Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: c67ZcM7EzNWaG7b1CGJOaUgAHBYWzr9XPmCRG4dMSq4=
Subject key identifier: 86:29:73:93:DA:1C:D2:2A:EE:90:76:D9:1C:B9:D8:2A:C2:AA:A9:A5
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 019D99623F60BF3FBD58E92A925786192D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:45 +0000
Manifest this update: Fri 17 Apr 2026 03:00:45 +0000
Manifest next update: Sat 18 Apr 2026 03:00:45 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: zoeKp7B3jShePHut4g46S+tunFNLlH3xJ6cIS3ZfQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:3f:60:bf:3f:bd:58:e9:2a:92:57:86:19:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Apr 17 03:00:45 2026 GMT
Not After : Apr 18 03:00:45 2026 GMT
Subject: CN=86297393da1cd22aee9076d91cb9d82ac2aaa9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:05:14:18:8a:99:d9:eb:17:81:ed:ad:9f:
e1:52:ad:d1:9d:95:99:23:9a:cb:2d:0e:b0:48:e8:
55:c3:2c:2c:07:f8:6d:b5:6d:b3:27:fb:f8:88:0e:
13:39:af:b3:81:cc:7e:14:d1:8e:81:99:6b:32:65:
58:22:fd:9e:c9:e6:c9:6f:88:3b:a2:5b:c6:7d:e9:
2e:a5:64:93:9f:ff:19:5c:a0:3e:0b:81:19:72:e3:
b1:6e:a7:a5:e9:3d:48:e5:b8:87:6c:1c:7b:9a:48:
65:a7:10:53:fb:d5:43:ae:b1:af:39:85:a0:79:7d:
e8:7e:8a:18:d1:e0:f7:9d:49:82:5e:48:f1:01:48:
3f:c5:98:e9:a8:49:79:52:7e:4a:bc:d8:97:56:6c:
20:9e:4c:54:af:c1:c9:dc:a1:37:08:0b:47:0f:3d:
6c:1c:39:cc:36:91:a7:10:4f:0e:94:1e:29:db:ad:
54:37:24:53:35:00:d2:78:6c:00:fc:09:2d:d3:1b:
f9:65:91:51:fb:40:d8:0f:76:34:df:c3:da:97:61:
5d:c3:55:38:90:70:42:57:4d:d3:75:37:f5:dd:fc:
46:c5:03:5a:55:41:07:f0:34:94:99:bb:ff:2d:6c:
fa:40:0b:fa:9d:68:d0:93:f3:9b:fc:aa:b6:a3:43:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:73:93:DA:1C:D2:2A:EE:90:76:D9:1C:B9:D8:2A:C2:AA:A9:A5
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:19:07:2e:89:07:3e:ec:ea:c5:f4:22:07:52:4b:2d:21:
3e:25:64:7e:be:90:ef:b8:af:1c:c8:a3:33:58:42:be:62:e5:
94:4b:29:5b:f4:fb:d0:f5:6d:55:f3:dc:4b:64:ad:f4:71:24:
98:ef:7c:3e:99:66:36:1c:15:10:4c:eb:84:2d:69:bb:03:a4:
d9:38:08:63:90:ee:7f:0e:b7:f7:59:52:1e:fc:0e:bb:91:e6:
5e:bb:c6:f3:ae:26:07:77:b9:fa:0b:c7:aa:f7:cf:5f:0d:3e:
37:27:4d:bc:0f:2b:a7:7e:aa:b6:61:91:c7:b4:4a:12:db:be:
73:26:7a:50:03:49:05:fa:54:a1:e1:a5:3f:4c:6b:6a:c1:88:
41:6d:37:70:fb:49:d8:b0:0f:5a:fc:1b:8a:1b:68:c9:42:65:
4e:a6:91:ce:db:ff:9d:3e:c7:01:b5:19:6d:32:49:df:83:46:
5e:2f:d0:7d:4a:27:e0:cf:4b:cf:ed:b8:23:86:9a:95:c0:5b:
2e:fb:30:11:eb:03:a1:51:e4:d6:a0:56:3c:76:6e:f9:6c:38:
dd:96:8f:ff:9e:45:f0:c0:a6:b4:f9:2d:38:d3:5f:ec:31:0f:
93:02:19:24:a4:70:f5:df:b9:67:63:82:2b:ef:b5:0f:e7:4c:
c0:52:8a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYj9gvz+9WOkqkleGGS0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmVkZGI1YTllMmFiNTMzNDc0MTA4YjdjODAwZjgxMzJm
MTBlMjEwHhcNMjYwNDE3MDMwMDQ1WhcNMjYwNDE4MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg4NjI5NzM5M2RhMWNkMjJhZWU5MDc2ZDkxY2I5ZDgyYWMyYWFhOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t0FFBiKmdnrF4HtrZ/hUq3RnZWZ
I5rLLQ6wSOhVwywsB/httW2zJ/v4iA4TOa+zgcx+FNGOgZlrMmVYIv2eyebJb4g7
olvGfekupWSTn/8ZXKA+C4EZcuOxbqel6T1I5biHbBx7mkhlpxBT+9VDrrGvOYWg
eX3ofooY0eD3nUmCXkjxAUg/xZjpqEl5Un5KvNiXVmwgnkxUr8HJ3KE3CAtHDz1s
HDnMNpGnEE8OlB4p261UNyRTNQDSeGwA/Akt0xv5ZZFR+0DYD3Y038Pal2Fdw1U4
kHBCV03TdTf13fxGxQNaVUEH8DSUmbv/LWz6QAv6nWjQk/Ob/Kq2o0OD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYpc5PaHNIq7pB22Ry52CrCqqmlMB8GA1UdIwQY
MBaAFM2+3bWp4qtTNHQQi3yAD4Ey8Q4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQt
OWUxNDMzZjkzYjRlLzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQtOWUxNDMzZjkzYjRl
LzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/UZBy6J
Bz7s6sX0IgdSSy0hPiVkfr6Q77ivHMijM1hCvmLllEspW/T70PVtVfPcS2St9HEk
mO98PplmNhwVEEzrhC1puwOk2TgIY5Dufw6391lSHvwOu5HmXrvG864mB3e5+gvH
qvfPXw0+NydNvA8rp36qtmGRx7RKEtu+cyZ6UANJBfpUoeGlP0xrasGIQW03cPtJ
2LAPWvwbihtoyUJlTqaRztv/nT7HAbUZbTJJ34NGXi/QfUon4M9Lz+24I4aalcBb
LvswEesDoVHk1qBWPHZu+Ww43ZaP/55F8MCmtPktONNf7DEPkwIZJKRw9d+5Z2OC
K++1D+dMwFKKog==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:11 2026 by rpki-client