Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: BA4Bu4O39B7niFwgPzV4acyczv26kT94CTnlym0wBfk=
Subject key identifier: 6B:7B:76:D4:F0:11:58:0B:A2:25:FE:B8:18:D5:3E:8F:FB:22:6D:EB
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 019CAAC704D94E2005B76DD12CAF1B7EC579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 0B5E
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: 3YnZtmegxXoZvb9K7_HalTViL0w.roa (hash: B1b4mNLvcXEYUbcOc3EYX+Xry/YHoo7ZiUdGbEg4AFc=)
2: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: sBbeAEJ7R+9SxJQ2BFQl/9WjdyGqV6pG4qQQ+eKiuSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:04:d9:4e:20:05:b7:6d:d1:2c:af:1b:7e:c5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=6b7b76d4f011580ba225feb818d53e8ffb226deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:02:f8:e2:d7:af:b1:5a:17:3e:8b:48:9d:
a0:87:9f:23:b2:3e:6c:3e:71:24:81:96:37:f9:44:
89:ff:72:37:b4:1f:68:f2:1d:3a:31:6c:aa:a7:a0:
47:b6:e7:0c:15:07:fc:51:5f:49:5e:1b:a3:2b:d2:
d2:ed:d1:2a:ac:5d:97:d2:c6:e3:7c:a9:5b:05:a6:
62:e3:93:77:3e:4d:d8:db:5b:01:1f:2c:12:a9:80:
82:ea:5c:19:50:e1:72:6c:17:d8:ac:2d:18:c5:24:
c3:62:2e:6b:b6:1b:71:89:68:a2:a2:35:b3:02:90:
8e:06:be:85:4e:63:6d:00:56:28:ae:63:1c:15:32:
41:bb:07:d1:d3:ae:5c:bd:79:f7:6c:6f:b3:59:cd:
b5:8d:ef:95:7e:d3:87:05:86:c3:ae:73:50:96:b8:
6a:0e:fc:36:f4:df:fd:f2:e3:f7:36:34:3d:cb:cb:
51:16:b5:d4:00:f8:33:68:06:71:4d:11:bd:24:e8:
04:4e:21:73:4d:99:fc:09:56:82:97:ff:a6:b5:a0:
21:5a:d4:45:d3:0f:b4:c6:82:c8:a7:80:29:5f:b7:
18:86:f4:26:58:ef:0b:f6:09:ad:b2:cd:7b:04:73:
29:32:65:ff:ea:a5:b5:3a:0a:f4:ce:b3:2b:1d:d9:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7B:76:D4:F0:11:58:0B:A2:25:FE:B8:18:D5:3E:8F:FB:22:6D:EB
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e6:47:8b:55:88:55:f2:11:20:83:fe:a5:7f:ce:5c:0c:43:
40:3e:75:88:c5:1d:39:5f:4b:77:a6:07:01:2a:55:52:77:88:
ab:fd:ff:44:06:70:52:12:6b:d6:a5:9f:f9:88:59:c3:bb:c0:
76:62:f1:60:0b:9b:df:ba:f3:57:f9:03:41:25:9b:ed:20:07:
80:9c:b1:0f:44:c6:48:90:32:66:8d:3a:ff:a5:f5:ad:2f:68:
8e:81:50:0f:21:05:12:7e:77:29:2e:c0:9b:c1:ab:41:10:e6:
07:25:c4:13:dc:17:5d:f1:3a:b4:ac:f8:fd:0d:70:f1:fd:a6:
96:b3:42:9b:c4:18:a4:84:0f:af:66:eb:4a:0d:3f:e1:0e:bc:
5e:7c:a7:a8:49:35:f5:f7:bb:72:d8:94:60:4a:c9:e8:95:df:
34:6f:26:56:fb:7e:e1:eb:09:2e:93:60:ba:a9:b3:74:f7:7f:
0d:27:4f:a0:67:6f:ce:d1:f6:ce:3a:23:23:b1:8e:3a:5c:9c:
77:a2:45:ba:44:ff:91:0a:b2:e8:0f:70:0f:00:1f:ae:9f:12:
4a:76:5a:74:86:67:c4:f5:ce:51:27:70:f7:ac:18:58:0e:94:
b0:fa:9a:d8:3b:b4:8d:ae:d6:7e:f4:17:3f:05:4c:c9:3f:4d:
8c:2a:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:01 2026 by rpki-client