Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: 0IrYqxbKvXyLH2ikdSGRFbdnp3rG9EsReVEut76ZxlQ=
Subject key identifier: 18:77:34:3E:AE:74:66:59:04:84:5D:CC:E4:6E:6F:48:09:63:20:C8
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 019D9A06B1292AC2F21C9C1191C37BF7A102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: aSaj4x_eEi9R61JBcv_KlqSjEVo.roa (hash: e0WEFFwimfYALBRW6v2KlOISxXFOHzRtxX7qcK+LLls=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: cI9GRGitfqzfaJQF2uOwveZCO1uOhok+xCum+7NCubI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b1:29:2a:c2:f2:1c:9c:11:91:c3:7b:f7:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=1877343eae74665904845dcce46e6f48096320c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:4b:a3:05:5a:63:b2:6b:06:f6:88:de:fd:
f3:2e:2d:52:7b:94:26:61:04:ae:ae:00:b6:38:e2:
38:ec:51:9d:ef:fc:4a:69:64:d9:0e:3a:20:79:d9:
e5:b0:76:f6:25:14:be:5c:12:57:16:dd:eb:90:90:
17:8c:cd:aa:8c:3c:87:41:30:04:dc:5c:52:79:3a:
ef:08:fa:df:87:18:7f:ed:e2:21:e1:02:3f:f8:de:
b0:c1:27:eb:dc:75:ac:ff:24:8c:1c:8e:4b:a2:a8:
c6:b8:d4:c9:a2:d1:b6:78:78:8f:35:6c:75:43:5f:
b6:db:d2:8d:5a:df:90:99:5d:be:46:c4:aa:c5:e6:
8f:af:54:b8:53:bb:7d:49:76:00:a8:0a:3b:ff:62:
c0:41:02:7d:8c:29:f0:45:2c:cc:f6:04:e4:29:e1:
4a:43:a1:3d:f3:2d:11:ed:a0:2e:cb:7b:2d:0a:ee:
ac:79:66:b9:97:46:b1:e3:dd:d9:8e:8f:4b:98:1c:
bb:fa:87:f0:1f:5f:b0:93:dd:06:1e:cc:a3:d8:e1:
cf:95:02:7c:d7:6b:7a:6a:44:d8:e9:b6:03:bb:03:
7c:ea:f6:7d:7f:d6:e5:5c:03:5e:05:f9:92:80:ef:
80:b9:54:1f:eb:1c:70:bd:eb:15:36:ab:7e:04:f3:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:34:3E:AE:74:66:59:04:84:5D:CC:E4:6E:6F:48:09:63:20:C8
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0a:7f:e3:a0:17:7f:38:69:6c:22:71:8a:bb:54:5c:e7:8b:
d1:4d:4e:51:bc:ee:d6:31:55:75:e4:92:55:ba:6e:8c:1c:37:
50:4b:40:06:6f:20:f0:11:1f:9b:4f:bb:f3:bc:15:04:90:15:
2d:26:10:82:91:3e:8d:ca:33:0f:d1:96:ac:37:17:ab:9a:2c:
20:36:06:c3:84:8f:37:76:c1:26:03:79:c0:99:cc:b4:0b:62:
9e:36:98:cf:ff:ba:bd:8f:51:c9:11:a4:4a:83:d5:dd:eb:cf:
7a:5b:5f:c6:f2:49:b3:f0:4a:68:f6:df:71:20:3d:f6:14:74:
1e:f9:7f:25:1b:de:e4:54:8d:b1:e2:80:c8:8e:4f:d0:76:18:
8a:18:b7:fe:81:89:e4:bd:19:4e:21:3b:b0:82:8a:52:a1:26:
d5:65:df:01:9a:66:de:22:3b:5e:a8:91:cd:1c:75:ee:3b:5f:
5a:ce:f1:aa:3e:fd:c5:b0:ab:42:d7:e2:1a:56:87:13:bc:17:
48:61:68:40:6f:b2:ed:60:9f:13:2b:9b:da:63:52:f4:2a:aa:
8c:7d:14:ff:ae:8a:6c:d0:3c:90:98:0f:be:f5:5d:2d:5b:98:
c1:0f:be:4a:38:b4:ba:24:ba:4c:83:e5:d9:f6:22:94:27:3c:
82:dc:9c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBrEpKsLyHJwRkcN796ECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzBmZTY5OGU0ZGFlOWQ3YzMyYmMxNTZjNDE4MDY0ZmRj
ZmY0YjAwHhcNMjYwNDE3MDYwMDIyWhcNMjYwNDE4MDYwMDIyWjAzMTEwLwYDVQQD
EygxODc3MzQzZWFlNzQ2NjU5MDQ4NDVkY2NlNDZlNmY0ODA5NjMyMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQJLowVaY7JrBvaI3v3zLi1Se5Qm
YQSurgC2OOI47FGd7/xKaWTZDjogednlsHb2JRS+XBJXFt3rkJAXjM2qjDyHQTAE
3FxSeTrvCPrfhxh/7eIh4QI/+N6wwSfr3HWs/ySMHI5LoqjGuNTJotG2eHiPNWx1
Q1+229KNWt+QmV2+RsSqxeaPr1S4U7t9SXYAqAo7/2LAQQJ9jCnwRSzM9gTkKeFK
Q6E98y0R7aAuy3stCu6seWa5l0ax493Zjo9LmBy7+ofwH1+wk90GHsyj2OHPlQJ8
12t6akTY6bYDuwN86vZ9f9blXANeBfmSgO+AuVQf6xxwvesVNqt+BPOfcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh3ND6udGZZBIRdzORub0gJYyDIMB8GA1UdIwQY
MBaAFM5w/mmOTa6dfDK8FWxBgGT9z/SwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2Qt
ODFmZWEwZjc3Mjg2LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2QtODFmZWEwZjc3Mjg2
LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgp/46AX
fzhpbCJxirtUXOeL0U1OUbzu1jFVdeSSVbpujBw3UEtABm8g8BEfm0+787wVBJAV
LSYQgpE+jcozD9GWrDcXq5osIDYGw4SPN3bBJgN5wJnMtAtinjaYz/+6vY9RyRGk
SoPV3evPeltfxvJJs/BKaPbfcSA99hR0Hvl/JRve5FSNseKAyI5P0HYYihi3/oGJ
5L0ZTiE7sIKKUqEm1WXfAZpm3iI7XqiRzRx17jtfWs7xqj79xbCrQtfiGlaHE7wX
SGFoQG+y7WCfEyub2mNS9CqqjH0U/66KbNA8kJgPvvVdLVuYwQ++Sji0uiS6TIPl
2fYilCc8gtycdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:11 2026 by rpki-client