Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: Ro1mFC8gTbKMhGnQc3P3aag6r6uGEO53CRyi0gL5o2k=
Subject key identifier: FF:EC:9E:EF:BC:98:CA:0E:9F:71:0D:77:7D:D8:6F:3D:35:AE:37:C0
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019D67D0EC1C656C13D85918F3BF059D9D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 18C1
Signing time: Tue 07 Apr 2026 12:00:38 +0000
Manifest this update: Tue 07 Apr 2026 12:00:38 +0000
Manifest next update: Wed 08 Apr 2026 12:00:38 +0000
Files and hashes: 1: 1rZ9lvq4z5GUrK1ubBuPHqaf3k0.roa (hash: jv0midgpTJeUMCUfbjDUlxTZCO6xs8bC/AB49kze9Rk=)
2: JC6b9AAY2rwkq1FORl5Abxr-m1w.roa (hash: TFvVsSvQ0TaMuOye+x7ZRV34hFmw1XW7pj5/x7K+d10=)
3: c64_xwrokSnmr0o0Rxc1LXbWsks.roa (hash: D7VOIgGxMLMKLMuDjwZq55SJloCAKPMrVwWrZEo0Y/o=)
4: t23_omorbxNaeI1t-2_nVI-M9Bo.roa (hash: tkmuOhPWK63hgBOOCfU7J7aL82MJy/fu9mcuqv0UO0w=)
5: yTBqPRFUVfKdzLterimo113_dkQ.roa (hash: qNzAUGKwPF55HCrIzh2nSa4zmob6mdMkWCPw4jO7Mk4=)
6: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: SR13Gr+Hr7MLu6LxKikkKnGKCS+6CEJeWzcjtLx5xII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:d0:ec:1c:65:6c:13:d8:59:18:f3:bf:05:9d:9d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Apr 7 12:00:38 2026 GMT
Not After : Apr 8 12:00:38 2026 GMT
Subject: CN=ffec9eefbc98ca0e9f710d777dd86f3d35ae37c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:09:18:60:b6:5c:b3:d7:53:14:e3:00:a6:
3e:ed:0f:c0:26:db:91:14:ad:30:a9:0e:18:cd:35:
bb:4b:db:8b:59:d8:08:a4:d8:a0:53:b7:ad:77:2f:
b9:50:85:fc:48:b5:98:89:23:9e:68:fc:67:fb:8b:
69:ee:36:70:f9:51:75:6e:25:96:69:4d:40:df:20:
43:d3:99:90:3f:49:53:2f:e8:56:3b:6b:bd:e4:23:
0b:8b:a8:7f:76:91:1f:59:6e:32:c8:9c:56:e3:5e:
71:f0:d7:cb:5c:17:e5:08:5f:41:0b:51:95:97:86:
46:94:f3:df:09:71:40:c8:60:3f:a9:9d:c8:65:5d:
d7:40:cb:bb:40:b6:d7:a1:cd:6c:4c:e6:16:68:3c:
19:70:46:03:07:1b:bd:e2:c3:a8:e8:12:2c:a4:b6:
0d:26:d1:34:9b:1f:01:85:a8:6b:b4:15:1e:d4:83:
49:de:25:e4:6e:01:a1:89:a7:82:9d:a2:7f:84:5d:
09:9f:17:fe:a5:ae:4b:dc:00:d7:e1:31:81:b4:04:
a5:fa:6a:23:3b:3f:ea:e1:97:c4:ac:f8:47:c9:90:
33:86:b7:b0:20:a2:31:7c:bd:d4:97:68:de:cf:4e:
b4:fa:9e:4f:7d:e0:b2:ab:ad:4b:4c:b2:25:49:75:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EC:9E:EF:BC:98:CA:0E:9F:71:0D:77:7D:D8:6F:3D:35:AE:37:C0
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8c:b2:c4:a2:52:6b:79:53:35:08:86:b2:36:34:71:bd:1d:
dd:f5:fe:e6:0a:7a:bd:86:e7:21:c3:f5:44:9a:e5:6f:6e:15:
c2:f0:1b:30:74:5e:3a:fa:85:e3:90:23:0f:fe:f2:05:28:83:
28:6e:ec:00:30:0e:a4:25:87:b3:05:f8:95:df:0e:ea:84:b3:
68:69:94:b2:bf:f4:61:d0:fe:1e:b6:05:5c:b9:dd:fd:0d:d3:
38:06:7d:b1:ca:e5:97:d5:8b:8c:60:4d:aa:88:e3:db:41:24:
9d:b2:0c:79:14:2b:83:62:a7:c5:a8:5c:7c:b5:fe:41:9e:c3:
ff:14:f0:77:84:22:09:05:fa:52:83:74:6b:4b:76:b4:b6:cb:
73:48:fd:3e:ce:2d:fa:87:c3:f8:53:5b:8d:8f:4e:00:b8:76:
4b:d0:86:48:df:0b:ab:10:50:06:53:0f:a3:3e:8f:b2:52:4e:
61:5e:1b:9f:e6:7e:4c:4d:12:9b:97:5d:2c:a7:65:94:22:e0:
4a:d5:49:80:02:97:5a:e3:5c:58:6a:08:3c:ed:7a:38:ee:2a:
d5:d3:9f:c9:e7:c4:c5:7d:11:4f:0a:c9:9e:08:98:c4:39:2b:
71:85:c3:21:ab:97:07:f3:08:c7:04:c1:3d:14:7d:d8:ef:3c:
43:33:e9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1n0OwcZWwT2FkY878FnZ0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2
ZDE0MTcwHhcNMjYwNDA3MTIwMDM4WhcNMjYwNDA4MTIwMDM4WjAzMTEwLwYDVQQD
EyhmZmVjOWVlZmJjOThjYTBlOWY3MTBkNzc3ZGQ4NmYzZDM1YWUzN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH8JGGC2XLPXUxTjAKY+7Q/AJtuR
FK0wqQ4YzTW7S9uLWdgIpNigU7etdy+5UIX8SLWYiSOeaPxn+4tp7jZw+VF1biWW
aU1A3yBD05mQP0lTL+hWO2u95CMLi6h/dpEfWW4yyJxW415x8NfLXBflCF9BC1GV
l4ZGlPPfCXFAyGA/qZ3IZV3XQMu7QLbXoc1sTOYWaDwZcEYDBxu94sOo6BIspLYN
JtE0mx8BhahrtBUe1INJ3iXkbgGhiaeCnaJ/hF0Jnxf+pa5L3ADX4TGBtASl+moj
Oz/q4ZfErPhHyZAzhrewIKIxfL3Ul2jez060+p5PfeCyq61LTLIlSXVpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/snu+8mMoOn3ENd33Ybz01rjfAMB8GA1UdIwQY
MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt
MjIzNzQyZWU0Mzc1LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1
LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYyyxKJS
a3lTNQiGsjY0cb0d3fX+5gp6vYbnIcP1RJrlb24VwvAbMHReOvqF45AjD/7yBSiD
KG7sADAOpCWHswX4ld8O6oSzaGmUsr/0YdD+HrYFXLnd/Q3TOAZ9scrll9WLjGBN
qojj20EknbIMeRQrg2KnxahcfLX+QZ7D/xTwd4QiCQX6UoN0a0t2tLbLc0j9Ps4t
+ofD+FNbjY9OALh2S9CGSN8LqxBQBlMPoz6PslJOYV4bn+Z+TE0Sm5ddLKdllCLg
StVJgAKXWuNcWGoIPO16OO4q1dOfyefExX0RTwrJngiYxDkrcYXDIauXB/MIxwTB
PRR92O88QzPpug==
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:37 2026 by rpki-client