:97:6a:9f:b9:bd:d3:25:58:14:ff:22:21:3d:
f6:95:75:76:7a:2e:8a:70:6b:5c:aa:f8:ac:bb:d1:
e3:ee:e7:1a:8f:94:4a:c4:4e:fd:fc:a8:87:69:b8:
2c:23:8a:45:99:2a:7f:39:9a:4d:83:31:e2:3b:2f:
23:8e:47:f3:79:fa:e0:26:fe:56:86:24:b3:0a:0c:
fd:7b:ee:fd:44:81:95:e3:83:c9:04:82:c4:fc:f5:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:39:37:D6:B5:76:F5:C2:B1:EE:26:C5:17:7F:E4:20:60:8D:23
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:fa:51:9f:0e:27:ac:f1:19:f6:78:bf:7b:27:fa:c6:01:
77:07:1f:f8:55:5a:ca:7a:b8:3c:b1:64:57:23:67:55:d4:3e:
1a:6b:c6:0c:15:c1:97:3a:43:cb:10:03:01:73:e3:15:c2:e5:
58:ae:d6:67:eb:02:31:8f:a8:d3:e3:e1:20:7e:38:46:7f:1a:
6c:91:e1:e1:f0:46:6f:bd:01:6e:8f:28:04:c3:0b:27:01:32:
a2:9c:32:45:73:b2:3f:f5:5b:d2:09:ab:9b:b4:70:5e:3b:7c:
a0:8a:1b:17:88:13:17:42:ef:eb:98:b3:84:f2:b8:57:24:a6:
1e:b6:c9:d8:3b:19:01:46:51:6c:68:73:16:fa:87:c5:c5:8f:
3f:c9:b6:06:78:e6:d4:8c:97:2e:df:8d:b3:05:96:0d:22:c7:
27:21:e7:63:1a:b8:66:78:08:76:5d:3e:9b:d0:33:28:2e:c7:
d0:0f:c6:84:40:5f:1e:5e:d2:e9:f2:16:9f:6e:29:29:23:c7:
b7:51:ff:9c:c6:3e:41:02:30:a8:ae:6c:0e:78:30:71:42:a6:
ed:cb:e7:24:b3:02:1e:d0:2c:ff:14:e1:86:e1:de:38:92:03:
46:0e:8e:e6:b2:8e:07:a7:0a:9c:4f:09:ec:d0:ce:3f:36:7a:
c8:3c:dc:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKywvCMoSl5R6XNrGkkY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODI5MGZlOTgxNGZjYjA2MmFiNzFlMzJlYzFmOTZkYTk5
NzNhMzMwHhcNMjYwNDE3MDIwMDM2WhcNMjYwNDE4MDIwMDM2WjAzMTEwLwYDVQQD
EyhjYjNiMzkzN2Q2YjU3NmY1YzJiMWVlMjZjNTE3N2ZlNDIwNjA4ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3bMMx/scA3zNJ7Qjr8fBCAdOv4
kWkZuMUNBqKuXNSKn1djIoQLvQwVovjLKDgBbjs5tr0KeRRFMSmPkM22NPW8nzNh
QvzORfEudPsnolY/FFShEqPI6HOK5Fxe1dKAoHPN7q80vKUTH/twBIO/AyFd83L1
QCUdI6Q81U8chbvBQKGWay4SfkKOswnXoAAz8aYA7gP6zHJIoecqgRKgiIIkfSk2
1pdqn7m90yVYFP8iIT32lXV2ei6KcGtcqvisu9Hj7ucaj5RKxE79/KiHabgsI4pF
mSp/OZpNgzHiOy8jjkfzefrgJv5WhiSzCgz9e+79RIGV44PJBILE/PX7GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs7OTfWtXb1wrHuJsUXf+QgYI0jMB8GA1UdIwQY
MBaAFGWCkP6YFPywYqtx4y7B+W2plzozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4Mzkt
YWVkZTNmZmE0NDU3LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4MzktYWVkZTNmZmE0NDU3
LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZr6UZ8O
J6zxGfZ4v3sn+sYBdwcf+FVaynq4PLFkVyNnVdQ+GmvGDBXBlzpDyxADAXPjFcLl
WK7WZ+sCMY+o0+PhIH44Rn8abJHh4fBGb70Bbo8oBMMLJwEyopwyRXOyP/Vb0gmr
m7RwXjt8oIobF4gTF0Lv65izhPK4VySmHrbJ2DsZAUZRbGhzFvqHxcWPP8m2Bnjm
1IyXLt+NswWWDSLHJyHnYxq4ZngIdl0+m9AzKC7H0A/GhEBfHl7S6fIWn24pKSPH
t1H/nMY+QQIwqK5sDngwcUKm7cvnJLMCHtAs/xThhuHeOJIDRg6O5rKOB6cKnE8J
7NDOPzZ6yDzcOA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:12 2026 by rpki-client