Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: C49vJWDut4JHPpu+xj26w+Ah154o9AV5U+UaCbkFMOI=
Subject key identifier: F9:51:47:F0:DE:07:88:07:42:A8:7F:03:85:E0:C9:51:3D:61:D7:00
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019D9BF5BB66AD1FBF262F766DF34B8CD999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0617
Signing time: Fri 17 Apr 2026 15:01:05 +0000
Manifest this update: Fri 17 Apr 2026 15:01:05 +0000
Manifest next update: Sat 18 Apr 2026 15:01:05 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: wN+2PlITj6pIBHRYarlFXtrtwg88GBeBBhpRYZhtKG8=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:bb:66:ad:1f:bf:26:2f:76:6d:f3:4b:8c:d9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Apr 17 15:01:05 2026 GMT
Not After : Apr 18 15:01:05 2026 GMT
Subject: CN=f95147f0de07880742a87f0385e0c9513d61d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:9a:81:e9:92:76:89:c4:2b:5b:55:3c:47:
d2:7f:23:8f:6a:b6:4a:9d:39:1a:b8:ac:2b:90:ac:
c9:f0:88:39:f7:74:1c:0f:f6:b4:26:51:f9:20:d3:
8d:08:eb:58:6d:b5:d4:ea:72:46:3f:8c:d6:35:89:
e2:17:a2:3e:8f:2e:ce:89:c0:35:86:e0:3f:62:61:
01:2e:6a:46:de:33:2a:68:f0:e6:bf:13:6d:13:d8:
f9:d8:51:42:96:46:71:ba:58:ef:b8:e3:b8:ef:0d:
7c:a8:2c:0c:de:d6:ca:cf:de:45:f2:06:69:9e:b9:
6f:4c:99:c8:69:b0:86:57:5a:48:55:3d:84:6e:55:
37:da:0f:bb:77:a5:02:82:8b:1c:91:74:82:eb:dc:
37:fc:69:c6:a0:f1:15:10:d2:1c:09:b1:1a:25:83:
01:7c:92:d6:e9:0e:62:0e:4f:b2:21:fa:89:62:6f:
b0:35:98:99:ab:ec:3b:38:38:30:09:7f:ab:b9:db:
93:9d:93:1c:28:7e:db:ab:2c:bd:17:18:44:11:50:
0c:15:c1:0a:15:5d:f1:c4:08:86:36:46:8c:10:1d:
9f:63:ed:6c:cd:d8:6e:90:00:e8:a5:39:da:56:a7:
fe:1d:c3:09:4c:0a:20:21:65:3c:7d:d9:fd:ed:e5:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:47:F0:DE:07:88:07:42:A8:7F:03:85:E0:C9:51:3D:61:D7:00
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3f:35:79:3c:ae:ee:86:84:f8:5b:0c:5c:6a:7a:33:87:b2:
d1:42:c7:41:cb:97:1a:28:06:76:4e:74:ec:ee:cb:0b:c7:8a:
cd:a0:b4:1b:d2:b7:ec:1d:9e:e3:a4:f2:70:7e:d7:f5:f3:d9:
f4:df:97:ef:66:2d:c9:b2:e3:bc:32:54:9f:cc:2e:81:99:61:
3d:d8:f4:73:79:c4:86:9b:3c:8f:ea:32:ed:fc:a5:41:39:43:
33:6d:be:22:78:cd:c2:fd:9d:c7:4c:d2:87:24:44:df:43:c6:
61:bc:8b:ab:a4:ca:0e:65:f8:e2:59:5d:28:8c:c4:15:d4:11:
7b:eb:85:7e:63:86:b1:59:5c:d6:89:10:4e:38:99:16:cf:be:
7d:1b:f3:81:e5:6c:a0:e7:3f:a0:18:db:39:01:ba:53:22:4f:
59:8d:f1:b2:26:6b:5a:96:16:b0:70:ac:96:dd:53:04:46:dc:
e8:3c:41:c6:e1:6b:c8:77:17:86:5f:7c:01:f7:06:7a:39:ad:
2d:3c:82:3b:34:97:de:f2:3d:d2:33:3e:d0:12:00:7e:71:bd:
6b:9b:30:04:3d:70:37:fa:47:21:4d:ac:08:78:86:5d:e2:93:
39:a2:8d:4f:c0:64:1d:4f:13:0c:0c:0b:f6:87:cb:b6:19:74:
3e:08:de:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9btmrR+/Ji92bfNLjNmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj
YzY3MjQwHhcNMjYwNDE3MTUwMTA1WhcNMjYwNDE4MTUwMTA1WjAzMTEwLwYDVQQD
EyhmOTUxNDdmMGRlMDc4ODA3NDJhODdmMDM4NWUwYzk1MTNkNjFkNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01+agemSdonEK1tVPEfSfyOParZK
nTkauKwrkKzJ8Ig593QcD/a0JlH5INONCOtYbbXU6nJGP4zWNYniF6I+jy7OicA1
huA/YmEBLmpG3jMqaPDmvxNtE9j52FFClkZxuljvuOO47w18qCwM3tbKz95F8gZp
nrlvTJnIabCGV1pIVT2EblU32g+7d6UCgosckXSC69w3/GnGoPEVENIcCbEaJYMB
fJLW6Q5iDk+yIfqJYm+wNZiZq+w7ODgwCX+ruduTnZMcKH7bqyy9FxhEEVAMFcEK
FV3xxAiGNkaMEB2fY+1szdhukADopTnaVqf+HcMJTAogIWU8fdn97eVcbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlRR/DeB4gHQqh/A4XgyVE9YdcAMB8GA1UdIwQY
MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt
NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx
LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz81eTyu
7oaE+FsMXGp6M4ey0ULHQcuXGigGdk507O7LC8eKzaC0G9K37B2e46TycH7X9fPZ
9N+X72YtybLjvDJUn8wugZlhPdj0c3nEhps8j+oy7fylQTlDM22+InjNwv2dx0zS
hyRE30PGYbyLq6TKDmX44lldKIzEFdQRe+uFfmOGsVlc1okQTjiZFs++fRvzgeVs
oOc/oBjbOQG6UyJPWY3xsiZrWpYWsHCslt1TBEbc6DxBxuFryHcXhl98AfcGejmt
LTyCOzSX3vI90jM+0BIAfnG9a5swBD1wN/pHIU2sCHiGXeKTOaKNT8BkHU8TDAwL
9ofLthl0PgjeUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:12 2026 by rpki-client