
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
File: zBlkheZzlI1VUF23UQ87lXfNOts.mft (raw, json)
Hash identifier: ynoNxMjjpvkHRevIokD9HGdTaH59atW6PaMhAKZ1B+Q=
Subject key identifier: E1:B8:2F:58:5D:87:4A:54:93:83:74:58:D1:F2:81:BE:12:A7:E6:EA
Authority key identifier: CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
Certificate issuer: /CN=cc196485e673948d55505db7510f3b9577cd3adb
Certificate serial: 019DA48ABD51300891E13520E814C1B8F030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
Manifest number: 44
Signing time: Sun 19 Apr 2026 07:00:48 +0000
Manifest this update: Sun 19 Apr 2026 07:00:48 +0000
Manifest next update: Mon 20 Apr 2026 07:00:48 +0000
Files and hashes: 1: X2BbHndtPwpXSs2sGEdVgFLq9BU.roa (hash: emzj289yDYGpibBHeVzv0i5u6U+HSsPi/OSfpVmeMAM=)
2: zBlkheZzlI1VUF23UQ87lXfNOts.crl (hash: kqI7ThtoTIOWu1Li/XPP36Vm8aA0JNdj5rZmwrJzulw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:bd:51:30:08:91:e1:35:20:e8:14:c1:b8:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc196485e673948d55505db7510f3b9577cd3adb
Validity
Not Before: Apr 19 07:00:48 2026 GMT
Not After : Apr 20 07:00:48 2026 GMT
Subject: CN=e1b82f585d874a5493837458d1f281be12a7e6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:08:29:e2:52:a7:79:34:59:11:89:89:ec:
2f:6e:7c:a0:72:e2:8f:94:6f:36:58:3b:83:cc:02:
65:87:20:b3:ef:8a:67:44:06:85:a1:0a:86:56:63:
ed:c4:6f:7a:79:e3:0c:4e:2c:5b:68:da:bc:a4:14:
04:d8:c6:0f:df:ee:22:52:25:de:8f:de:ba:38:2d:
45:68:c7:49:8d:94:d1:18:2b:5b:0a:2f:c3:c5:55:
50:c2:a3:b0:14:cb:70:22:13:11:39:31:ab:e7:1f:
ea:58:e0:97:4e:bc:d2:4e:cd:09:10:2f:b8:67:27:
22:af:05:41:6a:44:51:84:b7:c7:f4:6a:09:b6:5a:
8b:c4:19:84:6c:48:c1:4a:68:b9:21:34:cb:be:1f:
9a:65:a9:17:71:7c:ee:60:b2:72:db:19:19:f3:5c:
38:e4:97:4b:b6:a3:dd:3f:af:83:95:12:87:56:49:
88:fd:25:2e:13:7a:4a:87:8d:8c:a3:ff:1c:54:c3:
7f:89:f4:c8:00:1f:90:ac:60:8d:11:88:92:4b:c9:
40:22:f0:a7:4f:86:d0:0e:cd:dc:70:85:95:5e:36:
71:1e:13:0e:27:5c:b8:7d:30:e6:45:b5:fc:50:d9:
b0:a7:44:8f:d8:0b:4e:62:07:a0:5e:46:14:30:de:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:2F:58:5D:87:4A:54:93:83:74:58:D1:F2:81:BE:12:A7:E6:EA
X509v3 Authority Key Identifier:
keyid:CC:19:64:85:E6:73:94:8D:55:50:5D:B7:51:0F:3B:95:77:CD:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBlkheZzlI1VUF23UQ87lXfNOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1cfceb-b409-4e89-bcb0-2fe14dd38d5d/1/zBlkheZzlI1VUF23UQ87lXfNOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:20:a3:8f:fb:63:e6:61:2a:85:ff:d0:b5:df:4e:9a:73:2f:
44:02:4c:8e:a0:5a:bd:d8:3f:6b:92:2f:24:9f:de:7d:8c:9f:
0b:28:93:d9:8e:a3:e3:1d:5d:dd:de:b5:6c:3d:82:17:bc:d5:
5d:1c:34:ef:b1:68:05:53:be:a1:66:75:49:94:40:cc:f6:eb:
24:3c:e6:85:a8:1b:5a:b8:aa:bf:e3:33:f2:bc:da:9e:8c:06:
c6:da:85:6c:b1:cd:29:0d:12:15:1a:6f:58:79:e3:a4:19:b2:
ae:51:c9:d8:dd:26:05:64:11:24:ce:b1:39:4e:37:75:17:7e:
0a:60:e3:94:17:e4:8a:4e:2e:01:a1:e3:a8:6a:b8:7f:0d:6f:
12:d8:1b:f2:9a:f7:21:28:5d:29:5f:94:9a:e8:c8:88:8a:80:
32:1d:db:79:50:f7:93:3d:07:c2:c7:70:16:84:b4:c2:96:b5:
d1:bc:35:07:ed:79:7d:5f:59:0c:b1:88:e7:71:38:08:64:d9:
d3:8d:b9:4e:11:25:19:49:cc:69:5f:ea:8f:54:7b:6f:46:be:
80:2c:cd:6c:38:b5:57:df:6b:77:47:05:78:2c:7c:f4:6f:d5:
25:7d:5e:39:7f:f8:55:0b:29:6a:ab:f0:63:1c:9c:1c:15:bc:
24:6e:d6:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kir1RMAiR4TUg6BTBuPAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTk2NDg1ZTY3Mzk0OGQ1NTUwNWRiNzUxMGYzYjk1Nzdj
ZDNhZGIwHhcNMjYwNDE5MDcwMDQ4WhcNMjYwNDIwMDcwMDQ4WjAzMTEwLwYDVQQD
EyhlMWI4MmY1ODVkODc0YTU0OTM4Mzc0NThkMWYyODFiZTEyYTdlNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmoIKeJSp3k0WRGJiewvbnygcuKP
lG82WDuDzAJlhyCz74pnRAaFoQqGVmPtxG96eeMMTixbaNq8pBQE2MYP3+4iUiXe
j966OC1FaMdJjZTRGCtbCi/DxVVQwqOwFMtwIhMROTGr5x/qWOCXTrzSTs0JEC+4
ZycirwVBakRRhLfH9GoJtlqLxBmEbEjBSmi5ITTLvh+aZakXcXzuYLJy2xkZ81w4
5JdLtqPdP6+DlRKHVkmI/SUuE3pKh42Mo/8cVMN/ifTIAB+QrGCNEYiSS8lAIvCn
T4bQDs3ccIWVXjZxHhMOJ1y4fTDmRbX8UNmwp0SP2AtOYgegXkYUMN43/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG4L1hdh0pUk4N0WNHygb4Sp+bqMB8GA1UdIwQY
MBaAFMwZZIXmc5SNVVBdt1EPO5V3zTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xY2ZjZWItYjQwOS00ZTg5LWJjYjAt
MmZlMTRkZDM4ZDVkLzEvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xY2ZjZWItYjQwOS00ZTg5LWJjYjAtMmZlMTRkZDM4ZDVk
LzEvekJsa2hlWnpsSTFWVUYyM1VRODdsWGZOT3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiCjj/tj
5mEqhf/Qtd9OmnMvRAJMjqBavdg/a5IvJJ/efYyfCyiT2Y6j4x1d3d61bD2CF7zV
XRw077FoBVO+oWZ1SZRAzPbrJDzmhagbWriqv+Mz8rzanowGxtqFbLHNKQ0SFRpv
WHnjpBmyrlHJ2N0mBWQRJM6xOU43dRd+CmDjlBfkik4uAaHjqGq4fw1vEtgb8pr3
IShdKV+UmujIiIqAMh3beVD3kz0HwsdwFoS0wpa10bw1B+15fV9ZDLGI53E4CGTZ
0425ThElGUnMaV/qj1R7b0a+gCzNbDi1V99rd0cFeCx89G/VJX1eOX/4VQspaqvw
YxycHBW8JG7WTw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:12:20 2026 by rpki-client