Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: 79gNFQ98kycIjAsl7t+vpP1Ae/hxn8WV6hakpm0qCVM=
Subject key identifier: C4:8A:97:52:3C:FB:14:6C:BD:09:F1:90:33:A2:6B:04:82:DD:F8:82
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019D9999265833A74415C59F2BA07A77FB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0513
Signing time: Fri 17 Apr 2026 04:00:43 +0000
Manifest this update: Fri 17 Apr 2026 04:00:43 +0000
Manifest next update: Sat 18 Apr 2026 04:00:43 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: fI1mbCMEq6w74RTWgyS0dbLBVmDsikl/ALLvQDTuEw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:26:58:33:a7:44:15:c5:9f:2b:a0:7a:77:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Apr 17 04:00:43 2026 GMT
Not After : Apr 18 04:00:43 2026 GMT
Subject: CN=c48a97523cfb146cbd09f19033a26b0482ddf882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:04:55:eb:ac:5b:e4:58:80:f9:66:0a:55:
09:11:94:9f:60:90:5a:98:ab:2c:f0:5e:76:58:15:
43:dc:df:39:5c:e9:8f:10:4b:da:26:aa:8e:53:73:
8e:28:8e:65:66:3d:f1:f2:a1:3b:da:59:f5:4a:7b:
88:d7:53:7f:16:56:52:89:3d:90:0d:9a:59:d4:f5:
0f:7a:5b:54:d2:4d:35:15:61:6d:66:06:3f:a8:ca:
ff:e3:3b:e8:54:00:44:68:da:84:77:0d:6d:e2:82:
f4:6a:b5:ae:c5:8a:06:63:1e:bf:ad:ea:31:63:3b:
29:2e:00:ae:82:d2:3a:20:ac:a3:9b:f9:83:5e:91:
5b:74:47:ad:08:00:e5:8e:e0:6a:8d:07:a0:11:b0:
25:96:de:f1:d7:59:e2:e9:e1:ec:04:a0:6b:31:f2:
76:56:8a:cb:c5:c3:33:5f:e4:0a:9a:34:3b:14:d4:
e7:bd:e0:0c:77:59:3b:d5:0c:4e:73:7b:23:5e:ff:
34:2c:a2:ac:ed:73:a2:13:1c:6b:fd:98:e3:6d:4e:
bb:79:84:61:76:24:25:97:1a:ae:4e:76:4c:8d:e4:
2b:3e:6c:ea:63:f8:5b:9f:7a:78:c8:4d:20:db:01:
c6:be:18:bf:5f:65:08:89:93:47:fc:52:0d:29:56:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:97:52:3C:FB:14:6C:BD:09:F1:90:33:A2:6B:04:82:DD:F8:82
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:66:1f:3f:fb:e0:26:3c:75:50:67:90:2f:56:8a:1c:62:06:
d1:7e:62:77:69:e0:c0:ca:55:76:c8:d9:cc:57:74:d9:98:06:
13:44:c3:ea:d1:2c:f2:03:16:be:15:be:c7:9b:4c:b6:db:f2:
81:15:28:e1:0b:06:67:3b:ca:34:4d:95:92:f3:f3:c4:06:4c:
df:95:85:d9:03:eb:6a:49:b4:d9:a7:d5:10:80:73:65:ee:c0:
ae:ba:bb:e1:72:06:92:d3:14:46:89:6d:a3:db:fb:8a:a3:48:
77:f6:e5:b7:59:84:5c:6c:f8:15:2f:62:31:6b:85:06:12:62:
fa:bd:fb:21:10:e7:a6:f1:06:d0:34:30:53:e6:1d:93:6e:63:
e0:58:4d:ac:31:39:f9:84:a6:ca:ed:c5:cc:c1:0c:c8:dd:48:
01:95:57:ca:dd:44:b3:d7:6c:ae:10:e2:f3:b2:63:8d:fe:d9:
e1:45:77:d7:04:1a:c1:1e:3e:22:b0:9e:18:10:82:a2:42:aa:
f3:e0:c1:4f:87:55:09:f6:d0:50:be:bd:fe:03:14:50:1a:fc:
c2:f8:05:12:af:8a:3e:5c:9e:33:bb:ab:a9:a6:8e:af:5c:6d:
ee:b9:80:b6:5e:24:b7:fb:1d:1e:1d:50:a7:23:49:ea:dc:46:
e4:73:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:12 2026 by rpki-client