Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: 4exEb2RnXtuT0Ec2pgS4Ntgs9uqhWJtItdvVRqLdYoU=
Subject key identifier: 42:E7:03:C0:4D:23:32:02:91:1E:08:E0:8A:4A:6F:CE:D4:AE:EC:EE
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019DA48AE2E3E9FDB4C5E7DF49BC3204F037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0492
Signing time: Sun 19 Apr 2026 07:00:58 +0000
Manifest this update: Sun 19 Apr 2026 07:00:58 +0000
Manifest next update: Mon 20 Apr 2026 07:00:58 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: llYcK87PYLnZJvq9oYQLCgpSTOr0TXQTh85Jx8NZf4M=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e2:e3:e9:fd:b4:c5:e7:df:49:bc:32:04:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Apr 19 07:00:58 2026 GMT
Not After : Apr 20 07:00:58 2026 GMT
Subject: CN=42e703c04d233202911e08e08a4a6fced4aeecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:df:97:cd:32:d8:b0:7f:8b:bb:07:d3:61:
08:40:08:99:1f:70:1e:5c:01:f7:39:99:61:d2:d0:
83:f8:42:0d:19:c9:a7:60:e2:1c:b4:42:d2:2f:c7:
c8:06:0d:f1:41:8a:8b:0d:27:a5:1c:53:5b:ca:81:
10:64:c9:1c:72:86:ed:9a:8d:4f:40:46:06:8c:de:
88:62:53:ac:d7:8f:eb:11:58:ad:e3:60:c8:fa:59:
dd:fe:86:9c:c4:01:d9:95:9f:66:08:e6:00:4d:0f:
9c:ba:6a:a9:ad:74:fd:31:01:04:ce:dd:fb:aa:29:
4e:d8:39:08:69:b2:37:82:17:0b:03:33:58:98:a6:
90:e3:8f:73:34:00:a3:df:7d:31:12:b3:c9:05:82:
ea:85:f7:4f:d9:02:be:96:2b:ad:7b:f3:ed:a6:19:
66:98:d9:19:1f:51:56:ba:f4:9c:75:68:d7:8c:65:
5e:4d:c7:3e:c6:91:9e:ac:52:38:63:b1:8e:92:f7:
00:70:af:7a:6e:13:f2:b1:66:f9:b5:62:62:0b:8f:
dc:7d:cc:2f:61:2c:ae:59:c1:8a:1a:ee:d2:0b:79:
9b:d9:f8:50:80:5d:b7:1b:2e:9b:4f:f9:94:fb:42:
54:46:3c:1d:d0:16:8e:71:fa:9b:fa:ba:b5:47:2f:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:03:C0:4D:23:32:02:91:1E:08:E0:8A:4A:6F:CE:D4:AE:EC:EE
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d5:13:8f:24:fe:1f:53:27:54:00:cf:60:fe:ca:86:70:20:
90:79:f1:a7:f0:62:d8:fb:48:dd:35:f5:c3:66:f3:82:55:81:
36:ae:e1:a1:2b:79:2b:39:7c:3f:d9:18:0c:d4:54:6f:5b:e7:
45:12:37:62:a9:50:59:a4:a3:78:4f:c8:d7:94:06:9c:92:fb:
2c:f0:57:c4:56:32:f6:ff:42:2a:ee:54:99:19:61:7d:e7:67:
6a:89:16:01:79:5a:f0:ef:bc:4b:ab:22:52:c7:66:a8:d1:3e:
63:b2:3e:da:ba:a3:1a:c8:ef:92:74:13:a1:b4:7f:ba:36:2a:
b7:f1:fa:94:43:0f:c1:99:85:03:e5:79:aa:99:54:2d:92:37:
77:4a:97:87:ca:74:ab:30:18:09:2b:69:35:07:82:26:92:e2:
22:bd:7d:05:dd:0c:16:e9:96:f2:26:a7:7b:47:e6:28:c7:8f:
64:39:b1:78:00:f0:c8:b8:2d:2c:5b:3f:c0:76:40:32:3f:fd:
88:11:b5:ea:c6:7f:27:35:67:09:ef:1a:84:0a:bd:3d:f7:c8:
59:bc:58:aa:da:11:fa:4a:6a:58:ca:02:76:85:b7:c9:5e:1b:
19:b4:3a:cc:7a:7b:97:b6:0e:21:07:17:03:91:ad:11:7c:c4:
64:e8:90:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiuLj6f20xeffSbwyBPA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0
ZDIxYjEwHhcNMjYwNDE5MDcwMDU4WhcNMjYwNDIwMDcwMDU4WjAzMTEwLwYDVQQD
Eyg0MmU3MDNjMDRkMjMzMjAyOTExZTA4ZTA4YTRhNmZjZWQ0YWVlY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M3fl80y2LB/i7sH02EIQAiZH3Ae
XAH3OZlh0tCD+EINGcmnYOIctELSL8fIBg3xQYqLDSelHFNbyoEQZMkccobtmo1P
QEYGjN6IYlOs14/rEVit42DI+lnd/oacxAHZlZ9mCOYATQ+cumqprXT9MQEEzt37
qilO2DkIabI3ghcLAzNYmKaQ449zNACj330xErPJBYLqhfdP2QK+liute/Ptphlm
mNkZH1FWuvScdWjXjGVeTcc+xpGerFI4Y7GOkvcAcK96bhPysWb5tWJiC4/cfcwv
YSyuWcGKGu7SC3mb2fhQgF23Gy6bT/mU+0JURjwd0BaOcfqb+rq1Ry+NuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELnA8BNIzICkR4I4IpKb87UruzuMB8GA1UdIwQY
MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct
YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy
LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9UTjyT+
H1MnVADPYP7KhnAgkHnxp/Bi2PtI3TX1w2bzglWBNq7hoSt5Kzl8P9kYDNRUb1vn
RRI3YqlQWaSjeE/I15QGnJL7LPBXxFYy9v9CKu5UmRlhfednaokWAXla8O+8S6si
UsdmqNE+Y7I+2rqjGsjvknQTobR/ujYqt/H6lEMPwZmFA+V5qplULZI3d0qXh8p0
qzAYCStpNQeCJpLiIr19Bd0MFumW8iane0fmKMePZDmxeADwyLgtLFs/wHZAMj/9
iBG16sZ/JzVnCe8ahAq9PffIWbxYqtoR+kpqWMoCdoW3yV4bGbQ6zHp7l7YOIQcX
A5GtEXzEZOiQUg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:29 2026 by rpki-client