Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: qO7XycLUlJqkQIL03IELp615tZ0R4JxEzJVEH5XSnHc=
Subject key identifier: D6:EA:73:25:4C:B1:A1:71:4B:50:4B:73:71:D2:AB:3B:67:75:31:82
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019D992B7F86939C6FC5FD66C57BD71311C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0CAB
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: tF1otIV5H5dNCUxrXjNdaVQGp9wNPcdM4RMtuoUHXbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7f:86:93:9c:6f:c5:fd:66:c5:7b:d7:13:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=d6ea73254cb1a1714b504b7371d2ab3b67753182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:83:78:4f:12:82:47:b9:98:73:3d:f9:d9:
c4:67:0d:59:2b:0f:4e:f9:6f:c4:e5:f3:3d:48:85:
95:b9:1c:28:fb:be:57:bb:59:ab:1f:bb:49:92:4c:
bc:52:4e:28:05:09:71:65:a5:6f:ef:e0:be:b7:8c:
15:20:ce:88:47:09:5e:f8:6c:94:6b:ac:18:1f:b9:
f3:c6:7b:52:7b:94:9b:a9:e4:4a:6c:89:3a:6a:f4:
bf:53:88:82:c4:88:e8:89:88:aa:ae:a7:31:7e:e4:
fe:64:47:8f:46:97:85:31:ad:e8:65:f6:4f:29:7d:
55:a9:0a:e7:34:51:b3:f9:d4:89:f0:9f:27:dd:e3:
d6:7d:fa:b3:50:1a:88:51:05:2c:3c:34:32:54:66:
21:71:a4:e5:f2:36:8a:34:a1:3c:12:2c:91:32:70:
86:00:e5:fa:a0:ec:4e:ba:c5:a2:02:07:ce:a6:37:
6a:f3:1f:76:a2:aa:5f:af:01:dd:79:72:e0:af:35:
f8:4d:36:d0:22:39:40:2c:7f:b9:3a:87:3c:45:3f:
fb:4e:78:5f:e1:de:58:b6:2a:6f:b9:6a:4a:81:ae:
3c:00:dd:09:38:90:1d:d4:6f:42:c7:5d:17:5f:24:
f2:ad:56:38:0b:c3:3c:39:8b:12:02:4e:d0:15:c9:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:73:25:4C:B1:A1:71:4B:50:4B:73:71:D2:AB:3B:67:75:31:82
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1f:1b:eb:0f:20:cc:bb:5b:fd:14:d3:75:de:27:1b:3a:44:
42:46:fa:af:f4:b7:6c:b4:cc:53:6f:a5:af:92:db:69:d9:80:
f7:d0:fb:81:0f:12:76:ef:2d:df:0f:50:52:43:b9:95:20:9b:
e9:80:94:b7:eb:00:33:6e:77:f9:61:03:45:1f:3a:85:4d:4e:
48:29:b3:19:8f:25:25:66:1d:3f:bc:75:8a:b4:05:8e:b2:17:
fd:df:a2:5b:c4:0f:1b:71:e6:c5:3d:d7:97:ac:47:e7:49:9f:
93:97:93:be:ac:a2:2f:a8:3a:82:2a:e5:79:1b:c9:2c:20:c0:
55:d2:0e:b3:68:8f:08:54:bb:d6:1d:ad:27:9b:4e:c0:76:66:
8d:1a:c4:d5:15:71:52:18:51:2a:85:21:d1:aa:16:17:c5:d6:
58:12:fe:7c:11:c0:ed:bf:60:27:35:e8:cc:94:5c:8b:90:b6:
df:6f:76:cf:b0:a4:19:3b:d5:8e:e8:da:9a:19:37:14:18:d4:
68:84:3b:04:46:3a:f4:a9:f4:f5:0f:30:25:6a:b0:57:c4:1e:
03:2e:38:02:a8:1d:23:f8:cb:eb:be:eb:1c:32:10:f3:e6:29:
4f:bc:74:58:82:4b:36:cd:b1:eb:5a:d4:3b:fe:7c:ba:ed:b4:
9a:21:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:10 2026 by rpki-client