Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier: CPT/Q4Ffir2wnQX4PHszyFujiHD2mfwUeB4bFL2pS+I=
Subject key identifier: 45:DC:E0:66:D8:AB:89:A4:06:2F:CC:5B:29:EE:E8:23:79:D5:55:CC
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial: 019DA45365DEC49877A15D4E813DC8A0EF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number: 041C
Signing time: Sun 19 Apr 2026 06:00:22 +0000
Manifest this update: Sun 19 Apr 2026 06:00:22 +0000
Manifest next update: Mon 20 Apr 2026 06:00:22 +0000
Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: y0/u2ZTEV3xz9kds7wHWgrTGeq/h/xSUJ7UvOQw4KmE=)
2: fVPrysluUd3L0ep1M9g-Qu86NA4.asa (hash: Lugnw9UZcGM9OKvJ1USKgkEdV6a/3UOFMinpysZbkZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:65:de:c4:98:77:a1:5d:4e:81:3d:c8:a0:ef:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
Validity
Not Before: Apr 19 06:00:22 2026 GMT
Not After : Apr 20 06:00:22 2026 GMT
Subject: CN=45dce066d8ab89a4062fcc5b29eee82379d555cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:09:78:38:72:cb:bc:c8:17:32:29:61:e7:
cf:3d:d2:5e:14:e7:18:9b:6c:c9:4c:93:3e:35:a7:
e1:ee:dc:b1:d5:3e:c7:2f:fe:5b:a1:72:36:4a:09:
16:c2:cb:a7:2e:7f:f6:db:35:3c:d0:a6:cb:97:5a:
6d:6d:81:74:40:7d:eb:e6:27:49:8e:a6:6b:c1:00:
df:d3:6e:e4:95:0e:1f:6c:b2:20:25:6e:d2:01:0d:
b5:bb:77:5a:12:85:77:f4:35:c3:f9:6a:3f:fe:69:
c1:26:98:14:ff:2c:ac:ab:1e:e8:61:e6:f8:d4:69:
21:ed:77:0c:71:f7:56:ef:db:9a:69:03:9c:45:72:
73:f6:be:bc:7a:b9:f0:cc:b2:90:a8:f2:78:bc:ee:
c0:1e:29:d9:23:d4:a7:4c:fb:ed:0e:c4:9a:fc:b0:
f8:f8:2f:a6:82:cc:5b:09:b4:61:de:9c:9b:1a:00:
66:28:c4:70:92:d1:17:2b:f0:a7:08:8a:75:b9:ce:
77:58:e8:f2:23:e5:4a:40:c4:77:eb:6b:09:b9:08:
70:f2:c9:fa:12:f9:92:db:08:57:d0:b7:c0:ac:a2:
aa:42:c7:aa:e9:8a:95:e6:26:5e:12:3a:bb:90:78:
2c:e8:f3:a4:63:81:e3:d9:c0:f7:74:dd:1c:dd:5a:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:E0:66:D8:AB:89:A4:06:2F:CC:5B:29:EE:E8:23:79:D5:55:CC
X509v3 Authority Key Identifier:
keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a6:ac:ad:df:9d:2d:23:0f:ab:d5:2f:f7:f2:6a:f1:b7:0a:
86:47:69:7a:ea:52:c3:8a:99:ac:e2:9c:52:ea:08:18:97:29:
80:f6:23:0d:f3:47:24:ca:9c:03:31:08:a6:2e:ef:77:be:a5:
80:ea:97:dd:41:e6:1b:bb:3b:3b:67:5d:3f:99:36:e3:8a:17:
79:7f:e0:9c:ea:17:5d:69:3e:7b:84:be:bc:4a:38:92:b0:f5:
06:e2:73:14:c0:66:dd:c2:6e:77:c5:86:46:d0:e1:7e:63:fe:
b5:8c:5c:f5:15:a5:c0:c5:ed:53:d0:cf:ef:be:76:31:dd:cb:
6d:39:e2:fd:1e:50:79:34:60:0a:24:28:d3:89:bc:81:68:7e:
93:5b:23:77:ad:8f:71:e1:7f:76:db:9e:7f:11:6b:1d:bb:8a:
81:02:d0:45:61:5b:e2:e9:41:5a:ea:66:ea:57:a2:82:cb:83:
2f:13:e3:9d:71:37:5c:04:fb:22:74:46:38:c8:d3:30:f8:6b:
42:00:db:ab:35:c2:3e:06:49:fb:d9:cd:7a:9e:ef:a4:cc:67:
94:ec:91:83:79:0c:1e:43:84:23:b2:0d:b4:21:6c:d1:c7:61:
36:5e:58:bb:8a:33:64:aa:c5:78:a6:a2:57:ff:ac:d6:a0:99:
52:79:93:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU2XexJh3oV1OgT3IoO9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YmU1MjEwOTNiYjg5ZGM3NjI1MGIyMjdmN2Y3ZmJhNjZl
MjI4ZDgwHhcNMjYwNDE5MDYwMDIyWhcNMjYwNDIwMDYwMDIyWjAzMTEwLwYDVQQD
Eyg0NWRjZTA2NmQ4YWI4OWE0MDYyZmNjNWIyOWVlZTgyMzc5ZDU1NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQUJeDhyy7zIFzIpYefPPdJeFOcY
m2zJTJM+Nafh7tyx1T7HL/5boXI2SgkWwsunLn/22zU80KbLl1ptbYF0QH3r5idJ
jqZrwQDf027klQ4fbLIgJW7SAQ21u3daEoV39DXD+Wo//mnBJpgU/yysqx7oYeb4
1Gkh7XcMcfdW79uaaQOcRXJz9r68ernwzLKQqPJ4vO7AHinZI9SnTPvtDsSa/LD4
+C+mgsxbCbRh3pybGgBmKMRwktEXK/CnCIp1uc53WOjyI+VKQMR362sJuQhw8sn6
EvmS2whX0LfArKKqQseq6YqV5iZeEjq7kHgs6POkY4Hj2cD3dN0c3VoaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXc4GbYq4mkBi/MWynu6CN51VXMMB8GA1UdIwQY
MBaAFGa+UhCTu4ncdiULIn9/f7pm4ijYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmY5YjMtZGUyYi00MWY1LWE5NDkt
OTAwMzBkMDQwZmY3LzEvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zMmY5YjMtZGUyYi00MWY1LWE5NDktOTAwMzBkMDQwZmY3
LzEvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaasrd+d
LSMPq9Uv9/Jq8bcKhkdpeupSw4qZrOKcUuoIGJcpgPYjDfNHJMqcAzEIpi7vd76l
gOqX3UHmG7s7O2ddP5k244oXeX/gnOoXXWk+e4S+vEo4krD1BuJzFMBm3cJud8WG
RtDhfmP+tYxc9RWlwMXtU9DP7752Md3LbTni/R5QeTRgCiQo04m8gWh+k1sjd62P
ceF/dtuefxFrHbuKgQLQRWFb4ulBWupm6leigsuDLxPjnXE3XAT7InRGOMjTMPhr
QgDbqzXCPgZJ+9nNep7vpMxnlOyRg3kMHkOEI7INtCFs0cdhNl5Yu4ozZKrFeKai
V/+s1qCZUnmT8g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:06 2026 by rpki-client