Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: hWNtN6bN0/lZ53qPC4n+vk8bsjg4kUOnbgb2hE+Wh0c=
Subject key identifier: 6D:AA:E5:19:D2:35:C7:FB:78:52:2A:04:9D:5E:8C:D6:EE:70:04:00
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 019D254CA021F15D630CEEF6F90A243D9117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 1010
Signing time: Wed 25 Mar 2026 14:01:11 +0000
Manifest this update: Wed 25 Mar 2026 14:01:11 +0000
Manifest next update: Thu 26 Mar 2026 14:01:11 +0000
Files and hashes: 1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: Xa4YJbwDndtzgpqQ/BuBH/lD5cVFn2FqZPDwSd4uT5w=)
3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a0:21:f1:5d:63:0c:ee:f6:f9:0a:24:3d:91:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Mar 25 14:01:11 2026 GMT
Not After : Mar 26 14:01:11 2026 GMT
Subject: CN=6daae519d235c7fb78522a049d5e8cd6ee700400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8f:1a:84:3b:aa:dc:6e:5b:5f:47:77:69:90:
c4:61:0e:ff:4a:06:dd:27:ee:64:d4:5b:65:77:3f:
42:31:9d:aa:4c:8b:b0:5f:19:77:20:33:ab:ca:34:
af:fe:0e:2f:4c:46:72:dd:e5:9d:72:ab:a5:84:c2:
0e:97:05:3b:0e:b6:12:6f:43:0d:a6:d2:b0:f7:fa:
66:23:1f:03:31:b5:35:9c:bf:fa:4f:a6:91:13:08:
59:11:3a:19:68:81:40:7f:58:d7:8f:05:c3:a1:e2:
38:9a:dd:7c:45:70:14:c3:1e:c5:b3:5c:b0:e2:51:
4a:5f:9f:d9:94:43:d8:67:84:78:59:80:41:aa:47:
7d:7f:e1:16:57:43:00:76:ec:69:b0:58:26:f8:61:
fd:38:bb:2d:e2:7c:99:20:74:03:b1:ca:58:27:34:
46:6d:7f:6a:39:0f:55:5f:86:8f:91:92:8f:e5:d6:
f2:1a:6c:56:03:18:5c:28:a8:2a:04:7a:b4:72:cf:
58:58:4f:cc:08:a4:c5:4b:fc:73:86:d2:d7:6e:b3:
b4:c4:36:a6:2f:ec:87:dd:98:84:db:6a:f2:f1:5e:
38:86:e3:b6:31:58:35:0b:c7:8f:f1:ac:0f:2f:e1:
ac:01:6c:aa:0e:74:3e:75:bb:f9:85:38:65:fd:7d:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AA:E5:19:D2:35:C7:FB:78:52:2A:04:9D:5E:8C:D6:EE:70:04:00
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:79:8c:4c:4a:79:47:35:32:a2:8a:c1:7d:01:a0:bd:bc:4d:
d2:ad:92:8e:98:54:67:de:17:5c:d8:69:f8:3a:5a:e1:f4:81:
24:e7:ed:af:45:52:be:44:c7:b2:32:cc:35:3e:6c:fa:80:8c:
78:cb:63:a1:69:bf:c4:48:d6:d6:11:c8:1f:5b:48:45:57:53:
1d:5a:d7:0d:1e:bc:2f:5a:3d:c1:86:c5:7d:82:d0:eb:70:5a:
50:3a:99:55:d8:fe:82:09:ec:9b:25:4e:53:41:43:c7:46:4f:
93:87:a2:79:09:5b:7a:33:3f:ae:ba:9f:9b:1b:6c:4e:bd:cc:
40:44:72:b4:5d:27:d5:bc:50:30:30:2a:5a:1c:a7:93:f9:6e:
ab:0a:38:c1:69:cd:f5:e5:85:07:8b:7a:d2:16:dd:7f:fb:be:
86:1e:7b:20:b2:bd:e5:dd:51:76:97:d8:bb:05:0d:8b:58:fa:
7b:0c:ed:5b:55:fb:6b:48:6c:dd:e6:a3:d6:dd:7d:ec:c7:e2:
47:ca:e8:07:34:d0:22:3b:6b:86:13:0c:f6:d0:38:b2:7e:e4:
2b:d8:55:da:d1:4e:c7:dd:c2:92:7c:aa:30:62:88:e7:32:89:
2e:6b:bd:e8:e0:1d:6b:d9:a7:9a:92:29:ab:19:30:96:a7:d1:
4d:a5:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:33 2026 by rpki-client