Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: b/PL2g2cff9clXahwecqqQpxpOiSCt3FGSNiN9F23zE=
Subject key identifier: 30:2B:FD:70:DB:1F:F8:EB:40:C3:C3:17:D9:54:31:96:4A:4A:7E:0B
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019D2A3C599367B8205533A5D6B9FAF0026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 13:01:31 +0000
Manifest this update: Thu 26 Mar 2026 13:01:31 +0000
Manifest next update: Fri 27 Mar 2026 13:01:31 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: rUqzKEfvP3xJBRRW/vqL9pBxizQqtM+nA4Uma8eQec0=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:59:93:67:b8:20:55:33:a5:d6:b9:fa:f0:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Mar 26 13:01:31 2026 GMT
Not After : Mar 27 13:01:31 2026 GMT
Subject: CN=302bfd70db1ff8eb40c3c317d95431964a4a7e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:91:85:ba:b0:da:3b:7b:9f:0c:d2:85:b4:
65:0d:55:94:7c:ea:c4:fe:28:82:b5:05:60:27:27:
bc:27:36:68:37:1a:86:39:41:05:9c:2d:73:e8:81:
08:16:5a:ee:ec:e8:e4:c0:b3:00:56:cc:b5:74:b7:
63:a7:bb:de:ef:fe:bf:75:3f:22:80:1a:16:5a:f6:
f8:4b:36:3b:56:17:74:47:89:d8:ab:f0:4d:24:4a:
20:43:cc:33:9a:1b:d1:dc:ea:ea:de:20:49:b4:bf:
2e:42:22:4a:55:06:e0:70:80:f5:d0:17:0f:6e:90:
a2:6d:78:cb:c7:dd:00:57:b6:b7:c2:47:58:74:72:
60:c9:96:22:57:76:f9:02:86:ac:29:b4:72:c3:d6:
94:4c:9b:db:8e:43:7b:b2:99:0a:58:f2:77:30:23:
ef:c9:89:44:3d:76:20:d7:d9:f5:97:5d:3a:ac:e8:
ae:be:b6:67:ea:52:da:0d:66:9d:2d:a6:69:2f:de:
0c:9e:1b:10:c3:c9:8c:c5:05:c0:3d:72:74:a1:98:
25:ea:a5:7e:d6:90:f9:a9:58:10:93:09:e6:48:3c:
72:3d:79:2b:e2:79:da:5e:43:9f:62:4b:28:40:a0:
43:7c:60:e0:a3:0b:d7:ed:96:91:be:cd:8e:f1:ea:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:FD:70:DB:1F:F8:EB:40:C3:C3:17:D9:54:31:96:4A:4A:7E:0B
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:02:8d:c9:de:6e:4d:f2:cf:e5:53:56:65:d6:54:ef:44:a2:
9e:f8:db:b6:1e:54:c1:42:e7:24:31:87:ff:92:ff:a2:3a:16:
d3:39:b6:cc:4b:82:c3:22:83:d2:10:36:50:51:5e:9a:0a:31:
06:c1:ea:f3:86:7d:f2:d7:ab:1b:0d:6e:70:71:25:ca:4f:a6:
c5:37:93:c2:30:18:b0:ad:24:d0:cb:6b:6e:29:24:5d:5c:61:
1e:9b:80:88:0d:49:b9:4d:a5:33:f1:c7:87:23:c5:49:00:68:
6a:c0:9c:30:40:de:e8:5a:7c:cd:f3:15:1f:8d:33:27:82:99:
2e:32:32:58:28:ce:03:c5:31:a6:58:20:27:2e:cf:82:36:26:
4f:1e:65:12:ac:c7:c6:0c:7b:7a:59:18:de:23:59:d0:a3:30:
88:d3:27:32:f1:b9:1f:a5:84:c8:5c:9f:4a:7d:18:c0:55:6c:
88:d8:40:fd:db:68:66:84:f8:d0:4d:11:13:b0:c3:33:53:f6:
d8:f6:9a:c4:6e:63:14:52:95:ff:1b:8c:03:76:83:43:4f:32:
92:77:9c:25:3e:a8:8a:8d:52:41:fb:ce:5a:94:70:64:a3:fe:
6d:ab:14:64:b0:73:0b:7b:f0:7a:f6:9f:28:d3:43:45:36:fe:
6d:a8:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:01 2026 by rpki-client