Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: /NVUFnXiw4HcIaGusUXsSNM48fJKlKHbp+e7HL+AKfA=
Subject key identifier: 42:99:40:45:AF:A8:1D:05:7B:2D:24:E3:3E:5D:C6:D6:4E:41:D1:B9
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 019D9C63674226402E2AE389B7E4AC0120C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 17:00:53 +0000
Manifest this update: Fri 17 Apr 2026 17:00:53 +0000
Manifest next update: Sat 18 Apr 2026 17:00:53 +0000
Files and hashes: 1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=)
2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: 7AgLBiX7MVjV5JXrY0e0atT5TpbXOGbfTJEae1xAwwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:67:42:26:40:2e:2a:e3:89:b7:e4:ac:01:20:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Apr 17 17:00:53 2026 GMT
Not After : Apr 18 17:00:53 2026 GMT
Subject: CN=42994045afa81d057b2d24e33e5dc6d64e41d1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:20:78:e7:73:46:32:f1:15:08:b6:5a:4e:
0e:6a:99:a1:73:08:ca:45:d3:41:c3:09:87:e5:75:
07:99:42:47:ca:f4:89:79:a7:44:16:75:e3:4a:87:
bb:b8:fb:56:f3:bd:80:91:52:b9:18:de:cf:36:f3:
cd:42:12:1d:14:b2:09:1b:70:95:a0:a4:e7:1c:4b:
cb:25:f5:ce:d0:72:27:ec:cc:d5:17:3f:4e:6e:fd:
f9:8e:b6:b6:6f:fd:cf:20:c2:ee:80:30:7e:d5:57:
f9:64:fb:fd:23:de:1a:63:20:b6:48:65:a3:ae:69:
b6:70:4b:c0:c5:b9:03:dd:8b:60:1d:be:94:fa:75:
15:b7:b8:16:ad:5c:2d:d9:f7:83:11:04:d8:1a:51:
68:e7:49:57:13:e3:5b:58:eb:a6:4f:3c:46:37:b4:
c5:12:87:89:89:c1:d4:f6:dc:18:4b:f7:d6:b5:5d:
48:c9:9b:8f:7d:75:0b:d8:58:03:26:d7:71:f9:a0:
1c:e1:53:ce:9a:ed:12:12:12:37:eb:17:37:77:e9:
c3:fa:e7:57:c1:80:4c:ef:03:e2:01:00:d8:9f:4b:
bd:77:ec:0f:8c:0c:a0:66:d2:cf:a6:16:22:44:ed:
b0:8d:f9:13:5d:b4:c6:36:e1:75:88:50:07:a4:d1:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:99:40:45:AF:A8:1D:05:7B:2D:24:E3:3E:5D:C6:D6:4E:41:D1:B9
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0d:86:cf:34:e4:55:e7:20:0c:35:e1:fe:6d:44:25:a6:d1:
6e:16:f0:e3:08:e4:73:7c:68:84:7e:a0:0f:b3:47:55:d9:af:
a2:30:49:ec:ef:d8:49:e8:20:70:2e:1f:36:d4:9a:8c:98:1c:
56:ad:a4:79:6f:6a:8e:ce:54:34:aa:84:2d:55:e3:df:1a:cc:
42:5f:45:a1:de:61:fd:56:db:da:03:03:94:f7:fc:7b:84:99:
df:c4:84:af:87:1a:d9:a5:52:0e:0e:41:e4:a8:62:f8:72:85:
7d:73:6e:ea:c0:25:11:de:d7:3e:39:21:c1:60:c4:de:d6:18:
b0:43:d3:9b:7e:bb:0a:02:41:47:bb:6a:a1:53:83:9f:8d:b0:
0d:5f:37:57:d8:31:89:e5:a1:0c:4d:9a:02:68:e2:2f:1a:24:
5b:db:a4:e6:1a:ab:83:18:9a:07:16:1c:48:90:e0:1c:90:77:
16:39:b6:52:27:2e:0b:82:8f:5a:bf:f9:f4:e0:a8:98:96:3f:
29:1d:f3:df:02:b7:46:43:b0:f7:80:dd:40:38:58:00:26:48:
84:a5:ed:44:88:f7:5c:01:c1:1d:06:ce:48:9d:69:14:ca:e7:
ba:d7:7b:4f:d7:d2:a6:1c:a7:6a:f4:e3:f7:59:c3:b3:57:f0:
3f:16:cf:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY2dCJkAuKuOJt+SsASDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGRhOTJmOTliNTQwN2YyOGEyZjM2NjEzZTg0OTQ0N2E5
M2Y2YjkwHhcNMjYwNDE3MTcwMDUzWhcNMjYwNDE4MTcwMDUzWjAzMTEwLwYDVQQD
Eyg0Mjk5NDA0NWFmYTgxZDA1N2IyZDI0ZTMzZTVkYzZkNjRlNDFkMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWkgeOdzRjLxFQi2Wk4OapmhcwjK
RdNBwwmH5XUHmUJHyvSJeadEFnXjSoe7uPtW872AkVK5GN7PNvPNQhIdFLIJG3CV
oKTnHEvLJfXO0HIn7MzVFz9Obv35jra2b/3PIMLugDB+1Vf5ZPv9I94aYyC2SGWj
rmm2cEvAxbkD3YtgHb6U+nUVt7gWrVwt2feDEQTYGlFo50lXE+NbWOumTzxGN7TF
EoeJicHU9twYS/fWtV1IyZuPfXUL2FgDJtdx+aAc4VPOmu0SEhI36xc3d+nD+udX
wYBM7wPiAQDYn0u9d+wPjAygZtLPphYiRO2wjfkTXbTGNuF1iFAHpNFaCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKZQEWvqB0Fey0k4z5dxtZOQdG5MB8GA1UdIwQY
MBaAFGaNqS+ZtUB/KKLzZhPoSUR6k/a5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEt
ZGM4ZTgzZTYyOWYyLzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEtZGM4ZTgzZTYyOWYy
LzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw2GzzTk
VecgDDXh/m1EJabRbhbw4wjkc3xohH6gD7NHVdmvojBJ7O/YSeggcC4fNtSajJgc
Vq2keW9qjs5UNKqELVXj3xrMQl9Fod5h/Vbb2gMDlPf8e4SZ38SEr4ca2aVSDg5B
5Khi+HKFfXNu6sAlEd7XPjkhwWDE3tYYsEPTm367CgJBR7tqoVODn42wDV83V9gx
ieWhDE2aAmjiLxokW9uk5hqrgxiaBxYcSJDgHJB3Fjm2UicuC4KPWr/59OComJY/
KR3z3wK3RkOw94DdQDhYACZIhKXtRIj3XAHBHQbOSJ1pFMrnutd7T9fSphynavTj
91nDs1fwPxbPlw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:26 2026 by rpki-client