Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: JndGKU44hVYE63TB7PkaG2mpz2Tzi8qH9bFXUU35+gY=
Subject key identifier: 18:3C:C4:77:01:CE:A1:3B:19:02:1B:1E:49:C1:5D:29:95:39:CE:72
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019E1DC7B05745A334387006468014C44C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0D1A
Signing time: Tue 12 May 2026 20:01:26 +0000
Manifest this update: Tue 12 May 2026 20:01:26 +0000
Manifest next update: Wed 13 May 2026 20:01:26 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: LIQqBKiLO4hi4xgEKVPXThzRKNtmJU2PLe+58mfC3j4=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:b0:57:45:a3:34:38:70:06:46:80:14:c4:4c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: May 12 20:01:26 2026 GMT
Not After : May 13 20:01:26 2026 GMT
Subject: CN=183cc47701cea13b19021b1e49c15d299539ce72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:a0:2d:16:5a:ec:f0:0a:36:f1:b6:ee:a3:
33:f6:d4:ba:be:e4:11:e2:c2:11:39:23:c8:35:97:
b9:93:43:4a:96:68:0a:78:30:e6:cd:60:b7:08:7c:
12:45:e3:1e:1c:a4:f1:d2:84:a5:4c:db:06:95:dc:
22:11:e3:86:d8:4d:6f:c7:25:2f:44:36:8e:fc:43:
e1:47:c0:bb:61:70:21:d8:1e:6c:40:78:67:ed:ef:
24:dc:65:74:47:aa:fa:ab:26:63:a7:8d:80:23:81:
fd:54:77:f7:6c:9a:ec:fc:3f:52:18:84:da:05:e4:
4c:11:ef:7a:03:11:56:ee:41:e1:20:7f:b2:40:b9:
b2:4d:cb:64:04:1c:a2:f1:3c:c7:50:a1:0f:5a:52:
35:b5:0b:b1:39:0c:00:d5:33:34:0a:ca:56:8e:1e:
70:18:0b:0a:fc:69:17:72:9d:6f:b7:8c:14:85:e8:
ec:6e:fd:9d:41:37:c0:66:9c:0b:53:8b:57:f3:fa:
ab:47:41:98:41:67:82:4c:b2:27:b3:e3:b7:96:ac:
18:0b:91:f8:41:74:b5:e7:48:0b:f6:5a:21:08:af:
48:2a:a4:20:34:89:71:ff:ad:c9:41:97:00:71:e1:
41:4a:0e:15:39:1c:6f:86:01:7f:8a:c8:7b:b3:b3:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3C:C4:77:01:CE:A1:3B:19:02:1B:1E:49:C1:5D:29:95:39:CE:72
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:69:c2:2c:83:81:e9:e8:81:d5:ef:ef:78:e8:91:40:f9:10:
b0:e3:83:33:2d:34:ea:27:9b:9a:cb:f1:82:fa:7e:da:8f:e9:
e8:e7:29:4c:e8:e5:fd:10:72:7a:ce:6a:d0:99:96:14:2c:92:
7e:cf:da:e9:16:d7:74:25:e4:d4:04:2e:b3:d4:e7:2a:c8:6c:
30:61:03:f4:69:6e:eb:07:8a:d0:6d:dd:72:d1:e5:b6:c5:55:
4d:79:16:38:b8:79:1b:6c:ae:8a:ef:c5:20:e7:1f:c2:79:9c:
c7:19:e8:7e:9b:4a:ab:3b:b9:9a:21:8c:c4:fa:de:e2:0e:d4:
6d:17:33:26:01:3c:40:52:2c:ed:a9:92:db:f7:f4:cf:e7:e9:
4a:cd:3b:9b:4c:dd:81:45:bb:c0:d7:b5:5f:58:53:a7:ad:04:
a6:73:79:e8:3f:d8:ae:d6:d1:40:82:5e:4d:d0:6a:52:f0:a2:
fd:95:9b:db:c6:ce:43:ea:65:55:48:ec:01:0c:2e:d7:c0:6e:
8f:f6:dd:22:6e:1e:5e:e2:b9:2c:95:56:a5:37:d0:30:1d:40:
fa:8a:1e:6d:21:a0:35:b1:24:74:06:45:cd:2e:eb:f2:e6:e9:
ce:29:eb:ce:b2:ad:17:0b:44:ca:5b:be:94:3a:13:90:0e:ab:
75:eb:93:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx7BXRaM0OHAGRoAUxEyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk
MjEzMDUwHhcNMjYwNTEyMjAwMTI2WhcNMjYwNTEzMjAwMTI2WjAzMTEwLwYDVQQD
EygxODNjYzQ3NzAxY2VhMTNiMTkwMjFiMWU0OWMxNWQyOTk1MzljZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj2gLRZa7PAKNvG27qMz9tS6vuQR
4sIROSPINZe5k0NKlmgKeDDmzWC3CHwSReMeHKTx0oSlTNsGldwiEeOG2E1vxyUv
RDaO/EPhR8C7YXAh2B5sQHhn7e8k3GV0R6r6qyZjp42AI4H9VHf3bJrs/D9SGITa
BeRMEe96AxFW7kHhIH+yQLmyTctkBByi8TzHUKEPWlI1tQuxOQwA1TM0CspWjh5w
GAsK/GkXcp1vt4wUhejsbv2dQTfAZpwLU4tX8/qrR0GYQWeCTLIns+O3lqwYC5H4
QXS150gL9lohCK9IKqQgNIlx/63JQZcAceFBSg4VORxvhgF/ish7s7MmfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg8xHcBzqE7GQIbHknBXSmVOc5yMB8GA1UdIwQY
MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt
MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh
LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGnCLIOB
6eiB1e/veOiRQPkQsOODMy006iebmsvxgvp+2o/p6OcpTOjl/RByes5q0JmWFCyS
fs/a6RbXdCXk1AQus9TnKshsMGED9Glu6weK0G3dctHltsVVTXkWOLh5G2yuiu/F
IOcfwnmcxxnofptKqzu5miGMxPre4g7UbRczJgE8QFIs7amS2/f0z+fpSs07m0zd
gUW7wNe1X1hTp60EpnN56D/YrtbRQIJeTdBqUvCi/ZWb28bOQ+plVUjsAQwu18Bu
j/bdIm4eXuK5LJVWpTfQMB1A+ooebSGgNbEkdAZFzS7r8ubpzinrzrKtFwtEylu+
lDoTkA6rdeuTAA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:49:32 2026 by rpki-client