Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: WuG03SRle7PjvGbm+Vd+e5Q1JI/NQnBOcwj0Ut13j4k=
Subject key identifier: C5:5D:AE:9B:C8:33:B4:86:00:56:5F:40:5F:38:77:D8:99:28:80:69
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019CAD904C89815D3C8C0FC5EAB7A6B67C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0C31
Signing time: Mon 02 Mar 2026 08:00:40 +0000
Manifest this update: Mon 02 Mar 2026 08:00:40 +0000
Manifest next update: Tue 03 Mar 2026 08:00:40 +0000
Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: xd+tT37RK1dRdFlsmIsl7nbCqM1Mu8VAplJvGpXY7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:4c:89:81:5d:3c:8c:0f:c5:ea:b7:a6:b6:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Mar 2 08:00:40 2026 GMT
Not After : Mar 3 08:00:40 2026 GMT
Subject: CN=c55dae9bc833b48600565f405f3877d899288069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:30:6a:c2:8e:ba:c3:aa:8b:ef:75:10:8b:
e4:b7:e3:d6:17:63:f4:d6:c7:63:80:2c:88:b5:83:
57:97:3e:c6:b7:6d:55:44:38:85:7c:ea:58:9f:55:
56:1d:5c:f7:62:cc:80:c3:35:9b:cc:af:5b:f9:40:
45:62:8a:08:b8:be:45:da:43:06:0f:9d:b7:34:0c:
6d:1f:52:0d:dd:ff:70:1b:a1:51:15:3d:60:ca:98:
96:fb:4e:33:13:81:b4:23:80:da:db:3a:75:8e:43:
53:40:0f:59:c5:8d:4e:ba:b6:7a:9b:7a:a4:8d:95:
25:e2:74:6c:25:6d:34:8b:a1:df:00:8c:a8:ab:56:
a3:3e:42:8c:96:79:1d:e3:b7:48:34:67:c7:fe:10:
3c:d6:3e:d8:57:9a:28:30:0d:fe:ac:34:d0:c7:26:
43:0f:9e:ef:0a:67:ca:cc:6e:38:d7:43:c7:19:c5:
20:8a:10:8e:f7:2f:99:ef:87:30:8e:49:dc:83:06:
81:e5:23:ed:30:c2:3d:fd:82:41:21:66:8e:80:f0:
40:15:de:15:e7:b6:01:c7:5c:d4:ad:d9:ff:90:8a:
a7:45:66:72:fd:49:c7:08:ac:8a:ff:1c:2d:e1:06:
8b:56:bc:f9:d7:24:4a:ca:a0:75:cc:a4:a4:d0:1d:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:AE:9B:C8:33:B4:86:00:56:5F:40:5F:38:77:D8:99:28:80:69
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:55:c5:83:94:db:dc:3a:35:88:d4:ad:f0:db:86:22:67:f7:
5c:fc:50:dd:48:e6:62:f5:ae:cc:e9:ac:fd:a1:42:1b:4d:ba:
2a:39:ca:df:56:63:28:a1:81:fc:4a:bd:6f:fb:af:0e:b5:7d:
c4:56:fd:44:13:d0:8f:b5:eb:61:bd:ab:ff:02:f0:11:cd:e7:
da:4c:51:e1:56:2a:f0:c9:50:48:e8:1e:15:3a:2b:c1:f0:df:
7e:a0:ac:36:39:cf:dc:be:8d:ef:f1:3b:b9:bd:9c:1f:0a:41:
22:37:6b:1f:2a:9b:82:c7:15:e7:9d:09:6d:ef:7d:84:18:b5:
d9:a3:b4:77:28:dc:de:29:a9:00:5d:00:a8:6c:a2:a3:72:d6:
f1:1a:81:0a:40:42:05:45:8e:12:cd:80:7e:06:c7:82:19:94:
9d:f4:7f:a8:70:92:3f:c6:ab:c9:5e:fe:17:0a:e9:ac:78:92:
f9:b5:6e:33:a7:9c:8e:d6:33:38:e5:c5:3e:3e:22:8b:21:94:
7e:60:94:4f:5c:dd:bc:1a:b0:80:43:b2:c8:e9:1a:32:5b:db:
8e:ac:ec:7d:b2:dc:98:a9:4b:24:48:1b:a7:eb:d3:b6:22:2a:
d4:5f:64:67:4a:d4:52:22:ce:75:c7:28:14:ef:15:bb:b6:f1:
7f:57:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:26 2026 by rpki-client