Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: gCVGg3m9cZ+n5Yb7JH9k8zNy7XsLYSGL/qxHhIueHI8=
Subject key identifier: 17:3A:F9:A3:10:24:62:6B:E5:83:4E:8F:FD:61:30:AA:88:25:65:50
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 01A0C632B72BA1F31F03DECDBE873DB8293B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0E50
Signing time: Mon 21 Sep 2026 23:00:07 +0000
Manifest this update: Mon 21 Sep 2026 23:00:07 +0000
Manifest next update: Tue 22 Sep 2026 23:00:07 +0000
Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: 5ITucwog2wNrClR4kNlgMML1PSJtE8qmfKri2BaOjEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:b7:2b:a1:f3:1f:03:de:cd:be:87:3d:b8:29:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Sep 21 23:00:07 2026 GMT
Not After : Sep 22 23:00:07 2026 GMT
Subject: CN=173af9a31024626be5834e8ffd6130aa88256550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:0e:89:e6:bb:ce:f0:17:33:5f:05:57:3d:
4a:61:5c:aa:f3:0c:ea:b6:65:cb:42:93:24:e7:c5:
3b:a4:12:21:7e:e0:f6:e5:5c:67:0a:6a:9d:10:3b:
97:d1:9b:8b:2e:2a:3c:cb:08:77:a6:3b:62:3a:3d:
f1:b6:7c:0c:6c:79:d8:d5:69:1c:35:10:df:0f:6c:
f1:a5:b8:d2:27:f3:38:2b:83:f1:85:80:ea:eb:47:
d9:4a:79:38:41:fb:80:e4:c3:3d:b5:fe:80:fe:96:
c2:62:01:25:f4:2a:f7:52:cb:32:8d:95:05:f0:72:
10:e5:dc:2b:1b:45:e8:ad:f0:2b:54:4d:19:44:f8:
b3:db:6e:2a:41:f8:1d:3c:c1:fa:6d:e1:21:95:01:
fc:d6:9b:ee:f9:49:9c:0c:95:a3:5c:d3:31:26:ff:
19:da:e6:f9:8b:94:b5:d1:dc:a2:92:92:79:15:bc:
24:36:75:07:52:68:ea:ec:bb:76:f9:21:2b:35:7f:
5b:06:66:38:20:56:9a:42:7c:fe:43:01:70:b2:51:
16:44:9e:e7:4f:27:bc:6f:ba:bd:f3:f5:78:8d:ee:
3e:6b:a2:b4:47:1e:a9:39:4e:02:29:40:c7:d8:ee:
8b:da:5f:6b:81:45:84:32:83:df:47:b0:a1:15:c4:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:F9:A3:10:24:62:6B:E5:83:4E:8F:FD:61:30:AA:88:25:65:50
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f6:9d:e7:ee:cc:2a:42:fd:6b:36:fd:28:31:b5:86:e1:55:
1e:74:12:ce:91:24:3d:c0:df:3c:20:38:65:a1:25:79:88:f2:
9b:59:b8:69:d6:2a:8c:d9:58:32:1d:70:56:3b:76:03:89:99:
e9:b3:13:5e:75:b2:04:c5:b7:d1:52:dc:68:44:d0:86:a9:16:
42:fc:ee:58:50:03:8e:1e:70:6e:ad:51:50:b2:82:bf:86:f0:
fb:25:b7:35:2a:47:b7:d5:d6:df:87:2f:05:cd:7c:ed:86:30:
f8:96:1f:87:f5:37:4e:42:b9:e8:12:ca:49:c5:ae:60:37:36:
0a:e9:b6:44:e4:3b:56:0a:3f:58:69:fa:f5:bb:08:35:43:ea:
62:21:22:5f:95:48:58:5e:70:c3:6b:fc:bf:3b:0c:ab:d3:dc:
1f:37:d6:a2:11:83:46:9b:55:69:47:d0:a7:3d:11:43:9e:f1:
d8:1d:7d:65:b7:d3:39:f5:71:91:e4:9f:f8:c8:92:05:93:11:
03:c7:32:ae:4c:d3:91:d5:67:27:eb:a6:a4:54:6e:e4:43:2b:
67:91:ce:02:03:fb:40:f8:e8:bb:87:fc:44:1d:54:7d:c6:2d:
15:b3:7e:cc:99:a6:41:ec:ce:cf:73:3d:71:11:e1:fe:ca:9e:
f6:43:d0:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMrcrofMfA97Nvoc9uCk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy
NTIxYzcwHhcNMjYwOTIxMjMwMDA3WhcNMjYwOTIyMjMwMDA3WjAzMTEwLwYDVQQD
EygxNzNhZjlhMzEwMjQ2MjZiZTU4MzRlOGZmZDYxMzBhYTg4MjU2NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza8Oiea7zvAXM18FVz1KYVyq8wzq
tmXLQpMk58U7pBIhfuD25VxnCmqdEDuX0ZuLLio8ywh3pjtiOj3xtnwMbHnY1Wkc
NRDfD2zxpbjSJ/M4K4PxhYDq60fZSnk4QfuA5MM9tf6A/pbCYgEl9Cr3UssyjZUF
8HIQ5dwrG0XorfArVE0ZRPiz224qQfgdPMH6beEhlQH81pvu+UmcDJWjXNMxJv8Z
2ub5i5S10dyikpJ5FbwkNnUHUmjq7Lt2+SErNX9bBmY4IFaaQnz+QwFwslEWRJ7n
Tye8b7q98/V4je4+a6K0Rx6pOU4CKUDH2O6L2l9rgUWEMoPfR7ChFcRO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc6+aMQJGJr5YNOj/1hMKqIJWVQMB8GA1UdIwQY
MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt
ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx
LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPad5+7M
KkL9azb9KDG1huFVHnQSzpEkPcDfPCA4ZaEleYjym1m4adYqjNlYMh1wVjt2A4mZ
6bMTXnWyBMW30VLcaETQhqkWQvzuWFADjh5wbq1RULKCv4bw+yW3NSpHt9XW34cv
Bc187YYw+JYfh/U3TkK56BLKScWuYDc2Cum2ROQ7Vgo/WGn69bsINUPqYiEiX5VI
WF5ww2v8vzsMq9PcHzfWohGDRptVaUfQpz0RQ57x2B19ZbfTOfVxkeSf+MiSBZMR
A8cyrkzTkdVnJ+umpFRu5EMrZ5HOAgP7QPjou4f8RB1UfcYtFbN+zJmmQezOz3M9
cRHh/sqe9kPQNg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:22:52 2026 by rpki-client