Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: Y5/t98pagQkvZRAUV6bRY8gEopJTto2tJ5GRYsHI0fQ=
Subject key identifier: 7D:13:A5:A3:D3:12:6E:9A:DC:2A:C4:26:F5:E0:F3:61:8D:A4:6E:9C
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019DA52FD6AE6ADE9B845D4812E08F33E618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 144B
Signing time: Sun 19 Apr 2026 10:01:08 +0000
Manifest this update: Sun 19 Apr 2026 10:01:08 +0000
Manifest next update: Mon 20 Apr 2026 10:01:08 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: iuamk4DFR1L9Pmic5jCQdaeED/DygfFzixyxYJlhRBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:d6:ae:6a:de:9b:84:5d:48:12:e0:8f:33:e6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Apr 19 10:01:08 2026 GMT
Not After : Apr 20 10:01:08 2026 GMT
Subject: CN=7d13a5a3d3126e9adc2ac426f5e0f3618da46e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:10:f2:e7:c2:c0:ec:33:e7:ea:fa:f2:aa:
85:ba:37:43:5f:d4:ef:f9:a1:96:9f:1a:ef:72:a0:
36:5e:83:32:a8:c4:1f:2b:30:99:0a:d0:72:88:2a:
5d:be:2f:a6:7f:36:de:8a:16:64:16:d6:d8:15:7d:
ce:f1:36:0b:f4:3c:6c:1e:42:9c:cc:6a:8c:a4:92:
41:4c:42:f8:40:8b:89:2e:60:50:5c:3f:ac:9c:2f:
f4:93:30:99:a5:fc:ec:83:7f:1f:2d:93:3c:f7:ac:
f5:76:8f:99:9d:d5:4a:97:a7:27:ce:14:e5:36:ae:
d5:29:13:41:c8:32:6b:1d:91:2a:37:b1:0a:53:be:
6e:d7:2f:37:9a:97:9c:34:70:c9:8b:43:f0:ca:e5:
00:f4:72:ff:90:5b:ab:b3:0a:5c:12:fd:ea:5f:cf:
c2:fe:29:c1:ab:96:1a:71:de:d6:13:db:7c:c0:ac:
70:5c:19:14:90:d2:65:46:76:10:77:98:3d:40:c5:
8c:89:9c:05:be:d3:8a:2a:39:22:a9:35:c8:1a:78:
bc:a7:8b:45:eb:a1:d6:db:e0:13:09:1f:e7:74:36:
15:ae:d6:8c:dc:a1:b9:db:84:43:59:57:fe:df:b7:
d2:76:ba:8c:e6:01:bc:d3:c5:52:5a:12:1a:2e:cf:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:13:A5:A3:D3:12:6E:9A:DC:2A:C4:26:F5:E0:F3:61:8D:A4:6E:9C
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bb:2c:85:55:eb:38:a5:0d:bf:4e:b7:a7:62:2e:54:aa:47:
88:fc:b4:91:24:c5:e6:ce:83:39:87:44:29:e4:30:04:5e:e2:
4b:80:41:4d:3d:3b:16:12:a8:09:0a:45:75:0d:8c:1b:3a:ce:
a0:17:2f:18:aa:46:dc:24:10:61:c4:01:e4:30:b4:32:1e:94:
4d:41:4c:37:4c:67:70:9e:b1:7a:eb:0d:a6:90:25:22:c8:c6:
5a:4b:96:10:cf:c4:db:e8:11:e9:01:e5:c5:c2:97:fe:67:71:
71:e1:00:b8:43:8c:e9:e3:30:51:50:27:04:35:a5:bf:69:7b:
3e:f9:66:b2:68:51:56:0c:10:6d:fa:62:cb:2b:24:de:73:70:
c1:aa:7b:ab:9c:36:d2:e6:f7:90:ce:8c:c3:9d:3b:ca:f7:d1:
34:13:0d:d5:44:30:b1:ac:fc:98:14:98:c5:8d:b1:a0:bd:98:
c9:ef:d0:e7:18:89:c8:b5:96:8b:f0:99:19:53:cc:42:90:c7:
7c:32:a4:e8:94:5e:64:9f:12:35:2c:89:fa:bd:e3:1f:5f:17:
54:c4:1b:e4:fe:5b:0d:c8:50:1f:15:8e:99:d8:34:4b:2c:a3:
08:d8:08:1f:70:43:30:57:a2:1c:2a:89:f0:6b:42:b0:49:71:
aa:e9:28:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL9auat6bhF1IEuCPM+YYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjY2NTIyZjQwM2Q4Yzk5NGE0ODQ2ODI4NzA3OTk0MTdj
ZTFlODEwHhcNMjYwNDE5MTAwMTA4WhcNMjYwNDIwMTAwMTA4WjAzMTEwLwYDVQQD
Eyg3ZDEzYTVhM2QzMTI2ZTlhZGMyYWM0MjZmNWUwZjM2MThkYTQ2ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F4Q8ufCwOwz5+r68qqFujdDX9Tv
+aGWnxrvcqA2XoMyqMQfKzCZCtByiCpdvi+mfzbeihZkFtbYFX3O8TYL9DxsHkKc
zGqMpJJBTEL4QIuJLmBQXD+snC/0kzCZpfzsg38fLZM896z1do+ZndVKl6cnzhTl
Nq7VKRNByDJrHZEqN7EKU75u1y83mpecNHDJi0PwyuUA9HL/kFurswpcEv3qX8/C
/inBq5Yacd7WE9t8wKxwXBkUkNJlRnYQd5g9QMWMiZwFvtOKKjkiqTXIGni8p4tF
66HW2+ATCR/ndDYVrtaM3KG524RDWVf+37fSdrqM5gG808VSWhIaLs/YmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0TpaPTEm6a3CrEJvXg82GNpG6cMB8GA1UdIwQY
MBaAFKf2ZSL0A9jJlKSEaChweZQXzh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMt
YzVkMzYwZmNkZjBlLzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMtYzVkMzYwZmNkZjBl
LzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLsshVXr
OKUNv063p2IuVKpHiPy0kSTF5s6DOYdEKeQwBF7iS4BBTT07FhKoCQpFdQ2MGzrO
oBcvGKpG3CQQYcQB5DC0Mh6UTUFMN0xncJ6xeusNppAlIsjGWkuWEM/E2+gR6QHl
xcKX/mdxceEAuEOM6eMwUVAnBDWlv2l7PvlmsmhRVgwQbfpiyysk3nNwwap7q5w2
0ub3kM6Mw507yvfRNBMN1UQwsaz8mBSYxY2xoL2Yye/Q5xiJyLWWi/CZGVPMQpDH
fDKk6JReZJ8SNSyJ+r3jH18XVMQb5P5bDchQHxWOmdg0SyyjCNgIH3BDMFeiHCqJ
8GtCsElxquko1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:03 2026 by rpki-client