Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: yaO81t4+OKI4q4mvH9sKeevGKjDuXTODwAf2xmwUt34=
Subject key identifier: 18:33:A0:BF:C2:FF:EF:A5:9D:DC:EF:A1:76:A6:B3:50:EE:F2:F2:23
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019D99D00FEC9C65C093A4F5476B32CD8EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 08D6
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: xUhtYmfdc3qDUF0zkEGcOrOAnAvNNCrJAImbOb0+Zz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0f:ec:9c:65:c0:93:a4:f5:47:6b:32:cd:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=1833a0bfc2ffefa59ddcefa176a6b350eef2f223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:9c:00:f6:6e:5a:be:e4:75:35:cf:d1:57:
8e:a6:0d:42:12:f9:5d:be:3a:ed:c2:70:3b:60:20:
79:e0:b2:b8:cb:c1:ce:18:3c:a0:30:e6:4e:91:b6:
89:cf:95:42:14:3f:50:13:00:29:b7:1c:ad:7c:e0:
e8:90:83:af:30:f4:a9:bc:f8:b0:ad:81:f3:0e:d5:
44:8d:81:7e:53:2f:c0:7a:0f:e1:58:0a:e8:b3:25:
e1:b3:3c:2f:4f:a4:70:64:65:0e:b8:5d:a6:f6:47:
e4:97:87:2d:84:e2:3e:8e:3b:51:39:d4:55:bd:b4:
9c:56:00:b8:6f:8e:79:dd:2e:99:ef:a1:61:88:35:
58:bd:95:3a:3f:2a:a2:9c:c9:d2:d9:44:01:a2:3b:
0e:d7:21:ec:5a:f3:55:d1:4f:ee:de:8c:e2:43:aa:
53:f8:c2:bb:aa:9d:7f:35:7c:65:61:2e:de:a3:40:
f1:dc:aa:f1:f9:aa:6e:c9:c8:09:f8:ea:95:bd:ff:
b0:d8:af:8b:ed:2d:1f:1c:f0:e4:7f:1c:81:6c:2e:
4f:b9:0f:eb:de:a4:16:8b:73:66:64:f1:11:54:60:
37:b6:8e:f4:7a:ad:8b:86:65:5f:a2:74:57:28:60:
da:be:11:54:37:9d:ab:bd:83:ba:40:67:32:b9:5b:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:33:A0:BF:C2:FF:EF:A5:9D:DC:EF:A1:76:A6:B3:50:EE:F2:F2:23
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:d9:41:4f:40:ad:c5:77:98:3d:50:7a:93:ac:59:dd:17:
29:6a:38:f6:d0:24:92:9a:e5:58:f7:98:a2:9b:e5:b0:4f:d2:
2d:79:b5:c5:3a:9c:70:fe:5c:37:14:ee:9f:29:d0:0e:0c:29:
29:6d:85:42:ce:67:2b:47:41:90:fc:95:0d:6b:a5:ca:0e:6d:
36:76:4d:14:58:db:a1:4e:bb:98:47:94:db:50:e3:63:26:d5:
ab:c2:7e:a7:c7:1f:59:c0:71:d5:ae:88:47:be:f8:ad:bb:66:
18:f6:f7:af:2f:4d:6d:c3:53:65:59:b9:f5:5d:5c:f5:52:22:
39:7c:be:81:7d:96:f3:d1:0b:ed:a6:27:9c:18:92:b1:95:2f:
b3:a4:f6:73:5c:e7:d4:c3:52:cf:17:67:7a:9c:c1:b8:18:10:
62:0a:fc:40:78:e9:e8:3d:47:32:45:0a:e1:fb:00:87:09:e0:
86:e3:5a:9f:ba:5c:a6:48:0a:f7:67:59:cd:d2:10:24:02:ab:
86:97:fc:ea:b4:90:0b:46:45:0f:22:2d:03:6f:3c:01:82:22:
7e:78:76:9e:90:a0:83:7a:00:d3:9f:99:b3:d4:fc:b2:e3:81:
2e:46:a4:6c:46:0d:d0:06:0d:9e:8a:7f:fa:51:01:ce:b1:4a:
c3:16:e2:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0A/snGXAk6T1R2syzY6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjYwNDE3MDUwMDQyWhcNMjYwNDE4MDUwMDQyWjAzMTEwLwYDVQQD
EygxODMzYTBiZmMyZmZlZmE1OWRkY2VmYTE3NmE2YjM1MGVlZjJmMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnecAPZuWr7kdTXP0VeOpg1CEvld
vjrtwnA7YCB54LK4y8HOGDygMOZOkbaJz5VCFD9QEwAptxytfODokIOvMPSpvPiw
rYHzDtVEjYF+Uy/Aeg/hWArosyXhszwvT6RwZGUOuF2m9kfkl4cthOI+jjtROdRV
vbScVgC4b4553S6Z76FhiDVYvZU6PyqinMnS2UQBojsO1yHsWvNV0U/u3oziQ6pT
+MK7qp1/NXxlYS7eo0Dx3Krx+apuycgJ+OqVvf+w2K+L7S0fHPDkfxyBbC5PuQ/r
3qQWi3NmZPERVGA3to70eq2LhmVfonRXKGDavhFUN52rvYO6QGcyuVum+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgzoL/C/++lndzvoXams1Du8vIjMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLXZQU9A
rcV3mD1QepOsWd0XKWo49tAkkprlWPeYopvlsE/SLXm1xTqccP5cNxTunynQDgwp
KW2FQs5nK0dBkPyVDWulyg5tNnZNFFjboU67mEeU21DjYybVq8J+p8cfWcBx1a6I
R774rbtmGPb3ry9NbcNTZVm59V1c9VIiOXy+gX2W89EL7aYnnBiSsZUvs6T2c1zn
1MNSzxdnepzBuBgQYgr8QHjp6D1HMkUK4fsAhwnghuNan7pcpkgK92dZzdIQJAKr
hpf86rSQC0ZFDyItA288AYIifnh2npCgg3oA05+Zs9T8suOBLkakbEYN0AYNnop/
+lEBzrFKwxbi9A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:48 2026 by rpki-client