Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: qh31XdbbSGRPu46Qmz3qHVl5CAknCyb05a1O/5eH3ZA=
Subject key identifier: 08:72:08:41:97:AC:85:C9:79:9C:91:0B:7D:9D:70:1D:B6:13:5B:01
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019DA48A9C0B9CD259FD70447C1E1D8CAF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 07:00:40 +0000
Manifest this update: Sun 19 Apr 2026 07:00:40 +0000
Manifest next update: Mon 20 Apr 2026 07:00:40 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: iJ9umDLeawhs7VCjJqpMtKMEI22FQuKO49U9b533rMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:9c:0b:9c:d2:59:fd:70:44:7c:1e:1d:8c:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Apr 19 07:00:40 2026 GMT
Not After : Apr 20 07:00:40 2026 GMT
Subject: CN=0872084197ac85c9799c910b7d9d701db6135b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:c6:8f:f7:80:2a:4d:53:9d:ba:f4:ee:a8:
58:63:11:1d:c8:73:d4:37:3b:6e:ca:19:80:c7:6f:
fb:cf:66:b9:9d:6a:6e:ca:11:9d:b5:f7:b1:1a:c5:
8f:4a:38:3c:05:c0:13:0e:96:bd:e3:8f:8e:f8:c6:
73:30:98:05:54:93:f4:0d:fb:f1:59:9c:ee:74:ee:
1a:4a:f0:1c:fe:e1:3d:16:29:7a:ba:c6:18:1f:0e:
79:b1:13:d6:93:4e:03:10:fd:21:f3:23:9b:ff:65:
6f:f9:25:1c:c7:cb:5c:09:58:b7:85:55:50:3a:36:
f3:38:fc:b5:f6:a9:45:71:a8:ba:27:ac:48:06:09:
f5:d5:8d:6b:b4:d1:6a:98:cc:dd:fe:f7:7b:28:93:
0f:8e:cc:8e:d2:e0:66:e7:c1:b5:0b:69:59:66:c8:
00:30:ab:c3:3b:e1:e5:ca:03:37:99:3e:12:4d:87:
4c:94:f7:ca:bb:21:7a:40:3e:ac:7b:e0:a2:b6:da:
f4:f2:a3:55:78:95:9d:12:56:69:b0:ee:00:04:a1:
92:41:0c:c3:64:68:5b:ab:d3:7e:bf:6b:fb:ac:26:
23:de:30:41:b4:5f:c1:9a:19:90:13:b5:19:c1:cd:
74:4c:e8:59:77:4c:cc:35:dd:73:1c:f9:52:67:45:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:72:08:41:97:AC:85:C9:79:9C:91:0B:7D:9D:70:1D:B6:13:5B:01
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:44:8e:1e:d4:75:96:14:5f:d2:42:b4:7d:ef:11:f7:ac:a4:
17:24:bb:15:56:a3:93:24:cd:60:fc:7c:a0:1e:c4:86:18:fe:
fe:9f:90:c2:24:26:67:65:d7:e3:b2:b9:6a:1c:4b:3b:07:40:
33:bb:63:b3:c1:a8:31:26:68:be:2a:c0:68:36:29:c8:2c:8e:
c6:6e:5d:5d:1a:12:18:84:b7:12:f4:61:30:42:bc:cf:f1:27:
17:d8:38:87:af:20:0e:c5:6e:af:06:9e:61:51:3d:c4:09:5b:
c5:63:90:06:31:b5:86:55:bf:8b:33:a7:b2:6a:08:80:32:fd:
b7:37:6d:94:13:45:c1:cb:b3:4b:82:a1:c3:1e:d7:57:2a:f7:
67:3f:fd:c5:a0:4b:f3:db:3f:0d:a2:10:e1:3f:e7:cc:c4:f3:
4c:5e:91:cb:e8:7e:ab:46:33:6f:6e:5f:9d:cd:58:88:ba:4f:
02:5b:43:74:0b:e2:8a:a1:c5:c0:de:82:5e:d2:6d:d9:08:ed:
b1:ab:f5:d5:0a:eb:61:84:23:2c:df:f8:cf:52:b4:63:2e:c6:
63:2b:e8:6e:6e:76:3d:54:0c:91:87:e1:95:80:cb:bf:f1:fb:
c9:ba:75:a5:9e:67:47:b0:b0:0b:1b:36:fb:7f:a6:22:88:3d:
16:91:9c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kipwLnNJZ/XBEfB4djK9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDNjZmNjODhjMjVkM2U4NzZiNTMyY2YxMTMwMTIyNWVj
YTFiMGMwHhcNMjYwNDE5MDcwMDQwWhcNMjYwNDIwMDcwMDQwWjAzMTEwLwYDVQQD
EygwODcyMDg0MTk3YWM4NWM5Nzk5YzkxMGI3ZDlkNzAxZGI2MTM1YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5orGj/eAKk1Tnbr07qhYYxEdyHPU
NztuyhmAx2/7z2a5nWpuyhGdtfexGsWPSjg8BcATDpa944+O+MZzMJgFVJP0Dfvx
WZzudO4aSvAc/uE9Fil6usYYHw55sRPWk04DEP0h8yOb/2Vv+SUcx8tcCVi3hVVQ
OjbzOPy19qlFcai6J6xIBgn11Y1rtNFqmMzd/vd7KJMPjsyO0uBm58G1C2lZZsgA
MKvDO+HlygM3mT4STYdMlPfKuyF6QD6se+Cittr08qNVeJWdElZpsO4ABKGSQQzD
ZGhbq9N+v2v7rCYj3jBBtF/BmhmQE7UZwc10TOhZd0zMNd1zHPlSZ0WSHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhyCEGXrIXJeZyRC32dcB22E1sBMB8GA1UdIwQY
MBaAFGcDz8yIwl0+h2tTLPETASJeyhsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgt
MmE5YzU2ZjYzMjhiLzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgtMmE5YzU2ZjYzMjhi
LzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUSOHtR1
lhRf0kK0fe8R96ykFyS7FVajkyTNYPx8oB7Ehhj+/p+QwiQmZ2XX47K5ahxLOwdA
M7tjs8GoMSZovirAaDYpyCyOxm5dXRoSGIS3EvRhMEK8z/EnF9g4h68gDsVurwae
YVE9xAlbxWOQBjG1hlW/izOnsmoIgDL9tzdtlBNFwcuzS4Khwx7XVyr3Zz/9xaBL
89s/DaIQ4T/nzMTzTF6Ry+h+q0Yzb25fnc1YiLpPAltDdAviiqHFwN6CXtJt2Qjt
sav11QrrYYQjLN/4z1K0Yy7GYyvobm52PVQMkYfhlYDLv/H7ybp1pZ5nR7CwCxs2
+3+mIog9FpGcmA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:58 2026 by rpki-client