Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: qUQM15xeYagFZtUO32KuHTHiorII4fLYPFctwFPiVDY=
Subject key identifier: 02:73:08:1E:A8:20:61:6C:F0:51:47:EE:F6:CC:A6:B4:30:BE:C3:09
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 019D27E04BDB23E01FD646C641477C1779DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 10E6
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: Wcz0ftkKeuX2k1o_TiQ_1hXFk58.roa (hash: iZlk4p7VXTU6ENrDviKNzDvlEi8TVpmFuM/Rky4WSog=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: 5IWbeTx6DomusbJZ7rRg69Wn83MqsPvXTTbE4Sr7Uuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4b:db:23:e0:1f:d6:46:c6:41:47:7c:17:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=0273081ea820616cf05147eef6cca6b430bec309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:1d:f6:f2:77:eb:e6:cf:9d:27:1a:d2:2f:
32:60:78:4d:46:66:90:08:1b:9e:e0:45:c9:30:f8:
75:de:75:fc:70:0c:a6:a0:d7:ba:00:41:39:37:ca:
0b:d5:5b:51:e4:1b:54:f1:fd:a2:a4:75:02:e2:47:
c5:31:16:c2:f7:de:e1:d9:6d:c6:37:c3:68:fc:78:
c9:ee:e2:d4:dc:0c:15:fb:0e:07:51:4c:bf:57:cd:
98:31:16:12:6a:aa:d9:6b:b2:a6:ab:a1:37:95:a9:
23:31:c9:39:5d:fe:90:b2:92:5d:91:15:8a:61:36:
e4:fb:a8:e8:3d:36:1f:55:3e:ff:01:94:65:c4:27:
66:ab:b1:ce:5d:61:d3:27:a2:45:4e:b0:2d:e3:38:
1f:95:db:6c:d3:9d:8a:46:59:df:2f:5e:5d:7a:78:
db:d5:27:31:d9:30:64:f9:1a:fe:ce:4c:59:07:ff:
a6:50:48:06:aa:5e:ed:cc:59:7a:51:c2:b7:2f:36:
60:a3:77:75:be:0e:26:91:47:42:11:53:fd:89:63:
e9:ba:a6:b4:99:08:e4:f8:19:c0:25:51:0d:b3:eb:
b5:23:9c:92:6d:10:29:75:97:8c:e2:95:6d:c5:43:
4a:d5:f9:61:8c:bb:c4:77:06:2e:cd:dc:14:93:66:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:08:1E:A8:20:61:6C:F0:51:47:EE:F6:CC:A6:B4:30:BE:C3:09
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:e1:fb:1a:fd:72:d6:23:82:64:52:41:04:9d:f6:de:34:
e4:22:d3:43:38:00:a0:6c:91:fe:f5:bd:f9:10:53:ac:74:b0:
8a:3b:55:84:46:a0:46:ed:a6:e3:97:8f:ff:28:bc:cb:ff:f9:
46:bf:7e:f3:5d:5b:8a:e1:ad:aa:ae:e6:59:23:b0:19:8b:d9:
46:79:10:20:7a:c2:3e:37:68:70:c3:c7:43:d6:a7:8b:7c:56:
ef:22:ec:98:5d:52:d2:5e:be:69:95:37:b0:a7:16:07:86:f3:
fe:48:7d:7d:8f:c9:c0:42:99:f6:07:14:30:1b:15:b4:00:1f:
a4:18:e0:67:b1:94:44:e6:e0:aa:ca:26:3c:9c:5d:a1:e1:c3:
a6:6f:80:19:4c:4a:b9:de:a6:35:59:f1:52:2a:08:76:53:d1:
0d:7e:5e:fa:a0:66:ea:a6:ff:b9:a3:b5:9e:dd:30:1c:a5:50:
90:dd:36:9c:99:b5:5d:f6:15:97:22:44:0d:be:ea:bd:cd:28:
13:2b:e3:17:26:5e:c4:d0:2f:b0:60:a0:2a:0a:d7:8c:9a:ec:
a0:03:c6:9b:2c:ec:d5:4f:bd:f9:52:3d:76:ad:fb:a9:85:95:
1c:e8:a8:5d:c8:dc:c7:a2:49:2f:ad:54:3d:1f:bd:e4:8f:75:
f6:11:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:46 2026 by rpki-client