Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier: fyAfUZeVrk+bfVjlRZGjQ2M/Fz3zNFpLdrdph1uFpg0=
Subject key identifier: 36:69:D6:C9:91:51:0F:3C:18:68:66:DD:11:9C:29:D8:19:3C:29:10
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer: /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial: 019D9962F72D89FD8F8618247EDB187E414D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number: 04D0
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: /HOyCmr7bU989OBdPhLvNJvYOnRBbYU6TH/ew5oqekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f7:2d:89:fd:8f:86:18:24:7e:db:18:7e:41:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=3669d6c991510f3c186866dd119c29d8193c2910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:e0:43:22:f4:c4:db:51:59:72:43:4e:41:
c3:7b:e9:ac:bf:45:fb:95:13:72:3b:20:86:99:e0:
d8:aa:ca:91:ba:4b:d4:09:bb:4e:b3:6e:dc:fb:cb:
7e:94:d6:6b:fb:38:43:3d:f0:55:0f:0b:3d:f0:dd:
3d:22:e8:b7:a5:12:a9:39:62:79:14:0b:ef:2b:85:
2f:67:7e:cd:b1:42:f4:de:60:57:93:24:b0:96:b9:
9f:80:54:c1:0e:ce:de:18:b4:38:bb:bf:4c:a9:9e:
79:c0:d8:99:c3:6d:af:69:bc:ce:47:49:d8:d5:94:
ec:ad:2f:1d:58:3c:eb:d2:45:26:a2:ad:51:4b:ee:
e6:20:87:f8:41:73:bc:e9:99:18:c0:17:db:d0:1f:
d6:75:fd:15:e4:7c:15:0d:3c:73:35:69:79:4b:b5:
20:3d:95:de:eb:0c:4e:cb:81:a2:e7:96:1a:3a:b4:
f9:0f:2e:be:d2:0e:fe:9f:82:3a:5f:c6:f8:9c:a1:
e4:68:59:de:64:5f:ef:9e:3f:00:44:83:f5:22:c8:
f2:99:3b:d7:2c:f0:b3:de:e3:5a:5b:47:c8:ba:70:
45:79:69:9f:44:7d:be:f0:b4:0c:f5:2e:5c:12:91:
04:f8:12:91:e6:ac:f1:dd:29:9e:bf:0f:bd:18:3c:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:D6:C9:91:51:0F:3C:18:68:66:DD:11:9C:29:D8:19:3C:29:10
X509v3 Authority Key Identifier:
keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:29:58:f3:1a:78:14:30:29:3a:76:da:53:05:4f:40:72:60:
03:94:c0:be:b4:0a:59:db:e0:7e:26:93:df:2c:7e:5d:cd:06:
31:48:2a:6b:e4:e0:ff:6d:53:1e:34:38:af:f4:3a:40:3c:9f:
fd:36:08:72:8e:17:7c:3f:b2:e7:d3:f8:96:bb:da:ca:f3:2d:
e2:9f:8e:66:2d:da:b5:bf:63:db:be:b9:a3:cf:7e:09:4e:d4:
ee:39:ee:26:38:7c:7b:ed:83:fc:ef:36:a9:f6:8d:3a:73:80:
ba:7b:29:bf:9c:66:fb:e9:0e:75:91:0e:34:78:ea:43:d6:82:
90:9a:ae:d9:bb:6c:23:f9:4c:0d:1d:fa:72:b4:3d:0a:57:1e:
f9:ae:d6:04:45:6c:d9:1e:b4:ca:bc:1c:a8:ca:ad:75:b4:0b:
86:d6:ac:1c:ed:89:01:b8:4a:c0:b5:72:78:6a:3d:99:14:de:
3e:20:4d:b4:67:a2:bc:df:3c:bd:7a:e3:cd:52:cc:b0:2e:25:
0d:87:c2:2b:ea:f7:b3:15:0e:3c:fd:c1:6f:f5:f1:28:e9:78:
1b:fa:7e:ea:90:8a:f1:0b:da:a8:09:8a:df:74:34:0f:84:50:
33:9c:1c:f1:57:8c:9b:05:58:a9:a5:bb:9a:91:c3:08:78:2f:
ef:41:8d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvctif2PhhgkftsYfkFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODFlMmQ1NmZkOWYxOTMyZGJjMGYyMTYzMjk5NDJmZTIz
Zjc1NWEwHhcNMjYwNDE3MDMwMTMyWhcNMjYwNDE4MDMwMTMyWjAzMTEwLwYDVQQD
EygzNjY5ZDZjOTkxNTEwZjNjMTg2ODY2ZGQxMTljMjlkODE5M2MyOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9fgQyL0xNtRWXJDTkHDe+msv0X7
lRNyOyCGmeDYqsqRukvUCbtOs27c+8t+lNZr+zhDPfBVDws98N09Iui3pRKpOWJ5
FAvvK4UvZ37NsUL03mBXkySwlrmfgFTBDs7eGLQ4u79MqZ55wNiZw22vabzOR0nY
1ZTsrS8dWDzr0kUmoq1RS+7mIIf4QXO86ZkYwBfb0B/Wdf0V5HwVDTxzNWl5S7Ug
PZXe6wxOy4Gi55YaOrT5Dy6+0g7+n4I6X8b4nKHkaFneZF/vnj8ARIP1IsjymTvX
LPCz3uNaW0fIunBFeWmfRH2+8LQM9S5cEpEE+BKR5qzx3Smevw+9GDwaBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZp1smRUQ88GGhm3RGcKdgZPCkQMB8GA1UdIwQY
MBaAFM6B4tVv2fGTLbwPIWMplC/iP3VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMjBjZGMtYjFhNi00OThiLThjY2Mt
OTQ5M2E3NGI1Zjc1LzEvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jMjBjZGMtYjFhNi00OThiLThjY2MtOTQ5M2E3NGI1Zjc1
LzEvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcClY8xp4
FDApOnbaUwVPQHJgA5TAvrQKWdvgfiaT3yx+Xc0GMUgqa+Tg/21THjQ4r/Q6QDyf
/TYIco4XfD+y59P4lrvayvMt4p+OZi3atb9j2765o89+CU7U7jnuJjh8e+2D/O82
qfaNOnOAunspv5xm++kOdZEONHjqQ9aCkJqu2btsI/lMDR36crQ9Clce+a7WBEVs
2R60yrwcqMqtdbQLhtasHO2JAbhKwLVyeGo9mRTePiBNtGeivN88vXrjzVLMsC4l
DYfCK+r3sxUOPP3Bb/XxKOl4G/p+6pCK8QvaqAmK33Q0D4RQM5wc8VeMmwVYqaW7
mpHDCHgv70GNuA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:04 2026 by rpki-client