Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: 3UJeVgjYVe8rMWplidU4GJZbQICtRWzALe2uF+d1BgY=
Subject key identifier: 85:35:38:9A:AC:06:A4:12:1A:3F:56:07:DA:37:43:0E:B4:54:5E:A6
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 019D9AE2C8589341D5F63800565BD17DD6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:00:46 +0000
Manifest this update: Fri 17 Apr 2026 10:00:46 +0000
Manifest next update: Sat 18 Apr 2026 10:00:46 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: Wrl6DBzoHmvmIO2adZW9UhraVNSZHYH5CoLNQWsf2q4=)
2: evI5OEg6waUB24zj44AWaj3RZOA.roa (hash: Y1fnav5sUcdKyDCdtyfukclX/9hK+jv3+W4ALIcJR4g=)
3: yFQMrmkIeVte8wYzH-IkC5x7aUc.roa (hash: pXQ4i9KXqTJ+j0TOAAMeJveDI3UPmqEwzHnm1ISng7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:c8:58:93:41:d5:f6:38:00:56:5b:d1:7d:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Apr 17 10:00:46 2026 GMT
Not After : Apr 18 10:00:46 2026 GMT
Subject: CN=8535389aac06a4121a3f5607da37430eb4545ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:33:5e:98:d4:36:3f:59:38:42:3a:f1:b8:
2f:e2:49:4c:5e:5e:48:39:18:c7:3b:2c:81:a6:7d:
0c:16:3c:df:55:aa:b0:35:39:09:75:bd:dd:ce:da:
29:05:02:b2:bf:54:dc:c8:94:41:df:63:00:f3:c1:
64:ed:a3:24:ee:2d:a4:af:2c:64:14:76:ce:60:26:
9f:33:53:50:04:c3:d4:4c:a0:c7:5f:b0:42:91:ea:
a8:e7:d7:5d:05:e5:cd:fd:51:92:59:72:f0:61:f8:
20:cf:28:90:44:54:bf:72:ee:ba:9a:f2:cf:9a:65:
fa:25:85:73:b0:fe:f4:de:f1:02:db:14:ad:44:56:
b6:94:3d:4f:d5:a3:08:70:94:9b:d8:91:44:07:d5:
af:5a:f1:45:32:51:8f:48:45:a2:07:72:5a:b1:e1:
7c:67:c9:59:2a:c3:cf:9b:e7:0e:ff:49:a0:d0:d7:
8b:3b:61:bb:05:52:a3:72:b3:4f:3a:76:a4:71:0b:
21:91:39:e2:6e:bd:e8:a5:6f:c9:80:ad:7a:3a:a2:
10:81:d2:e9:14:16:44:29:4a:a6:32:6d:7b:21:21:
02:5f:d6:12:48:78:54:49:87:6e:73:a6:61:19:0a:
18:84:1d:4f:ea:48:3c:ef:94:fc:d1:7e:24:1f:69:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:38:9A:AC:06:A4:12:1A:3F:56:07:DA:37:43:0E:B4:54:5E:A6
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:a9:27:b2:4e:af:f2:62:65:78:d3:d4:c3:1e:d8:00:de:
71:4f:e1:1c:b8:1f:5a:c4:24:94:2d:b9:b8:81:14:f9:f1:62:
a5:86:05:18:e0:31:f0:55:44:73:3e:07:b7:07:55:bd:9c:39:
57:a5:05:7c:af:d0:f4:37:b8:2e:df:bc:56:14:f2:0c:eb:3d:
64:75:8c:2b:04:d1:6c:0f:a7:65:94:6f:72:7c:ec:9b:42:4d:
e0:7c:ce:c4:44:be:25:8e:55:60:60:8e:6d:c2:82:16:5f:39:
7f:22:4e:eb:46:89:52:b1:a8:dd:97:83:37:1f:f8:65:46:06:
0c:e6:bf:f5:c0:e4:78:3d:d6:2f:5b:62:4c:aa:b4:74:53:c2:
c3:cc:ac:01:c7:b6:76:98:c7:e9:1e:87:15:a1:9d:96:c2:46:
30:d1:32:8f:59:f3:00:54:b0:ab:7c:57:e6:40:11:c9:6b:98:
46:56:ff:70:e2:78:d8:53:54:38:9f:71:0d:d2:61:e5:0b:1f:
eb:6b:04:fb:4c:2b:3d:b6:e6:16:bf:cd:77:8f:9c:56:0c:fe:
28:15:a9:a3:69:4a:41:87:9f:0f:3d:90:a5:e7:21:6d:77:0a:
0d:e8:58:1d:18:e2:3e:b6:11:ad:9e:00:1b:26:76:e0:25:09:
83:ac:e9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4shYk0HV9jgAVlvRfdbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjYyZGJhZWNkMzU5YTRhMmE4OTEyY2YyZTY2OTNiMmY0
OGM5ZWYwHhcNMjYwNDE3MTAwMDQ2WhcNMjYwNDE4MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg4NTM1Mzg5YWFjMDZhNDEyMWEzZjU2MDdkYTM3NDMwZWI0NTQ1ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4zXpjUNj9ZOEI68bgv4klMXl5I
ORjHOyyBpn0MFjzfVaqwNTkJdb3dztopBQKyv1TcyJRB32MA88Fk7aMk7i2kryxk
FHbOYCafM1NQBMPUTKDHX7BCkeqo59ddBeXN/VGSWXLwYfggzyiQRFS/cu66mvLP
mmX6JYVzsP703vEC2xStRFa2lD1P1aMIcJSb2JFEB9WvWvFFMlGPSEWiB3JaseF8
Z8lZKsPPm+cO/0mg0NeLO2G7BVKjcrNPOnakcQshkTnibr3opW/JgK16OqIQgdLp
FBZEKUqmMm17ISECX9YSSHhUSYduc6ZhGQoYhB1P6kg875T80X4kH2mjiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU1OJqsBqQSGj9WB9o3Qw60VF6mMB8GA1UdIwQY
MBaAFGe2Lbrs01mkoqiRLPLmaTsvSMnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTIt
MjgxZWVlMzFiNzQ3LzEvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MGI5ZDYtYTZhZC00NGE2LTkxYTItMjgxZWVlMzFiNzQ3
LzEvWjdZdHV1elRXYVNpcUpFczh1WnBPeTlJeWU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv2pJ7JO
r/JiZXjT1MMe2ADecU/hHLgfWsQklC25uIEU+fFipYYFGOAx8FVEcz4HtwdVvZw5
V6UFfK/Q9De4Lt+8VhTyDOs9ZHWMKwTRbA+nZZRvcnzsm0JN4HzOxES+JY5VYGCO
bcKCFl85fyJO60aJUrGo3ZeDNx/4ZUYGDOa/9cDkeD3WL1tiTKq0dFPCw8ysAce2
dpjH6R6HFaGdlsJGMNEyj1nzAFSwq3xX5kARyWuYRlb/cOJ42FNUOJ9xDdJh5Qsf
62sE+0wrPbbmFr/Nd4+cVgz+KBWpo2lKQYefDz2QpechbXcKDehYHRjiPrYRrZ4A
GyZ24CUJg6zp+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:57 2026 by rpki-client