Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: f6Hhk4D/IgMZ4yeP39sQjukKGmDGpW+MaZMM7C+O4+Y=
Subject key identifier: 92:22:46:2F:F3:36:1F:D3:4C:67:7E:F9:AC:C1:56:91:7A:68:0F:93
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019E30DFDE90CFB6E4CD6D1B0F53873C5203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 13:00:38 +0000
Manifest this update: Sat 16 May 2026 13:00:38 +0000
Manifest next update: Sun 17 May 2026 13:00:38 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: dUuExbw717/k0b/FnoMuYdkGCYE9v8a8gXrO8b+4szc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:de:90:cf:b6:e4:cd:6d:1b:0f:53:87:3c:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: May 16 13:00:38 2026 GMT
Not After : May 17 13:00:38 2026 GMT
Subject: CN=9222462ff3361fd34c677ef9acc156917a680f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:7b:e7:24:23:f2:46:90:a9:ff:92:b3:0b:
76:d6:bb:64:21:c2:7e:d5:e9:2c:55:70:e9:cb:8d:
38:24:e5:18:a7:69:8d:7b:2a:9a:1c:b1:99:92:3e:
9a:55:2d:15:95:77:75:de:ab:e6:3f:1e:88:06:83:
03:16:71:f6:e2:df:01:93:1d:87:4d:70:b9:ac:51:
41:ad:f3:3d:41:48:d0:47:e2:87:9a:7d:93:ed:85:
50:d7:d5:ae:2c:3c:b2:d4:86:eb:36:4a:4e:58:c3:
6a:22:3f:12:d0:8b:51:8b:b3:cb:01:a5:2c:80:02:
3c:7b:d4:82:40:c4:6c:c4:69:b1:15:6f:ef:55:7c:
66:7b:a1:f9:93:3e:2a:10:7d:91:04:8f:70:4a:56:
7d:fc:4d:87:72:a8:74:59:39:e0:46:ee:02:4d:d9:
e4:e2:8e:ea:32:2c:0e:2e:0f:8b:c7:3d:c7:11:83:
e2:fc:22:2e:59:c5:1d:95:19:27:ab:9f:5f:b8:cf:
3c:b0:16:8e:3f:a4:c5:76:35:2f:b9:d7:36:e3:c3:
6a:75:f7:8c:b8:5b:b3:37:e1:62:ca:92:10:62:9c:
d3:d7:a8:94:54:ce:2d:ee:af:07:c6:2a:63:fd:13:
27:c5:13:85:84:50:37:c3:d8:91:66:29:f3:ac:d3:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:46:2F:F3:36:1F:D3:4C:67:7E:F9:AC:C1:56:91:7A:68:0F:93
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1f:d4:11:7e:11:a8:8f:3f:47:fe:02:78:4c:f8:c6:75:1b:
c9:ee:e1:9d:f6:8c:47:d4:db:fb:8e:01:97:b7:13:94:d3:73:
7d:49:ff:da:6b:c5:90:e0:26:00:e2:20:69:42:5c:8a:c1:ed:
d6:36:d4:e3:f9:a8:85:ec:76:ee:a4:e9:0a:f1:3e:a0:7d:be:
ac:0b:43:4d:cf:da:96:92:81:54:ae:e6:1b:1a:5a:9a:cf:59:
06:93:8f:4d:d4:72:e5:b5:7c:9d:85:8b:f8:f7:e5:1a:74:60:
f5:58:97:90:88:2d:18:63:ea:d9:e3:23:e4:c8:09:8c:06:b3:
83:a8:c5:af:1f:bc:0e:10:05:fe:31:26:b3:14:a2:7c:7c:0b:
ab:f1:64:b6:dd:f0:72:04:0a:a8:12:f1:af:12:e7:bf:d5:84:
dc:c9:6d:2c:8d:57:14:51:4d:4e:53:29:6d:ea:6e:c3:2a:d2:
60:63:63:42:e1:09:06:41:0c:fe:fc:9b:96:31:e3:cf:c3:a8:
67:d5:2c:10:0e:2b:ea:fb:6e:6d:07:6e:c2:8d:0a:ea:51:5b:
72:b7:a4:6b:49:f5:6c:36:58:59:78:0e:a7:f9:a5:da:c7:b3:
cc:45:39:35:9d:62:58:60:3c:35:2d:08:11:91:44:fa:1a:f0:
38:40:97:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w396Qz7bkzW0bD1OHPFIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4
MTg0Y2UwHhcNMjYwNTE2MTMwMDM4WhcNMjYwNTE3MTMwMDM4WjAzMTEwLwYDVQQD
Eyg5MjIyNDYyZmYzMzYxZmQzNGM2NzdlZjlhY2MxNTY5MTdhNjgwZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvZ75yQj8kaQqf+Sswt21rtkIcJ+
1eksVXDpy404JOUYp2mNeyqaHLGZkj6aVS0VlXd13qvmPx6IBoMDFnH24t8Bkx2H
TXC5rFFBrfM9QUjQR+KHmn2T7YVQ19WuLDyy1IbrNkpOWMNqIj8S0ItRi7PLAaUs
gAI8e9SCQMRsxGmxFW/vVXxme6H5kz4qEH2RBI9wSlZ9/E2Hcqh0WTngRu4CTdnk
4o7qMiwOLg+Lxz3HEYPi/CIuWcUdlRknq59fuM88sBaOP6TFdjUvudc248NqdfeM
uFuzN+FiypIQYpzT16iUVM4t7q8Hxipj/RMnxROFhFA3w9iRZinzrNMHfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIiRi/zNh/TTGd++azBVpF6aA+TMB8GA1UdIwQY
MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt
OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk
LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx/UEX4R
qI8/R/4CeEz4xnUbye7hnfaMR9Tb+44Bl7cTlNNzfUn/2mvFkOAmAOIgaUJcisHt
1jbU4/mohex27qTpCvE+oH2+rAtDTc/alpKBVK7mGxpams9ZBpOPTdRy5bV8nYWL
+PflGnRg9ViXkIgtGGPq2eMj5MgJjAazg6jFrx+8DhAF/jEmsxSifHwLq/Fktt3w
cgQKqBLxrxLnv9WE3MltLI1XFFFNTlMpbepuwyrSYGNjQuEJBkEM/vybljHjz8Oo
Z9UsEA4r6vtubQduwo0K6lFbcreka0n1bDZYWXgOp/ml2sezzEU5NZ1iWGA8NS0I
EZFE+hrwOECX+w==
-----END CERTIFICATE-----
Generated at Sat May 16 20:20:16 2026 by rpki-client