Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
File: Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json)
Hash identifier: B+WHKe2xVMtQaiRfxi08h+Pd04b8QY+y665y8onlKIg=
Subject key identifier: 06:73:46:C3:17:CB:B4:F5:3E:80:CD:2B:3C:91:A1:4C:75:F7:C5:AD
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 019D269618E35501D8EB7837C052F91B972B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 20:01:03 +0000
Manifest this update: Wed 25 Mar 2026 20:01:03 +0000
Manifest next update: Thu 26 Mar 2026 20:01:03 +0000
Files and hashes: 1: 8fgtqwCkJq8DgaM9f569Bs0xaxc.roa (hash: QEUkALn73LxSmFsf5evgpfdPqAtmFu8hMHpLqd8W8OA=)
2: YytdvmUqMlUYaz2rUM4035jtC1g.roa (hash: shR9sZHCpyT2KbYpD+KESwIQfMOwq9VzuzMQm7Ip8Tg=)
3: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: 6YYzM3pdCG/KeJFWRrGgM9h9lV3+kHJ85FagK1E+R1o=)
4: _rX0Pp7-maFWlmqvdtFQDE9VMd4.roa (hash: JcwoPPYbwcTSP2znNESFrTnQNOV0v0WHsf0jgmgiH6I=)
5: by-UGjZnPxHASghfMrX3xMxAH0U.roa (hash: E+h5Wx406s4BfDje+75V+He27RZ6hOR4CfZDRt1lPHI=)
6: npI4kx8XN3dD9EUfXLup5Uxufpo.roa (hash: Wo/f0yd4mja7w18dDAZVOFDWsGvRVUgoh4pNDEcSTNk=)
7: zYS-dwQtCh2dFbW4IV6hfG_8xYw.roa (hash: fhJgy4L5lI5bxEqwJcc/VgO0/xvWjnY5mfId21lwGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:18:e3:55:01:d8:eb:78:37:c0:52:f9:1b:97:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Mar 25 20:01:03 2026 GMT
Not After : Mar 26 20:01:03 2026 GMT
Subject: CN=067346c317cbb4f53e80cd2b3c91a14c75f7c5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:cb:07:c0:b4:f5:f0:8e:07:4d:36:f4:ae:
b5:28:fd:c1:da:0a:10:23:0d:31:41:f3:a4:42:41:
d6:2a:d0:33:d7:9a:30:21:d5:4e:c8:62:29:cf:e2:
50:57:b7:02:a2:6b:32:f2:34:4e:02:7b:37:ef:a8:
c4:97:e8:9b:9b:a7:28:27:b1:a2:7d:f6:45:e0:ac:
63:dc:9c:c4:54:4c:6b:2b:5b:54:89:fc:71:8a:da:
51:d4:08:e9:83:61:98:bc:77:15:b4:fc:76:31:3d:
10:01:23:bf:84:7f:b4:46:e7:cd:6c:3a:e8:c4:07:
f1:a0:a1:1e:6c:4b:99:46:23:98:a6:ce:38:e0:9e:
d1:0e:31:ee:60:43:8d:ce:8e:13:a2:f2:40:e2:db:
3d:f6:1b:25:8e:3b:50:9b:f2:97:27:b0:88:ae:a5:
7a:0e:27:d6:64:33:13:0c:4a:b9:39:47:b0:ad:88:
2f:65:fd:fd:bb:30:a9:13:27:f4:e2:d3:86:1e:0b:
1c:fb:dc:5d:dc:ad:6d:7d:c6:66:bf:de:22:24:2c:
1a:81:7b:f4:31:21:93:96:cc:f9:60:ab:d1:20:d9:
eb:97:2a:e0:99:cd:0a:68:1a:2d:1e:52:84:56:95:
5d:a7:de:ba:5f:dc:2d:19:36:bd:d2:a9:24:5f:f0:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:46:C3:17:CB:B4:F5:3E:80:CD:2B:3C:91:A1:4C:75:F7:C5:AD
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:38:02:7d:a7:2b:a0:5c:50:2e:f3:93:46:ba:75:f8:11:1d:
7e:a6:8c:e0:a1:71:48:d0:61:2d:97:e9:a1:36:66:ad:a6:6a:
c2:52:fa:b3:92:da:2d:f2:57:d5:2d:16:89:b2:46:bd:f9:7e:
95:a1:af:9b:f6:af:ac:35:a6:3c:4c:2c:34:b3:2a:8e:fd:df:
7e:6b:09:f6:cb:33:66:f1:9f:43:fb:67:b3:f1:03:25:e9:fd:
83:24:56:f9:ef:04:d8:ec:79:28:e2:9a:47:91:8f:2b:71:7b:
68:ce:df:70:a5:46:4f:9a:e2:c1:62:3b:4b:ef:f6:14:f3:00:
e4:74:f1:e6:d4:05:6b:78:bd:19:ce:09:68:01:07:74:2d:63:
3a:5f:c2:07:94:19:e2:8e:45:b7:09:86:54:99:23:87:c0:30:
58:a9:cf:fa:cc:dd:cf:7e:79:6b:fd:fc:80:e2:c7:b6:32:e5:
b6:5b:4f:16:97:c5:e0:e8:46:1e:fe:d5:e1:2f:0c:87:3b:d8:
75:74:fd:da:cc:00:0f:f1:49:0e:3c:95:96:d3:78:f5:1e:42:
8d:8f:48:37:17:f3:a4:94:9a:62:3a:4e:75:14:3f:06:d6:f7:
b9:f4:04:e4:cb:05:b1:0f:40:7b:9e:e5:d6:06:70:e8:5e:12:
b8:df:af:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlhjjVQHY63g3wFL5G5crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy
ZGFjNjgwHhcNMjYwMzI1MjAwMTAzWhcNMjYwMzI2MjAwMTAzWjAzMTEwLwYDVQQD
EygwNjczNDZjMzE3Y2JiNGY1M2U4MGNkMmIzYzkxYTE0Yzc1ZjdjNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaDLB8C09fCOB0029K61KP3B2goQ
Iw0xQfOkQkHWKtAz15owIdVOyGIpz+JQV7cComsy8jROAns376jEl+ibm6coJ7Gi
ffZF4Kxj3JzEVExrK1tUifxxitpR1Ajpg2GYvHcVtPx2MT0QASO/hH+0RufNbDro
xAfxoKEebEuZRiOYps444J7RDjHuYEONzo4TovJA4ts99hsljjtQm/KXJ7CIrqV6
DifWZDMTDEq5OUewrYgvZf39uzCpEyf04tOGHgsc+9xd3K1tfcZmv94iJCwagXv0
MSGTlsz5YKvRINnrlyrgmc0KaBotHlKEVpVdp966X9wtGTa90qkkX/BO/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZzRsMXy7T1PoDNKzyRoUx198WtMB8GA1UdIwQY
MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct
ZjBiOTYyZjUyNDE0LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0
LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjgCfacr
oFxQLvOTRrp1+BEdfqaM4KFxSNBhLZfpoTZmraZqwlL6s5LaLfJX1S0WibJGvfl+
laGvm/avrDWmPEwsNLMqjv3ffmsJ9sszZvGfQ/tns/EDJen9gyRW+e8E2Ox5KOKa
R5GPK3F7aM7fcKVGT5riwWI7S+/2FPMA5HTx5tQFa3i9Gc4JaAEHdC1jOl/CB5QZ
4o5FtwmGVJkjh8AwWKnP+szdz355a/38gOLHtjLltltPFpfF4OhGHv7V4S8MhzvY
dXT92swAD/FJDjyVltN49R5CjY9INxfzpJSaYjpOdRQ/Btb3ufQE5MsFsQ9Ae57l
1gZw6F4SuN+vOA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:26:04 2026 by rpki-client