Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: OELipCly3Okx0oG3v0I0xLXA9D6ftsq/sbGmp+Cu7LA=
Subject key identifier: 20:40:E2:98:3F:9F:70:F1:42:CA:BC:B0:DD:1C:2C:63:36:E3:F0:6B
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 019E1F7F0D058384A9D46C04D4F542816E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 0C1F
Signing time: Wed 13 May 2026 04:01:20 +0000
Manifest this update: Wed 13 May 2026 04:01:20 +0000
Manifest next update: Thu 14 May 2026 04:01:20 +0000
Files and hashes: 1: 3YnZtmegxXoZvb9K7_HalTViL0w.roa (hash: B1b4mNLvcXEYUbcOc3EYX+Xry/YHoo7ZiUdGbEg4AFc=)
2: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: uHHYXdD8nG6BnRdXhyd+z6SlOD0pnBrb3eLmgw+WGJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:0d:05:83:84:a9:d4:6c:04:d4:f5:42:81:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: May 13 04:01:20 2026 GMT
Not After : May 14 04:01:20 2026 GMT
Subject: CN=2040e2983f9f70f142cabcb0dd1c2c6336e3f06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:06:88:9e:66:39:e1:33:01:bc:ed:af:7a:
47:5e:7f:46:04:4a:49:a2:c9:fe:88:e6:ab:5d:e7:
49:23:b4:45:6a:b0:13:da:be:a8:bd:2a:24:5f:2d:
66:fe:42:b2:18:fb:dd:fa:ad:6b:58:04:9d:54:12:
55:31:e0:d3:27:ae:bd:79:f0:b9:fc:94:95:e6:56:
13:89:9a:62:4e:3d:63:dc:70:7c:c9:cd:ce:e5:09:
f9:c7:a4:d2:d9:de:3b:14:10:fb:39:a5:38:b1:5a:
11:18:94:1d:5c:6b:0c:b5:45:35:fc:96:64:0f:33:
57:29:c5:a9:b7:eb:58:27:36:59:2a:f1:f7:06:21:
ac:a8:a4:14:37:4b:cc:eb:7f:42:74:33:bf:84:c2:
3a:9b:6a:4d:08:3e:48:49:c8:91:e9:17:0d:bf:40:
9e:e7:8b:9a:46:d6:96:6e:f5:9d:c0:e4:c5:14:7d:
fe:12:5a:94:7d:b2:e8:1c:68:6c:e4:d0:f0:85:2d:
80:05:e8:48:03:00:53:13:f3:f2:9a:b5:d1:7f:5e:
6f:4a:4c:88:95:52:4e:97:02:c1:82:de:c9:0a:10:
64:46:05:a8:37:78:be:01:33:f5:30:76:12:46:d3:
d5:b2:d3:91:d6:fb:ec:3a:36:34:6c:2e:76:b2:53:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:40:E2:98:3F:9F:70:F1:42:CA:BC:B0:DD:1C:2C:63:36:E3:F0:6B
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:99:e1:e3:6c:b7:3a:4e:13:8e:a1:eb:84:02:c3:cd:db:8c:
cc:f7:8c:12:be:a6:ff:ce:ca:98:69:71:13:46:c7:7b:44:20:
8e:78:51:bb:36:0b:e2:a3:9f:59:76:c9:32:0b:40:bd:4d:28:
0e:98:75:33:02:90:ba:03:1f:b8:97:97:b2:8a:77:5c:84:aa:
f3:8c:91:0a:8a:ea:b2:85:6b:4e:bf:1f:71:e8:5e:d4:0f:8a:
a6:6e:5a:39:47:be:8b:a2:70:6f:22:ba:50:da:6c:f2:02:38:
4e:ae:c8:d9:69:54:76:c3:60:6f:0c:13:6e:5d:de:15:2a:7b:
d8:6e:de:46:e9:a2:f8:85:45:4c:21:15:3f:35:13:53:22:bf:
74:11:f9:62:dd:a2:9b:24:da:93:e3:cb:d8:71:09:29:42:86:
c1:5d:61:4e:a2:12:7f:17:0e:bc:66:a1:d8:98:33:d9:dd:85:
6f:e6:dd:45:4c:68:88:2d:c1:9a:e9:70:15:a9:36:1f:fa:15:
d0:5c:bb:7a:d0:d7:96:7a:c8:b0:df:fd:70:f4:84:bc:b7:6c:
fd:82:7e:5d:70:70:2c:e4:ce:39:02:cb:9a:56:eb:19:95:8c:
88:3e:c6:22:bd:7a:e9:c8:8f:12:ab:a8:de:8e:4c:d4:14:32:
1b:28:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:47 2026 by rpki-client