Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: pZWOvIKb4n6i22mbapYfwO15eqh7r9tJTHVRXbGWWPU=
Subject key identifier: A5:16:01:AB:09:9D:F3:60:CF:4E:1D:17:2D:21:37:15:69:E5:41:CB
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 019DA4536D48D29FBD6DB19E2D3DB2000EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 043F
Signing time: Sun 19 Apr 2026 06:00:23 +0000
Manifest this update: Sun 19 Apr 2026 06:00:23 +0000
Manifest next update: Mon 20 Apr 2026 06:00:23 +0000
Files and hashes: 1: 1-kOi4nefmaukalzSye5kdhLHwjg.roa (hash: 0aXXszrWV6/bhcESEiK3I+iPJll6E210hDJhUqm+acY=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: etvkfpStkcPzhyiu1qBnM3ngC6lLjm2RQHjgiWyx/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:6d:48:d2:9f:bd:6d:b1:9e:2d:3d:b2:00:0e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Apr 19 06:00:23 2026 GMT
Not After : Apr 20 06:00:23 2026 GMT
Subject: CN=a51601ab099df360cf4e1d172d21371569e541cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:f3:96:c8:f2:84:ff:86:55:1b:cf:87:20:
88:8c:22:78:45:e3:57:69:82:38:87:48:43:fb:24:
00:68:05:ae:b4:8e:54:d4:aa:9b:10:f3:4b:cf:fe:
30:f0:a2:d9:73:f6:2c:2c:8e:fe:7e:99:a0:b4:53:
3b:9b:af:3f:6d:df:7b:c6:1f:9d:e5:d3:01:8b:c4:
62:c2:73:1d:01:0c:ec:50:fb:65:85:0e:f5:ea:c1:
c7:2f:89:51:b2:e7:05:9f:47:f4:dc:8f:da:12:f9:
fc:12:f1:57:62:2d:7a:3f:22:82:cc:7b:26:dc:50:
fb:fd:10:0b:c3:6f:ce:9c:3b:2a:60:06:59:9d:89:
96:8b:e3:01:43:b9:a8:ac:b2:9c:25:c3:1e:e5:e7:
c6:e9:70:83:be:94:18:01:6f:db:99:3b:d3:13:90:
e9:ee:0b:54:1e:87:ea:b0:62:e1:63:b4:52:75:7c:
2b:4f:3a:5e:82:e6:e1:1e:19:95:6f:5b:64:f7:c9:
63:42:83:f8:79:f9:db:a6:b9:1e:f8:b5:66:64:8c:
46:74:cb:30:d9:fd:b3:cd:8e:e0:9f:1b:2a:1a:7b:
42:f1:e9:92:6c:fe:17:0a:c6:ea:81:d5:f6:f8:67:
be:c8:59:ae:4b:69:10:da:35:0c:f1:8b:b4:ab:46:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:01:AB:09:9D:F3:60:CF:4E:1D:17:2D:21:37:15:69:E5:41:CB
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:80:33:87:4c:3c:9e:0f:8a:91:3a:92:5d:33:56:61:b5:cc:
50:f9:49:6c:4d:f5:3e:c3:bb:e3:12:fb:e5:a5:63:d2:92:41:
f8:03:9a:8a:17:f4:a8:da:fb:08:05:c5:3b:3f:08:b7:cf:6e:
65:eb:25:f5:e8:c5:ab:e2:9f:7f:f0:9e:d3:3d:30:fd:fd:80:
8d:61:f3:cf:db:bb:4b:5a:ca:49:05:c3:1b:e7:2e:58:d8:8d:
55:e7:b8:8d:d4:1e:b4:e7:8f:20:7f:ba:30:4c:cb:2b:f8:5d:
5e:06:9e:0a:de:94:50:36:d3:15:81:ba:0f:5a:c6:fe:6d:3c:
62:64:a1:60:cf:ab:e4:b7:77:90:a2:c5:ea:e7:f0:ac:be:ba:
02:ad:25:e7:4d:40:8d:2c:c2:e9:cc:f1:bd:be:73:8f:f3:ee:
be:5b:eb:b0:6d:d6:9e:cb:5d:08:1c:d0:d3:be:c2:16:55:70:
df:ae:cf:22:bb:4e:c9:c8:21:44:79:42:ee:6d:44:66:c9:c4:
37:09:17:24:9a:3b:57:e6:ee:e8:af:98:75:df:92:03:ea:fd:
43:11:f7:0a:b7:bb:06:a0:ba:08:d6:3d:c2:bb:80:eb:7e:c8:
af:aa:6c:29:7d:5d:c0:21:6a:5c:f1:99:4c:70:d4:8e:41:ea:
8d:c4:a9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU21I0p+9bbGeLT2yAA7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTIyOGEzYTNkMDA2NTRkNGIxMTE3MzM4NzRlMzFkODBj
MGEyMGMwHhcNMjYwNDE5MDYwMDIzWhcNMjYwNDIwMDYwMDIzWjAzMTEwLwYDVQQD
EyhhNTE2MDFhYjA5OWRmMzYwY2Y0ZTFkMTcyZDIxMzcxNTY5ZTU0MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xTzlsjyhP+GVRvPhyCIjCJ4ReNX
aYI4h0hD+yQAaAWutI5U1KqbEPNLz/4w8KLZc/YsLI7+fpmgtFM7m68/bd97xh+d
5dMBi8RiwnMdAQzsUPtlhQ716sHHL4lRsucFn0f03I/aEvn8EvFXYi16PyKCzHsm
3FD7/RALw2/OnDsqYAZZnYmWi+MBQ7morLKcJcMe5efG6XCDvpQYAW/bmTvTE5Dp
7gtUHofqsGLhY7RSdXwrTzpegubhHhmVb1tk98ljQoP4efnbprke+LVmZIxGdMsw
2f2zzY7gnxsqGntC8emSbP4XCsbqgdX2+Ge+yFmuS2kQ2jUM8Yu0q0bZ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUWAasJnfNgz04dFy0hNxVp5UHLMB8GA1UdIwQY
MBaAFM4SKKOj0AZU1LERczh04x2AwKIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMt
ZmQ3ZGJkZjhlMzAwLzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMtZmQ3ZGJkZjhlMzAw
LzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIAzh0w8
ng+KkTqSXTNWYbXMUPlJbE31PsO74xL75aVj0pJB+AOaihf0qNr7CAXFOz8It89u
Zesl9ejFq+Kff/Ce0z0w/f2AjWHzz9u7S1rKSQXDG+cuWNiNVee4jdQetOePIH+6
MEzLK/hdXgaeCt6UUDbTFYG6D1rG/m08YmShYM+r5Ld3kKLF6ufwrL66Aq0l501A
jSzC6czxvb5zj/PuvlvrsG3WnstdCBzQ077CFlVw367PIrtOycghRHlC7m1EZsnE
NwkXJJo7V+bu6K+Ydd+SA+r9QxH3Cre7BqC6CNY9wruA637Ir6psKX1dwCFqXPGZ
THDUjkHqjcSp6g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 16:10:29 2026 by rpki-client