Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: 8AcO2vEMfq4z+1ErDTjQZVPUjhYto+H4dgFCguWHj6Q=
Subject key identifier: 85:A3:9C:C8:AE:61:82:5B:DF:A1:F6:F1:9D:16:C2:49:26:62:7E:CC
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019D9A3EF2F7D7891F2EF12DD63226D0C243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 1074
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: m5cCxh_PhsabAGIRJfH-lY0-6rI.roa (hash: sPrlMxEkxZrDcF6KQs3latR2l78VhegB/Bdy2kmEXaw=)
2: seVR3O1dae1fOLAeXT1ZaF261rk.roa (hash: JmrPbibwTZTU1bBXfvUDUkidxKjk9p3hVn5swMWj1a4=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: H0Dz3nYVkxuXl1FRGPSZthJbiWlNIGotrGT3yh7Z1hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f2:f7:d7:89:1f:2e:f1:2d:d6:32:26:d0:c2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=85a39cc8ae61825bdfa1f6f19d16c24926627ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:cd:89:5a:cd:6e:d7:b8:30:4e:b6:66:d5:
eb:8d:4c:74:10:9a:38:18:e9:c8:f6:1d:96:94:26:
f0:62:1a:71:2e:c5:05:5d:b1:cf:42:ab:ff:d6:39:
0a:3c:da:4f:4c:fe:40:50:10:89:34:82:a5:8f:46:
8d:e9:5b:6d:3f:b8:6b:72:ed:be:b7:30:49:2c:7a:
6a:ec:72:2d:7d:2b:7d:48:8d:34:5c:9d:86:bb:86:
63:b6:54:a8:ca:45:40:66:57:2d:72:f0:92:27:fd:
59:c9:f5:27:55:ca:f0:71:39:5b:45:d0:b0:68:ec:
b2:ec:40:27:8c:36:42:8f:2e:98:48:d5:6b:9b:2f:
55:35:cd:04:12:c5:73:36:37:2e:aa:92:07:c0:9e:
d9:3e:e5:52:52:72:8c:e3:92:8f:7d:e9:7a:a8:ad:
27:d9:13:13:99:c9:ff:1f:6a:74:fb:48:f8:bc:02:
9d:d9:43:ee:ca:2a:1a:c7:5d:56:f6:a5:1e:27:3c:
c0:72:0b:59:9e:85:af:85:70:b8:48:44:d7:2d:88:
5c:7f:e5:99:b1:60:43:77:fa:92:f3:33:1e:50:f9:
b6:1b:3c:a9:d0:4a:f3:6b:1f:95:72:7c:4e:53:5f:
85:58:f4:91:4a:56:7e:9c:1c:12:bd:bd:f2:33:5c:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:9C:C8:AE:61:82:5B:DF:A1:F6:F1:9D:16:C2:49:26:62:7E:CC
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:98:0c:34:51:b9:00:15:3d:c5:6c:75:f7:ac:34:16:5f:
be:ed:d5:b3:b6:53:b0:f4:70:9c:24:f2:e6:1f:05:5e:14:76:
80:ac:a6:e0:d5:6f:45:70:78:3e:fe:d8:ee:0e:c3:d0:43:fc:
ae:d2:a2:83:51:04:02:48:07:9d:28:41:c5:26:f6:58:be:c2:
75:44:d4:d4:57:90:df:9c:9d:e8:55:3f:75:92:fd:69:b3:d5:
df:33:ad:a1:93:24:01:c0:9c:f4:4a:2d:87:57:46:22:17:2c:
c0:c8:5f:46:ac:bf:08:6f:e7:49:6c:aa:93:e2:34:ab:ad:2b:
bf:7c:44:52:1f:15:62:cb:e7:83:ea:84:e5:35:2c:ab:60:12:
71:29:c9:29:1a:1c:53:cb:ee:00:63:89:63:0d:df:81:62:8f:
67:28:92:ca:d2:ee:8e:45:79:24:80:bc:d8:f7:4f:05:e5:68:
33:68:10:c2:4c:7c:15:96:4a:9d:a0:19:5a:2a:57:35:53:2e:
8b:a1:99:f8:29:21:c8:f5:d5:fa:9f:1e:5e:82:f0:41:36:38:
ab:2e:33:1c:79:7b:45:e0:6d:c9:3e:38:64:51:43:51:f1:90:
d0:ea:9d:7a:d3:92:05:00:fe:18:43:1f:24:00:95:1e:06:9f:
8d:28:36:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPvL314kfLvEt1jIm0MJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4
NzExZDQwHhcNMjYwNDE3MDcwMTQ5WhcNMjYwNDE4MDcwMTQ5WjAzMTEwLwYDVQQD
Eyg4NWEzOWNjOGFlNjE4MjViZGZhMWY2ZjE5ZDE2YzI0OTI2NjI3ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3NiVrNbte4ME62ZtXrjUx0EJo4
GOnI9h2WlCbwYhpxLsUFXbHPQqv/1jkKPNpPTP5AUBCJNIKlj0aN6VttP7hrcu2+
tzBJLHpq7HItfSt9SI00XJ2Gu4ZjtlSoykVAZlctcvCSJ/1ZyfUnVcrwcTlbRdCw
aOyy7EAnjDZCjy6YSNVrmy9VNc0EEsVzNjcuqpIHwJ7ZPuVSUnKM45KPfel6qK0n
2RMTmcn/H2p0+0j4vAKd2UPuyioax11W9qUeJzzAcgtZnoWvhXC4SETXLYhcf+WZ
sWBDd/qS8zMeUPm2Gzyp0Erzax+VcnxOU1+FWPSRSlZ+nBwSvb3yM1zNJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWjnMiuYYJb36H28Z0WwkkmYn7MMB8GA1UdIwQY
MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt
MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll
LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY6YDDRR
uQAVPcVsdfesNBZfvu3Vs7ZTsPRwnCTy5h8FXhR2gKym4NVvRXB4Pv7Y7g7D0EP8
rtKig1EEAkgHnShBxSb2WL7CdUTU1FeQ35yd6FU/dZL9abPV3zOtoZMkAcCc9Eot
h1dGIhcswMhfRqy/CG/nSWyqk+I0q60rv3xEUh8VYsvng+qE5TUsq2AScSnJKRoc
U8vuAGOJYw3fgWKPZyiSytLujkV5JIC82PdPBeVoM2gQwkx8FZZKnaAZWipXNVMu
i6GZ+CkhyPXV+p8eXoLwQTY4qy4zHHl7ReBtyT44ZFFDUfGQ0OqdetOSBQD+GEMf
JACVHgafjSg2cA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:37 2026 by rpki-client