Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: EhH6+HQO8lAe4tzhZg7WanlkNO9rSxhHj00Y+ZGLkcc=
Subject key identifier: 61:CD:0D:32:72:5D:F6:75:3C:F0:51:C0:72:98:AD:AF:66:23:CD:A4
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019D56A6B1CD98BC47619ED848655825A27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 18A8
Signing time: Sat 04 Apr 2026 04:00:58 +0000
Manifest this update: Sat 04 Apr 2026 04:00:58 +0000
Manifest next update: Sun 05 Apr 2026 04:00:58 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: mEmCPEqRyNr5dk1kej1nCbCIuUYxDRaXogS9GYtUsKg=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:56:a6:b1:cd:98:bc:47:61:9e:d8:48:65:58:25:a2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Apr 4 04:00:58 2026 GMT
Not After : Apr 5 04:00:58 2026 GMT
Subject: CN=61cd0d32725df6753cf051c07298adaf6623cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:73:b8:0a:ba:9f:84:76:17:c3:70:3d:9c:
3f:1e:e1:e6:b8:59:cf:f0:60:6f:39:44:cb:c4:87:
8b:14:c5:24:df:b1:20:2c:bd:dd:ef:fe:37:d5:4c:
f9:13:75:b2:91:03:4d:3a:26:3a:fc:fc:24:15:59:
39:b8:5c:a8:0c:a9:43:20:47:ce:fa:4d:7a:50:4b:
5a:11:6e:4e:b5:d6:21:74:a8:73:ff:2a:1d:94:10:
3b:8b:f0:28:af:fb:43:5c:02:fd:83:e6:18:f0:2f:
22:62:5d:49:29:ae:4a:fb:b4:76:23:23:46:de:ba:
59:40:35:cd:71:c8:25:45:4d:7c:d6:26:db:d9:2b:
9b:b2:e2:a7:d3:54:b4:7d:2c:70:45:8b:b8:bc:f9:
22:af:d4:3b:60:9e:87:3e:c7:21:12:72:c3:93:39:
5d:be:55:e4:18:1c:4a:69:78:17:d1:cb:3e:c5:c1:
3f:72:4d:55:43:e9:bf:89:af:ef:0a:f0:9e:60:7d:
3a:87:a5:4e:ff:cd:40:53:aa:46:a7:95:e1:49:90:
d4:ea:f1:a7:bc:ef:30:27:5e:8f:34:f4:86:0c:3d:
de:f9:b8:09:f9:42:15:63:7c:8f:34:3f:de:ce:cb:
0b:9b:61:26:36:21:ea:b8:d2:eb:dd:af:db:80:69:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:0D:32:72:5D:F6:75:3C:F0:51:C0:72:98:AD:AF:66:23:CD:A4
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:bc:2e:5b:11:12:37:31:a1:47:3d:42:ff:56:1e:fe:c5:
33:83:37:fa:a5:fb:68:03:5e:5e:8b:85:42:39:bc:3d:42:d1:
98:1c:fd:71:84:6c:93:ff:3c:09:df:b6:4a:70:e4:da:84:b1:
03:3d:bb:6f:84:04:c6:d0:90:78:e7:03:03:4a:d2:c3:c8:e7:
4d:60:93:39:0e:77:f5:63:d9:97:d5:37:2e:71:fb:53:d1:e0:
c0:e8:61:a3:8b:c5:bb:03:ec:37:5e:c8:ce:84:65:ea:32:36:
fe:d1:18:e0:38:c4:38:b6:0a:96:ac:3a:e2:17:7e:2a:78:1e:
e1:db:a1:9b:b6:82:59:5c:90:6f:bd:cf:9e:e2:8f:93:4b:ff:
10:27:6f:e9:4a:c3:0c:fd:db:3a:28:44:58:d6:0d:c5:f0:2c:
f5:9e:fe:5a:4b:29:26:e6:11:2d:81:4e:59:c0:9b:b9:31:c4:
9c:2f:f8:8b:c2:9a:ff:d8:2b:7e:de:9f:0f:ae:55:27:f2:21:
25:b8:f2:15:c3:2c:40:01:f2:bd:11:e4:41:48:ea:61:ce:d3:
b1:3b:86:c0:6d:46:96:2a:54:d6:52:9d:f0:22:66:3f:33:ae:
bd:d7:5f:17:f8:b0:ca:62:f0:8a:ba:4d:04:16:38:f6:16:98:
1d:a8:3f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1WprHNmLxHYZ7YSGVYJaJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjYwNDA0MDQwMDU4WhcNMjYwNDA1MDQwMDU4WjAzMTEwLwYDVQQD
Eyg2MWNkMGQzMjcyNWRmNjc1M2NmMDUxYzA3Mjk4YWRhZjY2MjNjZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNpzuAq6n4R2F8NwPZw/HuHmuFnP
8GBvOUTLxIeLFMUk37EgLL3d7/431Uz5E3WykQNNOiY6/PwkFVk5uFyoDKlDIEfO
+k16UEtaEW5OtdYhdKhz/yodlBA7i/Aor/tDXAL9g+YY8C8iYl1JKa5K+7R2IyNG
3rpZQDXNccglRU181ibb2SubsuKn01S0fSxwRYu4vPkir9Q7YJ6HPschEnLDkzld
vlXkGBxKaXgX0cs+xcE/ck1VQ+m/ia/vCvCeYH06h6VO/81AU6pGp5XhSZDU6vGn
vO8wJ16PNPSGDD3e+bgJ+UIVY3yPND/ezssLm2EmNiHquNLr3a/bgGlkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHNDTJyXfZ1PPBRwHKYra9mI82kMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEG8LlsR
EjcxoUc9Qv9WHv7FM4M3+qX7aANeXouFQjm8PULRmBz9cYRsk/88Cd+2SnDk2oSx
Az27b4QExtCQeOcDA0rSw8jnTWCTOQ539WPZl9U3LnH7U9HgwOhho4vFuwPsN17I
zoRl6jI2/tEY4DjEOLYKlqw64hd+Knge4duhm7aCWVyQb73PnuKPk0v/ECdv6UrD
DP3bOihEWNYNxfAs9Z7+WkspJuYRLYFOWcCbuTHEnC/4i8Ka/9grft6fD65VJ/Ih
JbjyFcMsQAHyvRHkQUjqYc7TsTuGwG1GlipU1lKd8CJmPzOuvddfF/iwymLwirpN
BBY49haYHag/HA==
-----END CERTIFICATE-----
Generated at Sat Apr 4 12:25:14 2026 by rpki-client