Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: CraSfwpIwnf2osT4UYSG8IvztXOcb0zPpR32bBXap5k=
Subject key identifier: B1:8C:03:02:63:BD:59:3C:72:89:FC:57:27:B4:BF:3C:E9:9C:3A:8A
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 019D9A3EE901FA70AE925FB05C2FDA3D55AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 0BDA
Signing time: Fri 17 Apr 2026 07:01:47 +0000
Manifest this update: Fri 17 Apr 2026 07:01:47 +0000
Manifest next update: Sat 18 Apr 2026 07:01:47 +0000
Files and hashes: 1: 3YnZtmegxXoZvb9K7_HalTViL0w.roa (hash: B1b4mNLvcXEYUbcOc3EYX+Xry/YHoo7ZiUdGbEg4AFc=)
2: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: GVt7hSVuqynpC4B0i98wJ1GXFf7cAxHJ7QeKiSCheHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e9:01:fa:70:ae:92:5f:b0:5c:2f:da:3d:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Apr 17 07:01:47 2026 GMT
Not After : Apr 18 07:01:47 2026 GMT
Subject: CN=b18c030263bd593c7289fc5727b4bf3ce99c3a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:eb:54:c3:55:ee:52:fd:9c:ee:ba:89:61:
f5:17:7b:86:75:1b:bc:90:37:bc:21:73:8e:8d:cc:
cb:c0:d4:6d:00:7d:12:1c:37:b5:f3:8f:03:9e:9b:
df:14:32:f6:ff:ff:a1:53:89:d9:e8:10:d3:db:f2:
08:3f:2f:0c:cc:3a:f9:95:74:c9:5b:52:9f:d5:b8:
b9:7c:c2:ec:2c:9c:d3:31:80:72:ea:4d:f5:52:2c:
d9:e3:a5:83:1a:77:1a:d5:28:34:75:22:64:3e:f4:
d0:34:42:14:4c:74:65:aa:a9:91:24:08:dc:4e:2b:
42:f3:5a:d5:d9:5e:c9:36:9c:ef:d8:6b:7c:d4:fd:
64:f2:ab:6d:6b:44:6e:15:f4:74:8b:c4:d5:2b:7c:
31:85:d5:d7:91:3e:ca:28:b1:e0:4f:82:31:3e:9a:
7c:68:a5:83:7b:f9:a5:51:ea:42:29:fd:62:1f:0a:
b9:4e:a9:00:8b:ee:69:b6:04:c2:f5:40:cd:02:be:
9f:ac:70:4b:68:62:62:bc:13:58:31:96:2f:7b:8b:
a2:3c:7d:ea:7f:b8:d1:a4:e5:f3:09:32:d0:08:93:
77:9d:59:be:a2:2f:4d:5c:12:6f:a3:ee:6b:0c:fd:
74:42:c8:e3:9a:f9:f1:16:33:ef:b1:9f:d1:e4:02:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:03:02:63:BD:59:3C:72:89:FC:57:27:B4:BF:3C:E9:9C:3A:8A
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fc:35:c4:80:9d:b1:64:85:e6:82:68:ca:d6:54:ec:62:b8:
74:d0:85:24:c2:b1:e5:96:62:73:ee:48:55:b1:5b:e4:4f:63:
a6:54:53:f2:67:30:af:dd:35:64:48:a8:0c:32:d2:58:d6:83:
23:8e:08:2b:c1:0d:36:ab:72:c7:e6:8c:81:0d:72:5c:27:ae:
04:65:e2:76:ed:14:c8:90:d8:ba:c8:07:12:51:7e:7d:a5:7c:
24:c6:95:5c:dc:eb:84:e2:d0:50:0c:4f:c7:52:34:21:df:d2:
4c:cd:47:7d:cf:aa:32:71:00:57:e5:ba:7f:1c:05:46:51:cc:
19:c8:7d:2b:6a:ae:5c:cc:6f:a6:ff:e9:a0:b0:9c:09:68:ed:
05:cd:52:dc:e5:f0:08:74:4e:dd:79:d2:40:5f:01:ea:3a:a7:
6e:99:c9:f0:74:59:1b:5c:09:85:63:f5:b9:a4:a8:b3:77:79:
6a:a3:c5:49:aa:05:d7:7c:fd:14:1f:60:57:16:a2:4a:4b:d5:
1e:c3:2c:ad:fc:20:b7:00:0c:da:ec:f4:13:22:3a:46:9b:8e:
85:0b:13:33:34:57:71:39:de:80:64:ec:93:13:c9:bf:fe:72:
3d:9b:f5:b7:c1:48:82:d7:9c:5a:73:77:d4:89:02:67:00:75:
21:a1:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:31 2026 by rpki-client