Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: Zd8FTVCRXHcctNErLKTCQoTGLu8GxsyaMX5Q2d1S/50=
Subject key identifier: 40:70:1A:C3:81:C8:F9:35:16:81:D4:09:9A:67:07:3D:20:7A:EF:E1
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019D98501EEBC3F6547DBDC0811E39EDE570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 092A
Signing time: Thu 16 Apr 2026 22:01:20 +0000
Manifest this update: Thu 16 Apr 2026 22:01:20 +0000
Manifest next update: Fri 17 Apr 2026 22:01:20 +0000
Files and hashes: 1: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: zhVg5USJ77emdkvI831iY66dPGztSd2JOPifynDdhQc=)
2: kBiWJKONqx_8EJPfrqy-KE44x6Q.roa (hash: SVLH+Gw9sGMbTjjOdTtaqUxTQmICEWWbtA+6NK4dItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:1e:eb:c3:f6:54:7d:bd:c0:81:1e:39:ed:e5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Apr 16 22:01:20 2026 GMT
Not After : Apr 17 22:01:20 2026 GMT
Subject: CN=40701ac381c8f9351681d4099a67073d207aefe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:bf:a6:07:4f:61:62:01:a9:55:86:8d:65:
f8:cf:ef:c2:2d:e8:cb:4a:7a:16:90:0c:86:b8:c9:
76:25:00:46:ec:36:3c:68:6a:9e:14:24:b1:18:0b:
25:5c:ab:81:f8:d8:3f:d4:ca:77:b8:e4:82:a8:15:
3f:4d:0b:ae:34:ad:07:23:ff:d5:54:9e:2d:17:03:
82:63:ee:74:21:ae:07:50:f4:bf:05:73:a8:9f:6d:
83:cc:7a:cb:f1:1f:b5:7f:7e:b2:5b:0a:23:16:56:
5e:6b:65:c5:a3:12:95:f9:ee:07:a2:60:e4:90:cc:
2f:a0:1f:4f:87:3f:6f:f7:aa:fc:69:c6:7d:d7:aa:
ce:da:05:f4:29:f3:9c:f9:be:92:bb:17:58:11:37:
da:2e:44:fb:11:fb:f3:27:fc:59:88:c1:ea:0e:c2:
bd:f4:57:00:40:49:42:54:08:5f:03:b4:91:2f:12:
ae:cf:92:61:bb:ee:cc:e6:bc:6f:6e:41:90:be:d5:
ac:8e:8a:da:ae:e5:b7:78:50:97:e3:9d:e8:67:45:
80:66:8d:a5:30:26:30:3a:d9:74:52:8a:06:07:14:
86:72:e8:29:f3:0b:0b:69:77:a7:cf:1d:9f:5e:ce:
e9:af:84:4c:92:2c:fb:52:be:86:45:63:40:29:37:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:1A:C3:81:C8:F9:35:16:81:D4:09:9A:67:07:3D:20:7A:EF:E1
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f1:bc:04:d4:e0:8a:8f:9c:11:9c:cc:f2:9c:16:3a:59:0c:
1c:5e:60:0a:e2:86:7a:15:ef:a4:9d:b3:95:69:bd:2f:45:39:
67:39:72:00:60:49:dd:29:b7:b8:4d:15:c7:1c:74:16:cf:86:
0f:00:59:a0:f1:e9:0b:e5:fc:04:be:47:c5:f7:27:c8:e6:1a:
b6:89:36:08:06:37:2c:30:51:5e:ed:50:c4:4f:7b:d3:28:4e:
21:75:7e:e1:3d:ce:5d:64:5b:1d:94:26:58:f6:b7:81:be:23:
00:2e:a0:91:19:83:af:bb:32:d7:6d:97:71:f8:dd:7f:7c:ed:
f3:90:a5:61:96:43:35:19:4b:df:1d:41:2b:b6:68:50:39:01:
1f:11:cc:fc:9a:ce:bb:5a:0d:5a:0b:50:31:96:01:f7:92:2b:
5a:5b:f9:11:b7:0a:e4:a3:12:88:5e:f4:a0:8a:d4:99:c1:0b:
5e:39:9c:7a:d5:58:a8:6f:d3:5d:c8:45:13:e0:7e:04:00:cb:
08:07:c5:4d:f1:d6:ec:ca:bd:8c:37:ab:51:80:35:b3:2b:b0:
85:50:9f:5b:e7:86:6f:85:b7:3f:fe:5d:07:99:38:54:12:6d:
17:c8:54:cf:ce:a0:39:91:f1:50:f9:b8:fb:05:15:61:fa:87:
6d:c2:58:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUB7rw/ZUfb3AgR457eVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjYwNDE2MjIwMTIwWhcNMjYwNDE3MjIwMTIwWjAzMTEwLwYDVQQD
Eyg0MDcwMWFjMzgxYzhmOTM1MTY4MWQ0MDk5YTY3MDczZDIwN2FlZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwu/pgdPYWIBqVWGjWX4z+/CLejL
SnoWkAyGuMl2JQBG7DY8aGqeFCSxGAslXKuB+Ng/1Mp3uOSCqBU/TQuuNK0HI//V
VJ4tFwOCY+50Ia4HUPS/BXOon22DzHrL8R+1f36yWwojFlZea2XFoxKV+e4HomDk
kMwvoB9Phz9v96r8acZ916rO2gX0KfOc+b6SuxdYETfaLkT7EfvzJ/xZiMHqDsK9
9FcAQElCVAhfA7SRLxKuz5Jhu+7M5rxvbkGQvtWsjoraruW3eFCX453oZ0WAZo2l
MCYwOtl0UooGBxSGcugp8wsLaXenzx2fXs7pr4RMkiz7Ur6GRWNAKTe5KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBwGsOByPk1FoHUCZpnBz0geu/hMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvG8BNTg
io+cEZzM8pwWOlkMHF5gCuKGehXvpJ2zlWm9L0U5ZzlyAGBJ3Sm3uE0Vxxx0Fs+G
DwBZoPHpC+X8BL5HxfcnyOYatok2CAY3LDBRXu1QxE970yhOIXV+4T3OXWRbHZQm
WPa3gb4jAC6gkRmDr7sy122Xcfjdf3zt85ClYZZDNRlL3x1BK7ZoUDkBHxHM/JrO
u1oNWgtQMZYB95IrWlv5EbcK5KMSiF70oIrUmcELXjmcetVYqG/TXchFE+B+BADL
CAfFTfHW7Mq9jDerUYA1syuwhVCfW+eGb4W3P/5dB5k4VBJtF8hUz86gOZHxUPm4
+wUVYfqHbcJYuA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:09 2026 by rpki-client