Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: pFQI3APtAUPdFBRp55dHEW9Szb71QfUbONd/PyOyfLs=
Subject key identifier: 99:05:1E:A1:82:2A:DE:B8:E8:B3:94:DA:3F:55:D0:D4:9A:83:35:76
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019D9B5136EF6DBEE8AAF2332149DB849809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 11BF
Signing time: Fri 17 Apr 2026 12:01:24 +0000
Manifest this update: Fri 17 Apr 2026 12:01:24 +0000
Manifest next update: Sat 18 Apr 2026 12:01:24 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: 1gDq45MNpmR8jYsw668VXjkKr4JIGh+7pWiYLnhiC2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:36:ef:6d:be:e8:aa:f2:33:21:49:db:84:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Apr 17 12:01:24 2026 GMT
Not After : Apr 18 12:01:24 2026 GMT
Subject: CN=99051ea1822adeb8e8b394da3f55d0d49a833576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:00:22:0e:26:7d:57:90:ee:a6:28:0d:6f:
97:1b:18:4d:5e:93:80:06:0c:dd:60:f6:f2:44:c2:
a7:64:93:a4:c2:66:d8:2b:94:59:dd:5c:e9:cb:6b:
03:b9:a0:9d:a8:cb:7f:83:9c:ae:30:2a:5e:c2:9a:
d9:99:08:6d:ed:13:73:80:2b:d2:f1:e8:07:c7:a8:
5d:7c:de:4b:0e:94:59:68:4a:9a:48:9c:38:9d:5b:
59:40:c4:5f:4a:bf:94:a8:4d:eb:4a:68:e3:5f:71:
a7:d8:3d:ee:9c:18:1f:28:99:55:8f:b3:c7:44:ce:
08:08:47:13:90:e5:b8:a7:79:ad:c7:62:c2:c7:a8:
1e:07:64:81:74:7f:d4:a3:a2:51:ee:90:a7:66:d0:
11:5f:68:be:2b:8c:8b:10:0d:95:bd:29:49:91:5d:
e7:2b:ff:49:21:91:a2:49:d6:cd:a6:08:4e:42:f9:
d0:ee:2f:31:2a:88:ab:4b:72:12:4d:f1:57:d1:bd:
81:ce:27:4c:86:08:95:3a:05:2b:72:eb:59:2c:56:
41:ea:68:62:53:f6:54:3d:97:9b:5b:b4:1e:57:57:
de:2b:78:0a:b7:c8:69:71:96:83:c8:b6:65:51:13:
95:ef:75:9b:81:a7:f8:72:88:ed:7a:6e:a6:f0:1c:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:05:1E:A1:82:2A:DE:B8:E8:B3:94:DA:3F:55:D0:D4:9A:83:35:76
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:1b:2a:fe:c1:39:a7:23:7a:a6:66:06:44:13:17:35:59:
e7:0a:22:09:36:ed:76:1b:58:12:49:39:75:3e:c5:a3:1b:12:
9b:1e:3b:b3:e4:34:9d:6e:19:7a:d2:af:bd:81:65:6f:6e:82:
b4:66:b1:62:fe:d2:da:ac:8c:ee:38:b3:30:58:26:ad:2b:8c:
a6:b8:c5:72:a0:50:1e:ef:1a:3a:19:96:80:0f:a4:51:bf:f9:
3d:15:37:77:79:c0:f4:b6:17:6c:a7:7f:df:63:77:3a:e1:ee:
2f:2f:b6:4d:8a:7f:54:3e:b6:02:43:14:81:09:48:44:48:a6:
8f:8c:88:3d:c6:50:d3:e4:c0:fd:7e:64:25:00:8c:d4:72:c1:
73:fc:33:48:66:af:f9:0f:aa:b6:d4:d3:77:c4:07:ee:9c:eb:
18:db:53:56:c5:cb:a3:5c:6c:56:49:72:ca:50:f0:2c:76:f8:
09:61:d8:cf:b9:1a:4d:cb:39:e1:ff:dc:21:28:43:0e:46:3b:
d0:d0:15:37:b1:22:44:b1:c8:d8:98:c4:1d:55:6c:0b:64:04:
3f:09:12:3c:1f:79:6b:55:ed:d6:78:b1:35:65:a1:65:da:79:
f3:8f:bf:15:bf:32:40:df:c4:13:d0:e1:4a:3a:be:0c:dd:80:
04:09:d6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUTbvbb7oqvIzIUnbhJgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjYwNDE3MTIwMTI0WhcNMjYwNDE4MTIwMTI0WjAzMTEwLwYDVQQD
Eyg5OTA1MWVhMTgyMmFkZWI4ZThiMzk0ZGEzZjU1ZDBkNDlhODMzNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRcAIg4mfVeQ7qYoDW+XGxhNXpOA
BgzdYPbyRMKnZJOkwmbYK5RZ3Vzpy2sDuaCdqMt/g5yuMCpewprZmQht7RNzgCvS
8egHx6hdfN5LDpRZaEqaSJw4nVtZQMRfSr+UqE3rSmjjX3Gn2D3unBgfKJlVj7PH
RM4ICEcTkOW4p3mtx2LCx6geB2SBdH/Uo6JR7pCnZtARX2i+K4yLEA2VvSlJkV3n
K/9JIZGiSdbNpghOQvnQ7i8xKoirS3ISTfFX0b2BzidMhgiVOgUrcutZLFZB6mhi
U/ZUPZebW7QeV1feK3gKt8hpcZaDyLZlUROV73Wbgaf4cojtem6m8Bz7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkFHqGCKt646LOU2j9V0NSagzV2MB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi4bKv7B
OacjeqZmBkQTFzVZ5woiCTbtdhtYEkk5dT7FoxsSmx47s+Q0nW4ZetKvvYFlb26C
tGaxYv7S2qyM7jizMFgmrSuMprjFcqBQHu8aOhmWgA+kUb/5PRU3d3nA9LYXbKd/
32N3OuHuLy+2TYp/VD62AkMUgQlIREimj4yIPcZQ0+TA/X5kJQCM1HLBc/wzSGav
+Q+qttTTd8QH7pzrGNtTVsXLo1xsVklyylDwLHb4CWHYz7kaTcs54f/cIShDDkY7
0NAVN7EiRLHI2JjEHVVsC2QEPwkSPB95a1Xt1nixNWWhZdp584+/Fb8yQN/EE9Dh
Sjq+DN2ABAnWnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:38 2026 by rpki-client