Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: XTL+vhxfDsnyy6Lw08O0ZUEYJF2Mc7pIrDkUxJdLpco=
Subject key identifier: 0C:72:63:8D:F7:72:0E:55:D3:29:81:9E:87:9C:7C:5F:11:EC:39:3F
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019DA48AA32E5BA7C23210CEE485CD2D5C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: F0
Signing time: Sun 19 Apr 2026 07:00:42 +0000
Manifest this update: Sun 19 Apr 2026 07:00:42 +0000
Manifest next update: Mon 20 Apr 2026 07:00:42 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: 3NZ238ZpgJQm9SPre2YxWKH0CQJZ4NX8Q9M9nm+OnWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:a3:2e:5b:a7:c2:32:10:ce:e4:85:cd:2d:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Apr 19 07:00:42 2026 GMT
Not After : Apr 20 07:00:42 2026 GMT
Subject: CN=0c72638df7720e55d329819e879c7c5f11ec393f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:20:1b:01:6b:57:36:70:8e:14:a9:c5:e9:
00:47:1a:b1:3c:93:f2:86:58:1e:3f:f7:15:17:d5:
47:cc:00:da:2b:83:83:13:49:e9:63:d8:42:44:5a:
44:a7:26:7a:d2:da:86:63:c1:b1:74:a6:07:c8:a1:
5e:05:8d:e3:93:31:0e:03:68:fc:4b:61:22:42:1b:
e8:7f:62:2b:1a:2e:8d:31:39:e0:3d:ca:fc:22:81:
3d:5c:f2:09:e8:df:64:c2:61:dd:2d:f1:9e:7f:8c:
fd:6c:64:6c:77:a7:31:a7:ec:49:38:e3:2b:b6:af:
92:dd:ca:87:76:18:f2:78:d7:ba:3a:82:4f:cf:86:
54:73:6a:f2:23:e8:9f:d2:07:bf:d1:d2:9a:ad:29:
fc:08:64:9b:e6:06:90:05:c2:73:db:38:dd:b5:a5:
0a:67:4b:a0:bc:7d:5d:e3:f3:4c:36:bc:7d:b4:fe:
99:2d:a6:ab:4c:4e:59:2a:75:96:7e:bc:82:d4:ee:
55:7e:80:33:1a:73:3b:ef:45:95:df:45:bb:b8:bf:
01:cc:29:eb:08:46:c9:53:ca:92:e2:82:fb:77:4e:
7e:4c:78:8f:1d:1c:06:45:a9:ef:68:ad:84:27:e5:
bc:bf:f1:da:0a:d5:ca:b3:87:72:78:59:44:1b:d3:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:63:8D:F7:72:0E:55:D3:29:81:9E:87:9C:7C:5F:11:EC:39:3F
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e1:12:60:1d:c2:ba:d3:e6:d7:75:cf:9f:10:be:13:db:66:
2c:70:27:11:62:db:f8:a6:16:1b:85:05:48:bf:02:49:b0:60:
89:c0:47:20:43:4d:72:66:1b:57:dd:d4:c5:70:91:e4:a6:be:
b9:ec:c3:ea:ab:db:fb:28:2d:15:49:cc:9c:6c:ce:cf:d3:15:
0a:e0:e5:ed:86:08:26:99:0b:83:c6:da:a4:22:09:e2:7d:d1:
36:ea:08:25:20:fd:df:8a:4f:51:64:5c:82:2b:d6:b2:c3:91:
f7:f1:69:54:73:32:ef:da:b0:24:c2:be:d1:3b:11:00:09:59:
81:06:83:2b:9e:0c:1a:4e:48:55:16:9a:0f:05:66:ca:09:77:
a1:cc:52:63:45:ee:34:55:3a:4d:08:15:e6:a5:8e:6e:b8:dc:
ec:3b:1e:d1:39:8d:ee:fe:fa:d5:95:91:2b:f4:3d:b9:66:ba:
e8:e3:ef:aa:14:22:29:61:93:fb:59:de:e5:a4:c2:c8:de:26:
c2:16:d0:70:bf:38:23:2c:64:9c:a7:9f:12:1e:87:29:00:27:
3b:33:be:0e:ac:f2:ba:ee:2f:7b:9c:b5:ca:a6:ec:8b:c9:06:
5c:78:0a:58:1e:2c:c4:41:9d:05:9d:36:9b:db:5c:88:bd:76:
b3:3f:da:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiqMuW6fCMhDO5IXNLVwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzA5ZWQ3MjIxZDRkNTJhZTIzNTEyYTBiZWE1MDBjNjc3
YTJlYTEwHhcNMjYwNDE5MDcwMDQyWhcNMjYwNDIwMDcwMDQyWjAzMTEwLwYDVQQD
EygwYzcyNjM4ZGY3NzIwZTU1ZDMyOTgxOWU4NzljN2M1ZjExZWMzOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmIgGwFrVzZwjhSpxekARxqxPJPy
hlgeP/cVF9VHzADaK4ODE0npY9hCRFpEpyZ60tqGY8GxdKYHyKFeBY3jkzEOA2j8
S2EiQhvof2IrGi6NMTngPcr8IoE9XPIJ6N9kwmHdLfGef4z9bGRsd6cxp+xJOOMr
tq+S3cqHdhjyeNe6OoJPz4ZUc2ryI+if0ge/0dKarSn8CGSb5gaQBcJz2zjdtaUK
Z0ugvH1d4/NMNrx9tP6ZLaarTE5ZKnWWfryC1O5VfoAzGnM770WV30W7uL8BzCnr
CEbJU8qS4oL7d05+THiPHRwGRanvaK2EJ+W8v/HaCtXKs4dyeFlEG9NiNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxyY433cg5V0ymBnoecfF8R7Dk/MB8GA1UdIwQY
MBaAFGUwntciHU1SriNRKgvqUAxnei6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQt
ZDFkNTEyMGNmNmVlLzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQtZDFkNTEyMGNmNmVl
LzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeESYB3C
utPm13XPnxC+E9tmLHAnEWLb+KYWG4UFSL8CSbBgicBHIENNcmYbV93UxXCR5Ka+
uezD6qvb+ygtFUnMnGzOz9MVCuDl7YYIJpkLg8bapCIJ4n3RNuoIJSD934pPUWRc
givWssOR9/FpVHMy79qwJMK+0TsRAAlZgQaDK54MGk5IVRaaDwVmygl3ocxSY0Xu
NFU6TQgV5qWObrjc7Dse0TmN7v761ZWRK/Q9uWa66OPvqhQiKWGT+1ne5aTCyN4m
whbQcL84IyxknKefEh6HKQAnOzO+Dqzyuu4ve5y1yqbsi8kGXHgKWB4sxEGdBZ02
m9tciL12sz/ang==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:09:14 2026 by rpki-client