Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: C/enXO8H3JJN8yyPyTP4SW2v9emd19QXLkti/bybB/g=
Subject key identifier: E3:04:0E:F7:DD:0F:11:9C:2E:2E:7B:96:E0:6E:E7:BE:DA:D2:1B:72
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 01A1371175A4C7EA563A3099FCDF13B26C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1AA7
Signing time: Tue 13 Oct 2026 21:00:53 +0000
Manifest this update: Tue 13 Oct 2026 21:00:53 +0000
Manifest next update: Wed 14 Oct 2026 21:00:53 +0000
Files and hashes: 1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: bTk1bx57QTWdGVM9s3rgROAU3R6EdXvaEkqsQSMYmnU=)
5: nfa8lcMTUWIbtIpuf80s2YziubY.roa (hash: hUm8YjaYLbHJUISE3EmfzpSWnBzmCV6l9EAAD3oXKsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:75:a4:c7:ea:56:3a:30:99:fc:df:13:b2:6c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Oct 13 21:00:53 2026 GMT
Not After : Oct 14 21:00:53 2026 GMT
Subject: CN=e3040ef7dd0f119c2e2e7b96e06ee7bedad21b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:a7:09:cb:be:3c:01:b8:14:21:89:05:a4:
87:f2:6f:57:a8:ab:6b:98:b3:0a:2d:f8:c4:c4:ef:
34:1d:76:eb:5f:6d:66:02:d7:af:75:52:f1:e9:93:
eb:5f:ad:e1:ee:52:8e:4e:94:e0:e9:73:00:1a:33:
b8:4e:b1:95:0a:c3:f5:3c:28:a7:97:07:5b:55:05:
74:88:90:ad:9f:18:02:a0:ed:9f:0b:05:12:85:f2:
3e:b4:62:de:31:2b:8a:fa:ec:f2:b8:94:ea:aa:2a:
80:e4:0d:03:22:e7:6d:6e:eb:be:00:bb:63:07:87:
9d:c9:95:31:27:90:db:17:dc:3a:69:53:a1:ef:ec:
1c:c2:08:dc:aa:ce:2b:66:cb:df:f6:fd:00:96:5b:
16:61:c7:7d:86:d7:b4:18:8d:9c:4b:06:9d:1e:af:
11:88:f9:ca:0b:dd:f1:76:a6:97:69:ab:cc:49:94:
a6:81:02:11:de:47:ac:a0:d7:53:97:5f:a1:bf:27:
87:25:2b:d6:89:b3:c8:25:c2:7b:22:09:5b:42:7d:
5d:32:fa:d0:61:e9:d7:fd:e7:57:73:7d:8e:4a:b7:
0b:6d:30:3b:57:a6:e1:39:7e:3e:15:be:8e:22:73:
bf:53:cd:f7:51:df:c7:b4:a2:27:43:6c:b5:31:9d:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:0E:F7:DD:0F:11:9C:2E:2E:7B:96:E0:6E:E7:BE:DA:D2:1B:72
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fa:38:d6:32:d9:34:2f:af:e7:ca:51:61:36:54:a2:8d:9d:
04:7e:5f:81:57:d1:9b:49:be:63:b6:ad:2a:22:fe:70:83:84:
b3:06:b0:d4:16:b0:4d:50:96:9f:7f:44:a1:63:1f:e8:f4:63:
64:f5:2a:40:aa:b0:4f:38:8e:85:e7:bd:ac:47:9e:8a:98:f3:
10:4d:ff:9c:63:ca:e2:94:14:1a:ca:8b:5f:74:55:ab:b3:60:
f0:c7:62:32:67:e7:fd:20:94:76:b0:0a:19:30:9f:e6:09:91:
e6:a3:1f:44:13:c1:f0:3c:28:20:6f:a0:55:8c:4d:62:97:e9:
09:ec:c3:6f:67:6d:59:bc:b0:31:19:04:b1:0e:c6:0a:b7:84:
9c:03:b1:e3:e1:6c:4a:44:56:0d:47:9a:c3:cf:0e:ac:f8:06:
9b:34:9d:c9:5d:90:05:5a:68:48:bd:35:40:2f:f4:8d:89:5a:
50:a0:07:c4:eb:cc:04:67:8f:7b:d7:e5:75:fa:cd:68:0a:de:
d0:cc:78:79:ae:28:4c:65:a5:74:5f:ed:45:3a:e6:ff:44:c0:
16:93:ff:f6:41:aa:0f:73:33:cf:a2:17:41:78:c3:29:cf:75:
5f:f4:00:5f:a0:47:c7:57:3a:c9:a2:94:53:b2:7e:93:5a:ed:
14:d6:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:09:58 2026 by rpki-client