Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: 3PKOTwY3aYHUNVycRFdguXG6++nGHB23muoqDZip3U0=
Subject key identifier: 52:91:B0:C3:13:42:1D:20:18:0D:8A:58:F4:38:0D:21:E4:FF:61:78
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019DCDF496B964FD80FF7DD67DEF287DBA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 08:00:51 +0000
Manifest this update: Mon 27 Apr 2026 08:00:51 +0000
Manifest next update: Tue 28 Apr 2026 08:00:51 +0000
Files and hashes: 1: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: l4QhXl5ONf0vsQcrx91qNBPlX8B95BHPjD6pq6cp3NQ=)
2: mjYrOZuE7NERgZ0UM4YBqgcrJ0k.roa (hash: zm8SvAgNh+tsDlRXHMlAw5DptKIdz9z91tV1dCDIl7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:96:b9:64:fd:80:ff:7d:d6:7d:ef:28:7d:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Apr 27 08:00:51 2026 GMT
Not After : Apr 28 08:00:51 2026 GMT
Subject: CN=5291b0c313421d20180d8a58f4380d21e4ff6178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:b3:40:68:4d:d4:84:ce:b4:7d:c1:3b:74:
20:99:9d:a2:ed:ce:48:90:e8:04:9f:c3:ce:0a:73:
d8:b3:84:8a:7d:d3:6b:98:5c:37:d3:eb:4f:d8:b6:
fd:73:93:eb:05:2c:95:10:5f:84:90:4d:61:0b:7b:
fd:5d:b1:4e:6a:26:f7:d2:22:66:a0:8b:1b:bf:f4:
19:83:f7:a6:e5:fc:ef:04:19:bc:f7:88:b9:05:17:
5a:fb:c0:c2:b0:a2:93:27:52:60:b7:48:a1:bf:27:
97:90:8f:f0:df:29:99:52:ab:16:1d:f7:13:05:b1:
93:67:28:c8:6b:4f:d6:d1:93:19:19:2c:d8:0f:20:
80:0b:70:2b:c6:75:6b:da:44:03:d3:d7:34:7c:e5:
59:5b:29:58:cc:de:fb:16:44:02:89:3c:5e:b5:28:
0b:e9:08:ce:8e:7b:62:1e:2e:45:61:2d:dc:58:70:
8c:72:d3:82:59:86:90:7c:16:99:f1:10:5d:ba:b1:
7c:80:fb:b5:e0:96:d5:6d:21:f3:ee:94:3b:74:64:
da:21:19:09:ba:e6:fe:c2:e1:e4:5a:9e:ee:68:a4:
c5:46:26:1f:f3:9a:77:0a:28:d3:d5:ba:5f:c0:a5:
27:b1:0a:4c:ff:40:33:4f:9e:25:89:10:e1:5d:6d:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:B0:C3:13:42:1D:20:18:0D:8A:58:F4:38:0D:21:E4:FF:61:78
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e6:d5:59:b1:46:f6:72:67:10:81:09:ee:a1:6e:07:d4:1c:
4c:f8:aa:cf:ae:61:a2:2a:15:4c:b0:6b:a1:af:94:c0:0c:d1:
01:de:cd:98:ce:64:1c:7d:3e:09:19:5c:59:4b:22:06:7a:98:
80:1f:bc:26:da:16:ae:07:d2:eb:d6:91:fb:5e:5d:0b:70:78:
40:93:08:ae:71:d4:00:58:3c:dd:f4:97:2d:d4:41:3c:11:80:
4a:41:80:dc:92:45:14:fd:09:4e:4a:f3:19:32:34:7c:04:cd:
d1:7e:f0:a5:b9:79:d8:9b:97:bc:a6:b5:7b:1a:96:10:2e:6c:
a2:2a:ca:b0:0c:54:af:1a:1e:bd:d2:75:24:e0:c7:79:cd:e1:
fe:3c:dc:4e:39:e4:d6:fa:53:58:cd:ff:cd:2e:4a:a9:95:4b:
e8:91:b0:9e:28:ce:d8:92:6a:3f:16:78:15:ed:93:fc:da:65:
cc:0d:a9:ad:2a:26:22:d1:d5:53:40:37:b7:e1:df:3e:b8:1f:
22:c8:1c:c5:7c:ec:d0:f2:92:c8:d7:0c:11:75:ca:ad:2d:f6:
7e:e2:48:26:8b:01:5d:dd:18:a6:d8:13:f9:68:b6:14:9e:66:
c9:6b:4d:d0:b6:95:59:9c:e3:0a:0c:55:02:a3:69:f4:fa:20:
fe:4d:55:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9Ja5ZP2A/33Wfe8ofbphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDE2NzgxYmNhNjRjMmIyMzY0MzRlZGVmZmU2ZTQ1MmU3
MTYyZDQwHhcNMjYwNDI3MDgwMDUxWhcNMjYwNDI4MDgwMDUxWjAzMTEwLwYDVQQD
Eyg1MjkxYjBjMzEzNDIxZDIwMTgwZDhhNThmNDM4MGQyMWU0ZmY2MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzWzQGhN1ITOtH3BO3QgmZ2i7c5I
kOgEn8POCnPYs4SKfdNrmFw30+tP2Lb9c5PrBSyVEF+EkE1hC3v9XbFOaib30iJm
oIsbv/QZg/em5fzvBBm894i5BRda+8DCsKKTJ1Jgt0ihvyeXkI/w3ymZUqsWHfcT
BbGTZyjIa0/W0ZMZGSzYDyCAC3ArxnVr2kQD09c0fOVZWylYzN77FkQCiTxetSgL
6QjOjntiHi5FYS3cWHCMctOCWYaQfBaZ8RBdurF8gPu14JbVbSHz7pQ7dGTaIRkJ
uub+wuHkWp7uaKTFRiYf85p3CijT1bpfwKUnsQpM/0AzT54liRDhXW3VNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKRsMMTQh0gGA2KWPQ4DSHk/2F4MB8GA1UdIwQY
MBaAFGfRZ4G8pkwrI2Q07e/+bkUucWLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEt
YWQ1OTU1N2UyOGMyLzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEtYWQ1OTU1N2UyOGMy
LzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+bVWbFG
9nJnEIEJ7qFuB9QcTPiqz65hoioVTLBroa+UwAzRAd7NmM5kHH0+CRlcWUsiBnqY
gB+8JtoWrgfS69aR+15dC3B4QJMIrnHUAFg83fSXLdRBPBGASkGA3JJFFP0JTkrz
GTI0fATN0X7wpbl52JuXvKa1exqWEC5soirKsAxUrxoevdJ1JODHec3h/jzcTjnk
1vpTWM3/zS5KqZVL6JGwnijO2JJqPxZ4Fe2T/NplzA2prSomItHVU0A3t+HfPrgf
IsgcxXzs0PKSyNcMEXXKrS32fuJIJosBXd0YptgT+Wi2FJ5myWtN0LaVWZzjCgxV
AqNp9Pog/k1V7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:59 2026 by rpki-client