Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: H1cwl/0klziSwhCdqyECHpSFKG8Cyqfa7ZMKNeXERhQ=
Subject key identifier: AB:2D:44:E8:91:F9:F2:7F:C7:99:1A:5E:A8:36:2E:EC:E9:C0:05:BD
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 019D97AACACB8CF6B762F76CC8DE25E30C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 12BB
Signing time: Thu 16 Apr 2026 19:00:45 +0000
Manifest this update: Thu 16 Apr 2026 19:00:45 +0000
Manifest next update: Fri 17 Apr 2026 19:00:45 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: qand5+s234en+JLhTIhYC3BiXbQS62u/ycZMyypBRjA=)
2: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (hash: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs=)
3: mJoDlO3NR5D8OqKGLKWGSnN77Dc.roa (hash: 5iVJo/pmU4tCOmzWx6Yvb+04DOT0wTAh7Zm7gKM4+zQ=)
4: prY-rLIal9gwsZUoWucK1yyF1hs.asa (hash: NDjhtGqZMT7ro6hNfoHbI/n8/Z/kEUq2p2BLNvKXvjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:ca:cb:8c:f6:b7:62:f7:6c:c8:de:25:e3:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Apr 16 19:00:45 2026 GMT
Not After : Apr 17 19:00:45 2026 GMT
Subject: CN=ab2d44e891f9f27fc7991a5ea8362eece9c005bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:c9:fb:eb:55:a0:49:ab:9d:a0:2e:a7:75:
ff:c4:16:6b:1b:56:4e:a1:25:95:c1:60:0b:5f:f3:
94:47:34:6e:bc:e2:4a:7d:81:a7:b5:db:e6:09:9b:
44:1b:ed:77:10:b5:87:5a:df:24:6a:81:21:5a:e1:
16:9c:38:ff:55:67:5d:cc:91:76:a1:fb:48:ca:5b:
e8:ae:05:0f:29:93:42:a4:7a:13:c4:4b:ad:5d:49:
8f:00:f7:15:ca:23:3d:d0:3b:cc:88:01:20:db:ff:
f0:6d:13:bc:b2:a5:ee:0e:37:a5:99:dd:b5:06:bf:
46:48:28:a9:8e:ac:dd:fc:d3:be:8e:82:80:6c:74:
6b:13:49:5b:05:ce:57:59:4b:60:79:93:af:32:e6:
17:5a:1b:fa:2c:83:62:94:93:73:b1:6c:1f:a7:83:
06:53:4f:f8:f7:5f:25:37:c1:95:d1:b2:ae:4b:6f:
e6:bf:0f:47:cd:98:09:1c:b0:cd:08:06:cd:09:6f:
37:8a:6a:58:05:3e:ae:16:d9:08:b2:8c:0a:1c:a0:
c1:44:3e:7b:5c:7d:95:a8:f6:c0:66:70:c7:d8:32:
ec:63:12:b2:df:3d:d3:93:23:68:07:53:58:69:5a:
d1:67:a9:3b:af:58:81:aa:dc:9e:b5:69:02:0f:22:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:44:E8:91:F9:F2:7F:C7:99:1A:5E:A8:36:2E:EC:E9:C0:05:BD
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d2:bc:12:0e:bb:53:31:14:a3:d6:ce:33:31:e8:82:0f:61:
48:88:3f:f8:4e:07:5d:38:ed:6e:bc:27:cd:0b:55:58:d6:08:
79:f4:52:15:0e:14:6c:5e:7d:6e:9b:73:49:03:cd:06:30:b8:
32:f5:dc:12:d6:bc:ef:b6:1d:f8:a3:67:71:e1:0f:c4:b6:99:
7f:b5:93:a6:29:5f:da:5c:fa:42:ee:cc:4a:13:ed:e6:24:9e:
3d:ce:25:9c:8c:9a:c2:95:b7:3e:1a:ec:e5:30:b9:e9:7f:65:
c6:b8:a6:cd:95:19:64:83:1c:73:5e:48:d7:b0:11:28:56:55:
b6:5a:76:24:73:49:87:49:d3:4c:7d:6e:85:82:83:29:8f:3f:
b4:fa:37:28:23:ed:fc:97:33:ed:43:b3:cd:99:ab:3b:8a:6c:
83:4c:3f:21:b6:05:8a:db:86:8d:f4:99:18:73:ac:17:fb:97:
c4:76:78:9e:91:bf:51:35:20:21:eb:3a:e8:62:08:69:4a:e0:
b2:d3:c6:d0:fb:50:c2:a7:0e:ee:11:e0:a0:cf:e1:8f:10:14:
64:0b:3e:6a:77:2b:e2:76:4d:8c:90:d1:bf:25:f3:c9:72:ff:
5d:3c:9a:d4:c7:ac:25:76:df:ea:b2:32:06:cc:95:8a:74:62:
e0:7b:2a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqsrLjPa3YvdsyN4l4wySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh
NmNhMjgwHhcNMjYwNDE2MTkwMDQ1WhcNMjYwNDE3MTkwMDQ1WjAzMTEwLwYDVQQD
EyhhYjJkNDRlODkxZjlmMjdmYzc5OTFhNWVhODM2MmVlY2U5YzAwNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eLJ++tVoEmrnaAup3X/xBZrG1ZO
oSWVwWALX/OURzRuvOJKfYGntdvmCZtEG+13ELWHWt8kaoEhWuEWnDj/VWddzJF2
oftIylvorgUPKZNCpHoTxEutXUmPAPcVyiM90DvMiAEg2//wbRO8sqXuDjelmd21
Br9GSCipjqzd/NO+joKAbHRrE0lbBc5XWUtgeZOvMuYXWhv6LINilJNzsWwfp4MG
U0/4918lN8GV0bKuS2/mvw9HzZgJHLDNCAbNCW83impYBT6uFtkIsowKHKDBRD57
XH2VqPbAZnDH2DLsYxKy3z3TkyNoB1NYaVrRZ6k7r1iBqtyetWkCDyIiUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKstROiR+fJ/x5kaXqg2LuzpwAW9MB8GA1UdIwQY
MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt
YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh
LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNK8Eg67
UzEUo9bOMzHogg9hSIg/+E4HXTjtbrwnzQtVWNYIefRSFQ4UbF59bptzSQPNBjC4
MvXcEta877Yd+KNnceEPxLaZf7WTpilf2lz6Qu7MShPt5iSePc4lnIyawpW3Phrs
5TC56X9lxrimzZUZZIMcc15I17ARKFZVtlp2JHNJh0nTTH1uhYKDKY8/tPo3KCPt
/Jcz7UOzzZmrO4psg0w/IbYFituGjfSZGHOsF/uXxHZ4npG/UTUgIes66GIIaUrg
stPG0PtQwqcO7hHgoM/hjxAUZAs+ancr4nZNjJDRvyXzyXL/XTya1MesJXbf6rIy
BsyVinRi4HsqZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:45 2026 by rpki-client