Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: Jj0NTh8nKbJ4bkUIBQmwDuoxlpDliaJFStJV+vpUasg=
Subject key identifier: 80:3E:36:FC:F9:BC:43:04:0E:97:18:20:97:BB:89:24:BD:26:01:6C
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019DCE62F504CA0C3204E5D0DCBBDA54AB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 18E6
Signing time: Mon 27 Apr 2026 10:01:24 +0000
Manifest this update: Mon 27 Apr 2026 10:01:24 +0000
Manifest next update: Tue 28 Apr 2026 10:01:24 +0000
Files and hashes: 1: Ig_zAXCn9vbFw7KxbkjMl45qbh4.roa (hash: VV7LhTzcbYlq8rfyk66GOg6XaES1MuVkOsiFHAWaNpk=)
2: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
3: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
4: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: gc9bKSkioQy+O+QkBQUoBe2DcBbGfofsEOKIBDn3mmo=)
5: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:f5:04:ca:0c:32:04:e5:d0:dc:bb:da:54:ab:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Apr 27 10:01:24 2026 GMT
Not After : Apr 28 10:01:24 2026 GMT
Subject: CN=803e36fcf9bc43040e97182097bb8924bd26016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:5e:75:03:27:fa:ec:5b:0a:a6:d5:5b:73:
e7:ce:1e:c2:f6:96:ad:64:4d:8d:dd:35:50:e9:d3:
1f:71:fe:1e:3a:a0:2b:02:c1:72:5d:db:21:f0:13:
9e:45:73:52:36:4a:4e:29:19:d6:e8:be:ca:a3:39:
a3:eb:58:1e:4d:e2:84:da:65:37:ee:e5:d4:6a:8a:
fd:e3:36:60:3e:63:5a:ad:d9:d2:b2:07:4d:a7:d7:
60:cf:82:4f:27:4b:34:74:38:6b:aa:3f:c0:1e:a4:
1d:c3:1f:16:ba:39:ea:03:c2:e8:e7:cd:4b:0c:10:
00:dc:ee:34:a1:d5:f5:15:16:25:a8:55:4e:bc:7e:
f2:00:f1:46:42:e5:6d:2d:59:1f:b1:15:c8:00:1d:
28:4e:f2:8e:99:20:7c:dd:81:e4:eb:20:a4:f9:cc:
8d:16:9c:b6:f3:71:63:d2:73:6b:e5:e5:6d:fb:60:
f0:f4:22:78:a9:d8:a0:15:84:79:d4:cd:86:8f:a2:
ad:00:68:41:73:72:4a:66:9e:d1:db:25:e7:f4:99:
eb:f7:86:ea:b4:86:ce:d8:b8:50:53:cc:00:14:5d:
b7:88:41:74:9a:2a:18:3b:f7:22:50:fe:c6:65:77:
b3:35:bc:1d:55:c2:11:2d:07:27:0a:c1:74:23:a9:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:36:FC:F9:BC:43:04:0E:97:18:20:97:BB:89:24:BD:26:01:6C
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fb:44:8d:ba:99:da:64:4a:22:9b:b5:61:bd:0a:a3:ca:5c:
7f:2c:29:2f:e0:82:4b:0b:00:fb:21:0f:30:4d:29:98:5f:5d:
d2:3f:8d:92:97:d6:e3:be:f2:96:89:ce:a2:bd:bd:e6:7f:e6:
5a:f6:c2:04:c7:e9:d0:9c:67:86:27:33:28:98:41:a7:05:32:
be:0e:c2:c4:3e:c8:d9:4e:8e:c6:2f:c8:85:96:46:8c:15:ca:
b4:45:50:d3:f4:23:89:5c:21:f0:35:6a:06:d3:52:41:c6:8b:
d0:60:d6:4a:7a:79:3e:46:1c:08:2e:1c:c2:d8:10:01:14:3e:
6a:07:50:56:0b:6e:6a:20:16:50:e5:c2:14:ab:55:6d:36:d3:
d6:47:4a:59:e8:27:85:e4:3b:41:64:35:99:0c:9b:3d:9d:66:
cf:0b:4f:a6:d5:d1:e5:bc:97:4e:0e:ce:65:ad:4a:da:47:8e:
6e:42:75:1f:bc:bf:c9:11:b2:ed:bf:95:70:63:44:e7:71:08:
de:a4:a9:ab:f6:2d:b1:ee:3d:20:67:51:9e:0c:07:63:e1:54:
18:b4:aa:f6:38:8c:ef:1a:49:d2:f5:50:07:af:9e:05:86:6e:
e7:58:62:80:e9:fc:7b:e3:32:dd:61:c4:f0:b9:c2:5c:0a:9e:
19:e7:5b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYvUEygwyBOXQ3LvaVKsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0
NGFhMDgwHhcNMjYwNDI3MTAwMTI0WhcNMjYwNDI4MTAwMTI0WjAzMTEwLwYDVQQD
Eyg4MDNlMzZmY2Y5YmM0MzA0MGU5NzE4MjA5N2JiODkyNGJkMjYwMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUNedQMn+uxbCqbVW3Pnzh7C9pat
ZE2N3TVQ6dMfcf4eOqArAsFyXdsh8BOeRXNSNkpOKRnW6L7Kozmj61geTeKE2mU3
7uXUaor94zZgPmNardnSsgdNp9dgz4JPJ0s0dDhrqj/AHqQdwx8WujnqA8Lo581L
DBAA3O40odX1FRYlqFVOvH7yAPFGQuVtLVkfsRXIAB0oTvKOmSB83YHk6yCk+cyN
Fpy283Fj0nNr5eVt+2Dw9CJ4qdigFYR51M2Gj6KtAGhBc3JKZp7R2yXn9Jnr94bq
tIbO2LhQU8wAFF23iEF0mioYO/ciUP7GZXezNbwdVcIRLQcnCsF0I6kD3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA+Nvz5vEMEDpcYIJe7iSS9JgFsMB8GA1UdIwQY
MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt
NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw
LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvtEjbqZ
2mRKIpu1Yb0Ko8pcfywpL+CCSwsA+yEPME0pmF9d0j+NkpfW477ylonOor295n/m
WvbCBMfp0JxnhiczKJhBpwUyvg7CxD7I2U6Oxi/IhZZGjBXKtEVQ0/QjiVwh8DVq
BtNSQcaL0GDWSnp5PkYcCC4cwtgQARQ+agdQVgtuaiAWUOXCFKtVbTbT1kdKWegn
heQ7QWQ1mQybPZ1mzwtPptXR5byXTg7OZa1K2keObkJ1H7y/yRGy7b+VcGNE53EI
3qSpq/Ytse49IGdRngwHY+FUGLSq9jiM7xpJ0vVQB6+eBYZu51higOn8e+My3WHE
8LnCXAqeGedbfQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:50 2026 by rpki-client