Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: bkNEnRGdeY6udYcfLo1ZzJ8g2vhTrOaXu3WNpbDcDSQ=
Subject key identifier: 8E:E1:21:6B:6D:50:AB:4E:DA:19:F9:0C:02:94:05:75:E7:2B:E0:76
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 019D98BDF0236082113F725606821B1A1151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: OpIeHLfShrLsQ9YbPcpvTfkvNhgZrgD1GGnRZdQJAZk=)
2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f0:23:60:82:11:3f:72:56:06:82:1b:1a:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=8ee1216b6d50ab4eda19f90c02940575e72be076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:ff:c3:67:eb:30:59:c9:b2:e8:2b:62:24:
f0:db:da:3d:83:3a:ea:86:08:39:c2:01:d3:c5:1b:
eb:84:b7:ca:08:d2:af:c7:5d:7d:76:c8:8d:fa:77:
00:1f:a1:3e:87:d5:61:b5:24:6e:ef:77:61:b5:7a:
fe:7c:b0:e6:f8:43:44:e6:76:ee:c8:f9:f2:f0:bf:
73:28:44:b1:cf:f1:11:21:f4:ec:01:9e:19:87:a2:
c0:59:20:46:76:eb:80:ce:28:d5:36:3c:8a:89:67:
36:c4:88:86:e1:2e:be:2f:1e:0f:96:96:82:33:4c:
3b:39:e0:3c:29:19:42:c1:23:99:bd:65:5b:95:38:
78:8f:ec:11:61:4c:64:5e:cd:48:6e:26:3b:9b:06:
e8:d7:3f:7f:25:c5:5f:44:f8:93:0c:79:67:a3:90:
58:1f:7f:e2:00:9f:b0:18:6d:61:ac:e3:36:e8:2c:
f2:d1:92:ee:c5:f1:9b:cb:c5:65:96:96:3f:36:02:
cd:57:87:54:1b:4b:19:ac:02:5c:52:fb:51:36:c2:
bb:d2:23:ad:46:de:93:bb:24:c9:a2:ac:0e:c3:74:
6b:75:75:6b:b1:ed:db:b9:86:ca:d8:11:cb:19:22:
d0:6c:ff:f2:47:7e:2b:35:23:ed:e7:01:7a:b3:e9:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:21:6B:6D:50:AB:4E:DA:19:F9:0C:02:94:05:75:E7:2B:E0:76
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:80:8d:9d:e5:52:f9:43:6d:0b:ee:ea:c1:fe:5f:c6:25:a0:
40:86:29:46:68:78:05:a8:85:30:ed:a7:be:75:f9:9e:88:d2:
3e:20:64:5f:e4:bc:77:df:1b:a7:84:c1:a9:60:59:bc:8a:19:
64:cb:25:d3:88:65:1b:88:46:93:71:87:6b:67:40:63:bc:2f:
a9:10:61:77:c7:ad:cf:00:70:6f:ec:82:fc:53:53:57:ca:bb:
2b:e8:72:39:ae:18:cb:71:7e:02:ed:15:34:c2:73:da:01:64:
7f:ad:96:70:89:9d:90:c6:71:6e:21:dd:44:ba:ad:79:4d:e0:
95:a6:c9:dd:69:92:4f:9c:89:f9:76:7e:13:1c:87:9f:95:56:
7e:9e:fb:79:52:da:1f:fe:54:ef:43:8f:41:b5:8a:31:72:d0:
5f:c2:0f:c5:7a:3e:0f:52:b9:a0:bf:2a:8c:f7:0c:38:fd:a5:
96:b2:d9:c7:6f:fa:c8:0b:34:41:a9:07:a0:97:34:5c:2c:4b:
05:81:80:ae:2f:2d:d2:15:66:46:49:e7:52:ca:d6:31:58:95:
4e:06:44:90:ed:53:26:99:82:fb:bf:62:78:56:8b:e0:ed:0d:
17:db:8b:4a:84:43:de:2e:bc:56:c9:dc:f2:f7:f3:cb:06:68:
2d:06:8b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvfAjYIIRP3JWBoIbGhFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5
MDg2YWEwHhcNMjYwNDE3MDAwMTE3WhcNMjYwNDE4MDAwMTE3WjAzMTEwLwYDVQQD
Eyg4ZWUxMjE2YjZkNTBhYjRlZGExOWY5MGMwMjk0MDU3NWU3MmJlMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sz/w2frMFnJsugrYiTw29o9gzrq
hgg5wgHTxRvrhLfKCNKvx119dsiN+ncAH6E+h9VhtSRu73dhtXr+fLDm+ENE5nbu
yPny8L9zKESxz/ERIfTsAZ4Zh6LAWSBGduuAzijVNjyKiWc2xIiG4S6+Lx4PlpaC
M0w7OeA8KRlCwSOZvWVblTh4j+wRYUxkXs1IbiY7mwbo1z9/JcVfRPiTDHlno5BY
H3/iAJ+wGG1hrOM26Czy0ZLuxfGby8VllpY/NgLNV4dUG0sZrAJcUvtRNsK70iOt
Rt6TuyTJoqwOw3RrdXVrse3buYbK2BHLGSLQbP/yR34rNSPt5wF6s+lqPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7hIWttUKtO2hn5DAKUBXXnK+B2MB8GA1UdIwQY
MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt
YjljNzk0ZTAzY2JhLzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh
LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYCNneVS
+UNtC+7qwf5fxiWgQIYpRmh4BaiFMO2nvnX5nojSPiBkX+S8d98bp4TBqWBZvIoZ
ZMsl04hlG4hGk3GHa2dAY7wvqRBhd8etzwBwb+yC/FNTV8q7K+hyOa4Yy3F+Au0V
NMJz2gFkf62WcImdkMZxbiHdRLqteU3glabJ3WmST5yJ+XZ+ExyHn5VWfp77eVLa
H/5U70OPQbWKMXLQX8IPxXo+D1K5oL8qjPcMOP2llrLZx2/6yAs0QakHoJc0XCxL
BYGAri8t0hVmRknnUsrWMViVTgZEkO1TJpmC+79ieFaL4O0NF9uLSoRD3i68Vsnc
8vfzywZoLQaLfg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:21 2026 by rpki-client