Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: Zyzixv7RKHupEwlQu6nUdd/pHwd38KxN0/fyM1iY0mI=
Subject key identifier: 68:D7:A3:2E:40:73:6F:DA:CC:76:AC:A3:3D:89:7C:07:F3:35:B6:F2
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019D99627AB2D670A53384393BA224C0218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 085E
Signing time: Fri 17 Apr 2026 03:01:01 +0000
Manifest this update: Fri 17 Apr 2026 03:01:01 +0000
Manifest next update: Sat 18 Apr 2026 03:01:01 +0000
Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=)
2: IAnS6bEzch3TIofLALz1ygB0iyo.roa (hash: lyXUvYyQfJt4aH/SJqViQQv03gKvKKB5vsWtq0xG3Ro=)
3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: VNX4wMmCPcylv+Sx211laJRrRzWWvQy7TLWb/cNJWt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7a:b2:d6:70:a5:33:84:39:3b:a2:24:c0:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Apr 17 03:01:01 2026 GMT
Not After : Apr 18 03:01:01 2026 GMT
Subject: CN=68d7a32e40736fdacc76aca33d897c07f335b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:eb:c6:81:f6:1e:2c:7d:34:84:14:11:49:
82:3d:b5:27:88:06:67:d6:c9:47:7f:f9:ce:5b:fe:
db:45:ba:20:c1:45:ce:f9:3e:ef:ab:09:84:4e:a6:
da:bb:a6:94:39:e5:f1:b0:4b:0e:60:61:c9:92:64:
9d:c3:ed:8d:ad:d1:06:e1:11:84:d9:cf:cf:32:aa:
88:96:a9:07:d7:54:4d:2e:18:4a:60:80:49:ea:9f:
6c:de:fe:4a:fa:d2:cc:1d:24:3c:b0:5a:11:95:f8:
b2:77:2e:db:7d:bf:60:5d:76:80:fb:4e:ef:52:e0:
53:b6:01:a8:85:f1:01:80:16:34:5c:e6:4a:2a:69:
0e:be:b9:4c:84:c3:70:c9:9f:3d:52:4f:cc:cc:55:
7d:27:c9:58:0e:ec:8f:ea:a9:95:b6:a3:37:f6:f4:
bb:1c:29:b0:ac:e9:2a:5a:ed:68:58:2c:73:c1:30:
a2:7d:4c:81:55:af:d3:2d:30:3a:48:b0:a3:c0:19:
87:1d:dc:00:b3:75:ea:c6:bf:24:41:92:06:de:3e:
e3:f6:e3:81:d2:60:ab:0b:f6:73:e3:60:79:a2:78:
38:bc:d0:db:3b:1e:77:05:5c:8a:b3:43:99:ea:6c:
ee:01:63:d3:b9:9d:4c:80:76:34:47:86:6a:1d:b1:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:A3:2E:40:73:6F:DA:CC:76:AC:A3:3D:89:7C:07:F3:35:B6:F2
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5d:a7:a7:b8:a1:fb:f9:46:96:55:c9:e2:9e:45:e6:a5:0d:
78:86:c0:db:1a:7f:ad:92:c5:39:57:d5:f4:1b:0e:de:6c:a3:
ea:39:9b:b5:c1:fc:22:25:54:c3:0f:2f:69:6d:0f:6b:4f:42:
37:5f:44:65:f5:06:ba:ce:11:ce:00:9a:20:ac:fd:56:13:6c:
18:d3:3d:c9:67:5a:ca:3a:86:57:2b:bc:84:61:a8:b6:b2:c8:
44:47:0b:23:5a:5f:96:bd:88:aa:45:1f:26:22:43:13:e6:67:
f2:4d:de:05:da:e3:e5:ae:0e:95:6e:e4:e5:6f:5c:68:5c:4d:
13:55:2a:fe:52:63:4a:eb:9b:eb:3c:34:81:70:60:e3:12:0a:
d9:87:a9:f9:a7:d9:94:81:57:1c:e6:0f:c7:96:3a:f8:bc:70:
23:e0:d9:0e:92:e5:21:69:82:db:92:fc:e3:54:55:ec:bf:64:
17:5d:45:bd:42:ff:73:5f:92:13:06:a1:bf:ba:ba:82:eb:41:
e8:99:28:dc:12:47:c5:7f:ea:0c:ff:d6:e7:11:22:26:4a:b3:
10:21:1e:5e:cf:d4:f4:7f:59:fc:d3:f3:54:44:83:e2:3f:f8:
98:f6:6a:08:22:3d:fc:c6:ef:08:9f:8a:68:44:ee:b7:d1:bb:
7c:a6:7e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYnqy1nClM4Q5O6IkwCGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjYwNDE3MDMwMTAxWhcNMjYwNDE4MDMwMTAxWjAzMTEwLwYDVQQD
Eyg2OGQ3YTMyZTQwNzM2ZmRhY2M3NmFjYTMzZDg5N2MwN2YzMzViNmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbfrxoH2Hix9NIQUEUmCPbUniAZn
1slHf/nOW/7bRbogwUXO+T7vqwmETqbau6aUOeXxsEsOYGHJkmSdw+2NrdEG4RGE
2c/PMqqIlqkH11RNLhhKYIBJ6p9s3v5K+tLMHSQ8sFoRlfiydy7bfb9gXXaA+07v
UuBTtgGohfEBgBY0XOZKKmkOvrlMhMNwyZ89Uk/MzFV9J8lYDuyP6qmVtqM39vS7
HCmwrOkqWu1oWCxzwTCifUyBVa/TLTA6SLCjwBmHHdwAs3Xqxr8kQZIG3j7j9uOB
0mCrC/Zz42B5ong4vNDbOx53BVyKs0OZ6mzuAWPTuZ1MgHY0R4ZqHbFunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjXoy5Ac2/azHasoz2JfAfzNbbyMB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMF2np7ih
+/lGllXJ4p5F5qUNeIbA2xp/rZLFOVfV9BsO3myj6jmbtcH8IiVUww8vaW0Pa09C
N19EZfUGus4RzgCaIKz9VhNsGNM9yWdayjqGVyu8hGGotrLIREcLI1pflr2IqkUf
JiJDE+Zn8k3eBdrj5a4OlW7k5W9caFxNE1Uq/lJjSuub6zw0gXBg4xIK2Yep+afZ
lIFXHOYPx5Y6+LxwI+DZDpLlIWmC25L841RV7L9kF11FvUL/c1+SEwahv7q6gutB
6Jko3BJHxX/qDP/W5xEiJkqzECEeXs/U9H9Z/NPzVESD4j/4mPZqCCI9/MbvCJ+K
aETut9G7fKZ+CA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:28 2026 by rpki-client