Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: 3Jjs4y1sLw35Y3fo6v0kRNYXE05X/lbzNQAFwIuaMnQ=
Subject key identifier: D7:7E:1B:8A:62:AC:57:CC:55:EA:53:3F:C7:83:A3:DA:14:45:95:95
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019CACB4846A01698E5155B89D362AC8DBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: S5afrGN3jiBZLyzhmbM5aaMOnPGygGMEMCM8sKoKUHc=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:84:6a:01:69:8e:51:55:b8:9d:36:2a:c8:db:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=d77e1b8a62ac57cc55ea533fc783a3da14459595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:1c:8b:7c:cb:81:97:de:da:94:b3:8e:25:
2a:78:7d:96:3a:17:72:b4:01:77:5c:8b:ff:29:2a:
40:50:55:fc:2c:26:3c:37:ab:50:4d:d8:db:09:f1:
d6:42:9c:eb:f4:25:22:1c:39:9d:98:72:17:cc:77:
b9:11:84:e9:66:5a:6b:91:4c:c6:ce:21:22:82:19:
47:eb:4d:ae:f3:54:5e:70:0d:4b:64:bc:f6:ca:7d:
f0:81:59:d3:42:f8:e7:c4:3a:22:63:b0:12:53:08:
b0:86:44:2d:3d:91:32:49:ff:df:3b:e1:48:a3:a9:
0f:b0:ec:2e:19:bb:ba:3a:9b:5f:02:d9:06:58:6f:
88:e2:62:12:34:ef:a6:ee:a0:7c:56:68:40:83:61:
b3:ec:9e:3e:5d:73:af:89:00:b5:9e:81:b2:48:7b:
ae:7d:39:66:3f:c3:ef:32:5b:5e:0f:98:72:52:af:
72:22:62:a2:37:bf:35:da:cb:67:46:64:96:74:1b:
3e:df:d8:ee:b4:c1:18:47:e8:82:5e:c7:26:2c:69:
ba:16:14:2f:b6:fe:c2:97:76:09:93:62:55:b5:05:
6c:9a:b7:fe:4d:32:13:0c:28:6a:9f:0a:8f:76:70:
98:8d:d4:58:58:cb:03:ac:2e:55:13:d6:fc:e5:65:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:1B:8A:62:AC:57:CC:55:EA:53:3F:C7:83:A3:DA:14:45:95:95
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:90:e5:42:aa:e7:a1:a5:1f:60:68:d9:76:d6:e9:bc:19:d6:
ca:de:17:d9:10:31:fc:fa:fc:6c:4e:00:b3:8e:70:6d:0d:7a:
8e:d3:c7:0c:3d:eb:00:f2:b8:e3:a0:5d:26:36:7f:18:ad:06:
55:33:ba:2d:e2:02:20:1e:b5:7c:17:9c:7a:83:87:5c:b9:9f:
ef:a7:8f:f9:4e:99:f0:4f:10:d3:60:ec:b8:2d:bc:44:6e:81:
fd:78:94:6b:bf:6b:d5:3a:5e:c3:d5:55:5d:c8:83:5b:87:6a:
47:e0:77:c0:ff:16:ca:74:20:d1:70:8d:02:90:7c:7b:c1:f1:
4f:75:f0:97:7f:4d:3c:4a:55:cd:6c:d8:70:24:67:04:b8:1e:
91:6b:1e:a3:72:f7:73:5e:e9:44:d9:6d:13:fb:9d:95:d8:8a:
7e:36:b1:23:59:98:8b:47:88:8c:47:d5:71:a0:6f:3d:a8:0c:
7f:64:e2:f0:33:22:3b:68:9c:77:5d:03:c8:05:56:ed:60:85:
ab:1b:df:b9:cc:46:18:87:4b:da:fe:72:cc:70:69:2c:dc:87:
7d:73:93:02:28:bc:b8:0a:2d:d4:22:af:4c:ab:2c:e8:cd:34:
ad:83:05:cd:41:d1:58:e2:32:17:62:7f:7b:3d:94:3a:5c:29:
42:53:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:46 2026 by rpki-client