Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: ZFxtc06fJDwBXQ9gZrQU72/riPqkhS2S8YsUp8NZ01w=
Subject key identifier: 85:22:73:07:19:17:97:6F:D6:85:7B:02:7A:D2:12:09:3C:89:54:36
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 019D9B514A324A247D042E5FA6AB7CFEC687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 187B
Signing time: Fri 17 Apr 2026 12:01:28 +0000
Manifest this update: Fri 17 Apr 2026 12:01:28 +0000
Manifest next update: Sat 18 Apr 2026 12:01:28 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: E4q5HTFv7msvyLl3EetP75WZRpXHkTl1+Xl9u6lLzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:4a:32:4a:24:7d:04:2e:5f:a6:ab:7c:fe:c6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Apr 17 12:01:28 2026 GMT
Not After : Apr 18 12:01:28 2026 GMT
Subject: CN=852273071917976fd6857b027ad212093c895436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:5d:c3:56:8a:aa:fa:a1:8c:c0:d3:31:8b:
b9:27:9c:b7:6d:68:cf:2d:53:61:9e:2c:9d:42:88:
1e:0d:41:5b:45:49:08:65:62:9c:48:01:6c:ff:ca:
09:2b:1a:a9:be:83:55:3f:9d:f7:b8:b8:e0:98:9d:
56:4e:23:d2:99:ba:5e:e3:fd:58:98:1b:59:77:8c:
b8:ea:7a:aa:41:f5:ca:1e:86:0b:b6:68:56:cd:d3:
35:6e:d2:84:c5:2a:f7:6a:41:52:b3:56:0c:56:06:
02:a0:23:b3:2b:b6:93:c3:bd:1d:7e:0d:f9:28:b8:
08:0e:41:d5:50:20:7b:f2:50:00:d0:74:e7:9c:72:
e0:2d:bb:3a:f9:ac:53:fb:e6:0e:26:33:31:53:36:
e5:6d:d1:9b:06:1b:db:23:db:e7:f0:b8:ac:12:1f:
a1:96:f0:c0:8b:21:e5:b7:81:84:28:e5:84:ee:b3:
10:59:67:cb:11:0e:d6:97:4c:b8:8b:49:d4:ec:ca:
1a:92:33:5f:08:28:61:26:36:b9:00:52:22:8f:2f:
35:51:17:63:3e:6d:bc:07:88:ef:48:30:84:dc:bc:
79:cf:41:e3:7e:21:9a:ec:8e:1d:b0:8e:b7:e5:cc:
e3:c8:1e:2f:59:5f:8d:24:e5:fd:0d:60:03:93:e8:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:73:07:19:17:97:6F:D6:85:7B:02:7A:D2:12:09:3C:89:54:36
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c0:36:0d:ed:42:f4:7c:31:a4:00:73:a1:59:d8:a9:4b:dd:
38:00:8c:3b:df:55:38:60:8b:41:f7:ff:d0:1e:ca:8b:2a:f9:
5f:c0:81:4f:ca:ad:e6:ac:3a:fb:7e:5b:ba:2e:86:bb:3c:14:
ca:d0:35:84:fa:dd:81:11:10:39:a7:e8:7c:fb:e7:8b:d6:21:
82:20:5c:08:4c:16:bd:57:41:16:8c:a7:46:7c:41:d9:5f:61:
16:72:ce:62:84:d1:e4:47:1d:60:9f:33:e1:c6:e8:2a:c2:b8:
98:59:43:d5:79:a3:be:70:23:ae:fc:3a:69:fc:9d:de:3a:72:
92:45:db:64:a4:68:18:e4:5b:30:2f:16:90:3d:c1:fe:ae:02:
2e:e3:7e:6b:7e:12:21:5d:40:5f:e2:42:4f:21:16:cb:74:de:
a2:aa:52:eb:2c:5c:d3:a5:0f:6c:34:12:3c:30:ee:5d:8b:ab:
5c:18:67:ee:3c:4e:72:5a:bb:56:db:7a:f9:83:0d:ac:3c:0c:
7c:05:e5:e8:1c:f2:52:ae:82:4a:8a:cf:c2:f5:e3:e4:fe:eb:
89:60:81:a0:85:5d:d8:39:9b:72:8f:9c:8e:eb:da:b4:a2:01:
85:7f:f4:ea:7c:4c:ea:12:b3:7e:4d:df:10:44:f7:42:29:4c:
27:16:ee:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUUoySiR9BC5fpqt8/saHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzdmOTU2YTRjZTk0ZWIxZWM2NGU3NjQ3YjQzY2RiY2I4
ZmM0NDkwHhcNMjYwNDE3MTIwMTI4WhcNMjYwNDE4MTIwMTI4WjAzMTEwLwYDVQQD
Eyg4NTIyNzMwNzE5MTc5NzZmZDY4NTdiMDI3YWQyMTIwOTNjODk1NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhJdw1aKqvqhjMDTMYu5J5y3bWjP
LVNhniydQogeDUFbRUkIZWKcSAFs/8oJKxqpvoNVP533uLjgmJ1WTiPSmbpe4/1Y
mBtZd4y46nqqQfXKHoYLtmhWzdM1btKExSr3akFSs1YMVgYCoCOzK7aTw70dfg35
KLgIDkHVUCB78lAA0HTnnHLgLbs6+axT++YOJjMxUzblbdGbBhvbI9vn8LisEh+h
lvDAiyHlt4GEKOWE7rMQWWfLEQ7Wl0y4i0nU7MoakjNfCChhJja5AFIijy81URdj
Pm28B4jvSDCE3Lx5z0HjfiGa7I4dsI635czjyB4vWV+NJOX9DWADk+iamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUicwcZF5dv1oV7AnrSEgk8iVQ2MB8GA1UdIwQY
MBaAFM03+VakzpTrHsZOdke0PNvLj8RJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yOTQzYzEtMzZiNi00MzAzLWJjMjct
YmJlMTJiZDM4ZTA0LzEvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yOTQzYzEtMzZiNi00MzAzLWJjMjctYmJlMTJiZDM4ZTA0
LzEvelRmNVZxVE9sT3NleGs1MlI3UTgyOHVQeEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcA2De1C
9HwxpABzoVnYqUvdOACMO99VOGCLQff/0B7Kiyr5X8CBT8qt5qw6+35bui6GuzwU
ytA1hPrdgREQOafofPvni9YhgiBcCEwWvVdBFoynRnxB2V9hFnLOYoTR5EcdYJ8z
4cboKsK4mFlD1XmjvnAjrvw6afyd3jpykkXbZKRoGORbMC8WkD3B/q4CLuN+a34S
IV1AX+JCTyEWy3TeoqpS6yxc06UPbDQSPDDuXYurXBhn7jxOclq7Vtt6+YMNrDwM
fAXl6BzyUq6CSorPwvXj5P7riWCBoIVd2Dmbco+cjuvatKIBhX/06nxM6hKzfk3f
EET3QilMJxbu5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:26 2026 by rpki-client