Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: M2FYc9GiniZiNilCqLZ5pavvtsPt/Gev/a9Fo2899aY=
Subject key identifier: 73:64:D1:C7:DC:E3:BA:43:9F:1B:2E:D7:08:52:F5:2D:B0:32:0E:AC
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019D273AA165B209E7D403AEDD08288388CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: 3kDRvhyYGLhqA-55XbpAGrLNvl0.roa (hash: Kd1IvjvDoUSLBaI4Td/hVyTLL9UmLBvq34CNcLf8TLU=)
2: QApS9RyloD4NoDnpEa95FuDk1ZI.roa (hash: CiFqNnH0ZASzXfep2jny9mXvFUeXbEdlqNdwXPVsg/I=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: JTshwQRsrEMm/NZxJUgJcdJBx4icwND9KfF4jXrIQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a1:65:b2:09:e7:d4:03:ae:dd:08:28:83:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=7364d1c7dce3ba439f1b2ed70852f52db0320eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:aa:97:dc:93:25:8a:d6:25:6f:c4:14:b9:
07:79:5b:6f:ad:64:37:e3:19:96:c1:1a:03:f2:e1:
0e:e3:34:a6:5a:7a:af:18:1f:83:b6:31:e5:4d:ce:
bf:6b:1d:86:6d:98:56:44:2f:49:68:12:82:73:63:
4e:3c:bc:a1:63:50:3e:01:48:25:47:04:b5:ef:e0:
13:9d:7a:4a:be:02:ed:b3:88:32:b8:2d:38:4b:97:
56:1e:64:1d:a6:d9:a9:56:80:16:b4:6f:2d:40:c1:
e5:d6:9a:2c:c6:10:11:9e:d2:db:13:77:36:90:aa:
fc:13:3c:f2:6c:d3:53:fd:6a:18:ba:c2:19:10:83:
43:70:d0:16:7c:00:74:3d:18:b6:0d:90:eb:af:42:
14:cd:32:d8:d1:dc:95:83:50:c1:3c:b0:55:fb:d0:
49:67:9b:08:75:44:ec:5d:76:94:20:8f:de:b1:00:
e1:a8:6d:9e:a5:5e:bf:79:dd:eb:49:6e:05:4f:70:
96:a0:d4:62:08:dc:b3:32:9f:60:47:04:3e:bd:a9:
6a:3e:32:37:4e:3d:07:4c:ad:c1:13:89:57:b5:25:
ac:12:77:55:fd:44:c5:61:8a:6a:f8:1d:5d:57:c9:
c3:93:39:e2:02:15:e1:cb:90:81:21:24:46:29:49:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:D1:C7:DC:E3:BA:43:9F:1B:2E:D7:08:52:F5:2D:B0:32:0E:AC
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4e:c6:2e:b4:a8:87:a2:74:08:95:31:1c:e5:23:19:0f:af:
2a:6b:32:14:b0:b1:71:c6:4f:5a:21:5a:f1:98:2e:cf:4c:49:
00:d8:4c:fa:f3:dd:a8:ea:5e:98:72:f2:8c:82:99:02:d4:b0:
d6:a6:72:1e:82:30:eb:62:8f:e5:7c:36:11:45:22:6a:42:aa:
3a:52:b2:89:09:e6:9e:b6:b4:6d:38:a9:8d:1f:43:ee:5a:38:
90:a1:f5:68:98:d4:f8:ce:77:a7:0c:ae:8e:fe:f8:de:cc:c1:
6f:e2:d7:f4:1f:4e:8b:06:60:0b:64:cf:de:e4:53:fa:bb:21:
ac:50:76:d6:42:8f:2f:85:9a:ea:5c:b5:10:c5:b3:5d:63:99:
44:0a:47:1b:a1:79:a3:d1:1b:c4:79:eb:58:0d:73:5f:a3:34:
e1:88:ae:c0:96:5e:00:7a:c6:b2:d5:26:fa:d8:a3:06:6b:83:
e8:fc:99:b1:c1:d0:89:c4:35:7f:a7:c3:62:04:47:d3:1f:fb:
d6:b9:11:40:36:b6:a0:8c:ff:a3:28:36:da:ef:e7:c4:00:64:
62:6b:5a:f5:77:13:c4:e6:15:e7:af:56:67:72:1d:a7:bb:cd:
d7:9a:1b:37:24:92:f3:9f:a1:18:9f:c2:7d:5a:9e:aa:5d:93:
fc:25:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:04 2026 by rpki-client