Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: sEp0cMZ7VFrMDak6Rd2icpPIp31biY5Br2y0RtJ24ds=
Subject key identifier: 5B:47:C3:2C:DC:F4:62:37:06:C9:C3:68:FE:83:A0:F2:8C:F4:D7:F7
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 019D258424C8BC5C9207B193FB73199AE753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 1657
Signing time: Wed 25 Mar 2026 15:01:50 +0000
Manifest this update: Wed 25 Mar 2026 15:01:50 +0000
Manifest next update: Thu 26 Mar 2026 15:01:50 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: oOyav6qDbc8fiw7FNjLTT04vPy4fKmiA1aH9Yxm5vMI=)
2: aZozQbsLNzWTWh979aC5KVoomjc.roa (hash: khyaB+xGbWO3xIBxNeT7Qhtel/gluFX742TffrR7Ijw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:24:c8:bc:5c:92:07:b1:93:fb:73:19:9a:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Mar 25 15:01:50 2026 GMT
Not After : Mar 26 15:01:50 2026 GMT
Subject: CN=5b47c32cdcf4623706c9c368fe83a0f28cf4d7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:2a:36:aa:fa:7b:9d:e5:0b:6a:6f:17:c9:
ea:55:e9:45:87:d3:12:d3:f9:f2:76:e6:38:07:ff:
28:c3:66:b0:bf:5b:f1:48:c4:a2:35:a7:66:9a:09:
8c:e6:de:4f:a0:91:70:a6:ec:16:11:d5:15:15:e3:
e6:06:00:08:52:87:e6:a9:88:3c:ee:2e:47:54:f1:
8d:28:29:d3:d3:68:07:9c:43:3f:a6:35:75:b9:26:
b1:27:13:aa:b2:bf:c6:62:19:2a:3e:fc:5a:4f:f6:
05:1a:b2:87:f2:65:98:82:d6:a1:b5:09:62:75:8d:
f8:8b:71:9a:c4:12:cc:63:63:13:e0:4f:a6:d5:33:
4c:60:1f:cb:fb:c3:f8:27:48:61:af:75:af:f3:bb:
99:d6:fe:a4:a5:63:80:6d:e0:96:2d:ef:0b:1a:e5:
d6:73:59:68:9a:4c:fc:0a:24:81:08:3d:04:3d:53:
48:84:fd:e1:5b:92:8a:e8:18:6e:32:29:a7:fe:0e:
84:0c:d0:2a:49:29:60:32:58:04:40:40:a7:4f:04:
a7:70:75:72:99:08:e3:90:75:cb:35:5e:24:f1:c0:
1c:f4:21:e2:9b:2f:10:98:2c:d7:d8:fe:66:7e:7f:
9c:68:ab:89:68:ab:19:95:9a:67:7d:ee:ed:4d:ee:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:C3:2C:DC:F4:62:37:06:C9:C3:68:FE:83:A0:F2:8C:F4:D7:F7
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d3:01:56:07:5d:a4:e5:28:05:ab:61:be:7b:ec:b7:c4:29:
a9:f8:f2:01:d8:0d:ec:4a:a8:7b:35:2c:76:27:10:73:ff:a5:
f4:10:b1:1f:61:87:dd:10:2e:b6:d3:79:22:99:84:7a:b3:54:
eb:7a:35:cd:d9:f0:07:6a:f9:f6:6a:9b:63:dc:89:f7:17:e1:
04:8e:04:32:4a:44:62:bb:14:0d:dd:2e:a9:3b:67:eb:a3:a9:
41:6d:bc:22:cb:e2:37:44:64:82:67:19:82:80:38:d7:07:9f:
d1:74:d9:89:2d:58:61:b5:af:58:c0:87:4d:19:04:6b:64:2b:
ab:59:e8:47:d2:52:4f:79:84:aa:18:4c:7e:54:fd:5f:19:9a:
49:cc:c9:4d:a3:54:6b:a7:e5:1c:b0:b7:34:b6:31:66:f8:70:
7b:c6:ac:09:af:bf:bc:c9:8b:31:f2:93:c7:95:9c:ba:f6:bd:
8d:86:bc:f3:e6:c3:44:f3:82:60:60:90:57:8b:f9:e2:0c:f5:
01:3b:26:23:31:09:99:fe:9a:8d:52:1f:e6:e6:e1:b5:b4:bf:
52:c3:23:93:14:86:7c:45:0d:18:c8:db:a8:56:60:40:9c:71:
b8:16:4e:df:18:b5:ae:00:ca:77:04:8d:04:2c:ea:6f:77:c4:
99:70:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:41 2026 by rpki-client