Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: iu1t9ZzpTd/+/vpRm3hmFcFrsGYN+/XwUf+MXu2f5fM=
Subject key identifier: 46:4E:C8:C4:07:9D:68:FD:EA:55:5A:09:43:AD:3F:F1:8F:89:C3:E7
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 019D9AE349D22E26D28A4260E22E9738A015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:01:19 +0000
Manifest this update: Fri 17 Apr 2026 10:01:19 +0000
Manifest next update: Sat 18 Apr 2026 10:01:19 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: utv8EZAiPdti9L6ImBhGPrIPBRMCV+umXDFj6gcxP5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:49:d2:2e:26:d2:8a:42:60:e2:2e:97:38:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Apr 17 10:01:19 2026 GMT
Not After : Apr 18 10:01:19 2026 GMT
Subject: CN=464ec8c4079d68fdea555a0943ad3ff18f89c3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:66:fb:41:33:94:c1:e5:12:58:6d:9f:42:
62:4e:5e:bf:ef:51:48:85:53:51:89:84:d5:1b:c0:
2f:06:0e:4a:e3:d7:9f:ad:b6:cc:54:09:34:85:03:
3c:34:a8:e3:06:ce:fd:fe:77:47:06:04:53:ec:d0:
e5:5d:b8:6e:d6:b8:d7:a9:a3:76:28:ca:31:a1:7e:
9f:67:19:8b:a4:58:7f:fb:09:41:81:d8:bc:d7:06:
c7:b1:32:70:cc:df:3e:b3:9c:0e:ea:d7:75:1c:ed:
02:cc:0b:ed:70:c2:3b:f9:98:4d:dc:82:e0:e8:b3:
29:97:db:9b:42:14:72:bd:d0:ff:59:92:54:9d:51:
f2:ba:63:4b:c4:89:15:33:a2:ab:65:8f:02:25:6f:
1e:b1:f6:8b:6a:f0:a6:52:02:2f:bb:a2:1a:76:83:
00:36:6c:41:3e:57:a2:52:7c:f9:a6:b9:44:77:e5:
8c:f3:6c:73:d4:86:13:a2:b1:c7:13:8d:ad:e3:6e:
8f:f8:69:94:9b:91:04:43:21:f6:3c:d4:1f:8c:59:
da:1a:a6:0d:3f:02:ed:05:e4:b1:b7:a2:10:f0:bb:
a4:bf:38:45:c5:31:f9:47:bd:e1:b4:a4:d7:76:cb:
c8:a7:7e:1e:39:c0:48:0e:64:c0:77:8f:64:95:e5:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:C8:C4:07:9D:68:FD:EA:55:5A:09:43:AD:3F:F1:8F:89:C3:E7
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:9e:d2:7c:6b:0f:56:be:e0:2a:ce:9a:15:61:ce:e2:d2:
ba:6a:dd:23:8e:7b:d9:1e:4c:bb:52:e3:ac:af:b2:6d:54:17:
d2:a0:79:68:3b:2b:72:17:41:ca:eb:ac:64:e4:38:a2:76:1e:
62:8f:78:17:36:56:c5:87:5e:50:33:23:36:75:45:41:6e:15:
64:3e:b9:31:48:db:8d:e2:1d:2f:14:0c:32:8c:88:af:f1:43:
ea:88:44:d4:07:a9:bc:4c:cc:2d:7e:cd:80:61:9d:27:66:d4:
1a:2c:85:6b:8f:db:bb:6c:74:0e:88:17:79:94:c3:90:0e:c0:
9d:3b:b7:98:b8:67:dd:c1:ee:89:89:88:54:d6:54:55:22:8b:
bd:68:e3:e8:23:82:54:7d:b0:36:de:e6:ac:18:73:f8:a5:7c:
e2:24:19:ba:4e:45:34:72:16:10:51:74:06:22:a4:ed:0a:3b:
ac:86:e7:04:a3:6c:30:1a:1c:6b:19:67:ac:3c:b7:b6:5b:9e:
0e:55:28:f0:64:7f:37:ad:4f:b6:af:fd:e2:53:94:1f:e6:9a:
44:3d:4f:c9:4c:82:ea:54:ab:46:42:78:ae:63:e4:bd:42:69:
c8:b4:e8:f2:ab:86:83:82:13:28:63:60:5a:e6:04:88:af:66:
35:49:ec:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a40nSLibSikJg4i6XOKAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjNlMzY2MDZmYTUyYzNhNDcyMWM4Y2EwZmIzMzA5OTUz
NDE5NWEwHhcNMjYwNDE3MTAwMTE5WhcNMjYwNDE4MTAwMTE5WjAzMTEwLwYDVQQD
Eyg0NjRlYzhjNDA3OWQ2OGZkZWE1NTVhMDk0M2FkM2ZmMThmODljM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ylm+0EzlMHlElhtn0JiTl6/71FI
hVNRiYTVG8AvBg5K49efrbbMVAk0hQM8NKjjBs79/ndHBgRT7NDlXbhu1rjXqaN2
KMoxoX6fZxmLpFh/+wlBgdi81wbHsTJwzN8+s5wO6td1HO0CzAvtcMI7+ZhN3ILg
6LMpl9ubQhRyvdD/WZJUnVHyumNLxIkVM6KrZY8CJW8esfaLavCmUgIvu6IadoMA
NmxBPleiUnz5prlEd+WM82xz1IYTorHHE42t426P+GmUm5EEQyH2PNQfjFnaGqYN
PwLtBeSxt6IQ8LukvzhFxTH5R73htKTXdsvIp34eOcBIDmTAd49kleXENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZOyMQHnWj96lVaCUOtP/GPicPnMB8GA1UdIwQY
MBaAFGSz42YG+lLDpHIcjKD7MwmVNBlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUt
MGUzODFiZDQxM2QzLzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUtMGUzODFiZDQxM2Qz
LzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6+e0nxr
D1a+4CrOmhVhzuLSumrdI4572R5Mu1LjrK+ybVQX0qB5aDsrchdByuusZOQ4onYe
Yo94FzZWxYdeUDMjNnVFQW4VZD65MUjbjeIdLxQMMoyIr/FD6ohE1AepvEzMLX7N
gGGdJ2bUGiyFa4/bu2x0DogXeZTDkA7AnTu3mLhn3cHuiYmIVNZUVSKLvWjj6COC
VH2wNt7mrBhz+KV84iQZuk5FNHIWEFF0BiKk7Qo7rIbnBKNsMBocaxlnrDy3tlue
DlUo8GR/N61Ptq/94lOUH+aaRD1PyUyC6lSrRkJ4rmPkvUJpyLTo8quGg4ITKGNg
WuYEiK9mNUns/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:14:55 2026 by rpki-client