Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: C7IS6pV0A7epjWEmAP18aJ1uJbsZpcusyU+utO+/JTI=
Subject key identifier: 1D:D1:50:17:AE:A2:9C:35:CB:E7:59:2A:DA:F7:89:8C:A1:F5:D8:7C
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019D9B87909FEFDC42E46437BCD484334636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0514
Signing time: Fri 17 Apr 2026 13:00:45 +0000
Manifest this update: Fri 17 Apr 2026 13:00:45 +0000
Manifest next update: Sat 18 Apr 2026 13:00:45 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: OddTQFIKZ/v+KtxDXTgtWhZKtv+RFW/RVbb1q4OucEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:90:9f:ef:dc:42:e4:64:37:bc:d4:84:33:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Apr 17 13:00:45 2026 GMT
Not After : Apr 18 13:00:45 2026 GMT
Subject: CN=1dd15017aea29c35cbe7592adaf7898ca1f5d87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:62:a2:1c:11:3c:22:eb:8b:45:99:5b:14:
86:8a:ff:5f:70:b8:69:77:de:46:1e:d8:c6:4c:87:
8a:e0:ae:65:b6:dc:29:d3:80:95:11:ee:f6:45:11:
d7:c4:f6:bf:1c:65:95:89:c8:5c:c4:dc:11:6c:d4:
c9:67:7d:3f:0e:4b:86:07:b8:63:e2:6c:11:fe:fc:
fc:a0:4b:f7:18:47:d1:fe:14:ba:19:3a:f3:d7:30:
e4:bb:a8:b6:40:9d:43:66:f1:f6:6d:14:ef:88:bd:
a5:7f:45:7d:c9:b6:7a:c0:7f:dd:fb:31:7b:4c:22:
81:84:a3:f8:1e:f2:4a:07:15:9b:68:ae:0b:17:4d:
8c:98:20:9d:a2:89:b2:5a:b2:69:9c:6e:46:29:8c:
d6:fc:48:76:96:87:7b:76:51:d9:de:12:79:eb:66:
ea:5f:75:7f:c7:ba:db:f5:96:83:a9:a6:fa:77:9d:
16:01:47:d3:9d:d8:47:5b:70:49:2c:f8:e7:36:3b:
ea:f3:e8:3d:da:eb:22:05:e2:a6:93:63:03:e7:65:
39:01:c3:5d:14:c1:63:a1:2c:db:b5:0a:60:6a:9b:
51:ff:e6:1b:bd:0b:ab:61:fe:ce:cd:57:32:be:19:
87:e2:ff:92:f8:b8:0f:5f:2c:2c:24:7e:2b:18:14:
9e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:50:17:AE:A2:9C:35:CB:E7:59:2A:DA:F7:89:8C:A1:F5:D8:7C
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:3a:d3:41:e2:3b:70:cc:76:39:26:c8:c2:71:02:b4:fd:
f4:c5:25:49:ac:cb:a4:29:45:41:eb:e8:87:92:ff:bb:e0:aa:
4d:6c:fc:f7:40:f8:23:30:7a:56:08:7d:9c:44:45:40:34:7f:
a0:d5:40:96:38:2f:b0:f4:a3:45:27:d1:9b:a7:6d:1d:51:1d:
b5:19:6e:b0:05:3b:89:d5:87:bc:fd:97:d1:6b:c8:18:cb:b9:
a9:cf:71:bb:a6:e9:22:27:a2:94:5e:fe:aa:6d:1f:f4:5a:57:
91:79:4e:c1:ce:9e:76:40:a8:ee:67:31:17:16:4b:7d:96:d5:
eb:7c:5c:cf:8c:02:b2:29:25:ad:1c:69:b2:00:c6:df:a1:55:
8d:e6:df:57:1a:31:24:ef:b1:9f:86:d5:3b:fb:5e:b1:c3:dd:
6a:80:bd:76:ab:07:0c:d1:8c:bd:62:c5:e0:44:67:25:c5:71:
39:39:b7:04:a2:f7:57:cd:1f:fd:c0:63:c8:3d:63:c8:c0:ca:
d5:cb:c6:34:06:8b:aa:13:53:6e:97:db:50:c7:d8:51:23:6e:
ac:5a:37:15:49:17:a4:b5:92:57:13:1d:90:4e:30:3d:ca:a5:
60:6e:aa:a5:99:f8:c6:51:12:82:48:09:cd:57:ac:54:e3:c0:
64:4c:23:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh5Cf79xC5GQ3vNSEM0Y2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5
ZTcwZjIwHhcNMjYwNDE3MTMwMDQ1WhcNMjYwNDE4MTMwMDQ1WjAzMTEwLwYDVQQD
EygxZGQxNTAxN2FlYTI5YzM1Y2JlNzU5MmFkYWY3ODk4Y2ExZjVkODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl1iohwRPCLri0WZWxSGiv9fcLhp
d95GHtjGTIeK4K5lttwp04CVEe72RRHXxPa/HGWVichcxNwRbNTJZ30/DkuGB7hj
4mwR/vz8oEv3GEfR/hS6GTrz1zDku6i2QJ1DZvH2bRTviL2lf0V9ybZ6wH/d+zF7
TCKBhKP4HvJKBxWbaK4LF02MmCCdoomyWrJpnG5GKYzW/Eh2lod7dlHZ3hJ562bq
X3V/x7rb9ZaDqab6d50WAUfTndhHW3BJLPjnNjvq8+g92usiBeKmk2MD52U5AcNd
FMFjoSzbtQpgaptR/+YbvQurYf7OzVcyvhmH4v+S+LgPXywsJH4rGBSeVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3RUBeuopw1y+dZKtr3iYyh9dh8MB8GA1UdIwQY
MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt
NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj
LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4U600Hi
O3DMdjkmyMJxArT99MUlSazLpClFQevoh5L/u+CqTWz890D4IzB6Vgh9nERFQDR/
oNVAljgvsPSjRSfRm6dtHVEdtRlusAU7idWHvP2X0WvIGMu5qc9xu6bpIieilF7+
qm0f9FpXkXlOwc6edkCo7mcxFxZLfZbV63xcz4wCsiklrRxpsgDG36FVjebfVxox
JO+xn4bVO/tescPdaoC9dqsHDNGMvWLF4ERnJcVxOTm3BKL3V80f/cBjyD1jyMDK
1cvGNAaLqhNTbpfbUMfYUSNurFo3FUkXpLWSVxMdkE4wPcqlYG6qpZn4xlESgkgJ
zVesVOPAZEwj2A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:57:29 2026 by rpki-client