Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: JDNDu4XTLoYJshO45WXproNg7MhNgTpG0w4xE/kl11Y=
Subject key identifier: 41:D0:B5:A5:8A:0B:C0:B0:CF:0B:CC:59:12:F0:D2:38:7D:09:63:39
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019CA9B3A22D5D0D143A223627467AD956CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:47 +0000
Manifest this update: Sun 01 Mar 2026 14:00:47 +0000
Manifest next update: Mon 02 Mar 2026 14:00:47 +0000
Files and hashes: 1: 3kDRvhyYGLhqA-55XbpAGrLNvl0.roa (hash: Kd1IvjvDoUSLBaI4Td/hVyTLL9UmLBvq34CNcLf8TLU=)
2: QApS9RyloD4NoDnpEa95FuDk1ZI.roa (hash: CiFqNnH0ZASzXfep2jny9mXvFUeXbEdlqNdwXPVsg/I=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: XaUmSFiiCJyQiUDZg08vaRFpe6r/ve2pyyB4zFfiszs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:a2:2d:5d:0d:14:3a:22:36:27:46:7a:d9:56:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Mar 1 14:00:47 2026 GMT
Not After : Mar 2 14:00:47 2026 GMT
Subject: CN=41d0b5a58a0bc0b0cf0bcc5912f0d2387d096339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:60:c3:ba:01:5f:b0:96:e6:22:02:23:6e:
f7:a5:56:49:cd:7a:2a:60:ee:3d:6f:f6:9b:9e:76:
69:03:a2:1d:12:c5:d7:9b:00:31:9e:7d:8e:62:82:
8f:f3:10:d4:c6:01:08:c5:47:ff:41:35:1a:33:2f:
b5:61:df:9b:0b:f7:b2:fd:84:0b:a8:65:37:91:d8:
db:34:1a:94:a9:61:73:be:3b:ac:51:fb:14:6e:b6:
32:e4:7e:96:15:cd:03:c9:d6:a6:5a:35:6f:8d:e8:
6d:a9:0f:ea:d7:da:df:f3:11:26:83:db:82:ea:02:
77:0d:33:ad:f7:a6:42:76:66:84:77:01:b3:d0:9f:
58:3b:ba:9b:4b:0d:29:1b:a5:63:8b:d1:d8:78:fa:
f5:0f:f7:e4:67:14:81:68:c0:b2:9b:d2:ce:8e:dd:
6c:32:b7:46:db:4d:19:c6:26:7a:8f:61:34:44:58:
b1:3d:6c:c3:f1:73:80:98:4d:1e:53:4a:59:8c:fd:
26:32:af:6c:b9:2c:9e:fc:32:76:33:93:ed:6e:f2:
7e:d3:b9:42:3d:b9:59:19:a2:76:72:db:7a:61:f9:
1d:23:52:f2:8c:88:c6:fa:e5:6f:e3:17:6f:ed:64:
70:60:f6:eb:b7:a1:f2:f0:36:83:c2:9f:63:42:0c:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:B5:A5:8A:0B:C0:B0:CF:0B:CC:59:12:F0:D2:38:7D:09:63:39
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:5d:a2:1b:c9:57:82:01:f5:d8:a1:86:f2:83:09:13:00:
75:25:e5:ee:1a:d4:3d:88:22:7a:0d:f1:ce:23:74:e5:1e:36:
ef:4b:42:68:49:41:20:57:7e:bd:9a:73:d9:52:91:af:60:47:
68:53:d6:4a:52:05:7e:42:7b:a6:0b:a0:86:63:61:3e:68:37:
6d:26:88:f3:08:90:9c:d2:cd:25:03:e6:41:87:09:c7:d1:25:
d7:92:e9:c3:ee:3c:5c:82:83:84:ee:c4:9d:da:d1:43:91:71:
74:6b:07:13:56:c4:26:d6:da:b4:d9:2b:2f:29:c7:17:a9:de:
d3:05:bd:57:17:7a:0f:54:cc:99:05:99:9d:f6:03:51:d6:c5:
29:05:13:10:ca:5e:98:ab:90:0c:02:ca:f3:41:64:27:43:80:
fb:cc:a8:1a:1d:ad:49:d1:ba:01:60:81:8a:b2:19:3e:2d:75:
94:56:c5:b7:e3:f2:c3:cc:7d:bd:53:67:1f:b6:de:66:93:6d:
c8:3f:82:a0:52:50:d8:87:44:cb:a7:df:1b:9c:d4:3b:1d:95:
60:e5:c0:c5:91:51:76:fb:b6:7f:a7:bb:18:c2:b4:b3:83:d8:
63:cc:6c:42:a2:ba:45:2c:9e:00:e6:d2:2d:27:0e:3d:cb:d7:
30:d9:ff:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps6ItXQ0UOiI2J0Z62VbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODI5MGZlOTgxNGZjYjA2MmFiNzFlMzJlYzFmOTZkYTk5
NzNhMzMwHhcNMjYwMzAxMTQwMDQ3WhcNMjYwMzAyMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg0MWQwYjVhNThhMGJjMGIwY2YwYmNjNTkxMmYwZDIzODdkMDk2MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PBgw7oBX7CW5iICI273pVZJzXoq
YO49b/abnnZpA6IdEsXXmwAxnn2OYoKP8xDUxgEIxUf/QTUaMy+1Yd+bC/ey/YQL
qGU3kdjbNBqUqWFzvjusUfsUbrYy5H6WFc0DydamWjVvjehtqQ/q19rf8xEmg9uC
6gJ3DTOt96ZCdmaEdwGz0J9YO7qbSw0pG6Vji9HYePr1D/fkZxSBaMCym9LOjt1s
MrdG200ZxiZ6j2E0RFixPWzD8XOAmE0eU0pZjP0mMq9suSye/DJ2M5PtbvJ+07lC
PblZGaJ2ctt6YfkdI1LyjIjG+uVv4xdv7WRwYPbrt6Hy8DaDwp9jQgzbuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHQtaWKC8CwzwvMWRLw0jh9CWM5MB8GA1UdIwQY
MBaAFGWCkP6YFPywYqtx4y7B+W2plzozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4Mzkt
YWVkZTNmZmE0NDU3LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4MzktYWVkZTNmZmE0NDU3
LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbNdohvJ
V4IB9dihhvKDCRMAdSXl7hrUPYgieg3xziN05R4270tCaElBIFd+vZpz2VKRr2BH
aFPWSlIFfkJ7pgughmNhPmg3bSaI8wiQnNLNJQPmQYcJx9El15Lpw+48XIKDhO7E
ndrRQ5FxdGsHE1bEJtbatNkrLynHF6ne0wW9Vxd6D1TMmQWZnfYDUdbFKQUTEMpe
mKuQDALK80FkJ0OA+8yoGh2tSdG6AWCBirIZPi11lFbFt+Pyw8x9vVNnH7beZpNt
yD+CoFJQ2IdEy6ffG5zUOx2VYOXAxZFRdvu2f6e7GMK0s4PYY8xsQqK6RSyeAObS
LScOPcvXMNn/Hw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:35 2026 by rpki-client