
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier: An2mJhFFKdSEY6b+zCTqKbS2s87nb5gsA5FZ4urC39U=
Subject key identifier: 32:F9:28:11:96:02:15:2A:E9:B0:A4:C4:FB:CE:86:C8:31:99:67:D5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019DA3AEED3F021E42F0EAC4D28CAA0B0036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number: 161D
Signing time: Sun 19 Apr 2026 03:00:43 +0000
Manifest this update: Sun 19 Apr 2026 03:00:43 +0000
Manifest next update: Mon 20 Apr 2026 03:00:43 +0000
Files and hashes: 1: 1-NsEHLx-eCVp3HdDoeVIIDfOsCY.roa (hash: pj0S6oIRxdwKeKdRCJ8qFa3eLIG38zihiKc5Ag9MNh0=)
2: 1-p6L-7qJU2ku_9VBNoVZguN8tJ4.roa (hash: ZUbeF7b+rOkR43MMCdm/LVogv18EYaheT3PjiUGBxXw=)
3: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (hash: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw=)
4: 17C_vnF79Z0SjoScCQYs0Qbx30M.roa (hash: 8O33ZZG4CQkBtT5Vng3e75/g1VOrRLzBwAenPZwIQiA=)
5: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (hash: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU=)
6: 33HmxX5laer88g91bQT40p7G6N8.roa (hash: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI=)
7: 3ytiWjmFt3rYZft34LBPp9IPn8M.roa (hash: t6Z85iFlhPkY9Mi/GJk5DDB2tSPS3ygni+I6/1lEoxk=)
8: 6Dm3L1A6fwNf5cdJCg_KzTtfF4U.roa (hash: JWGAhkB/RVPvN6u4alw1RrRc1axraV68/7+Pht7ruCE=)
9: 6qoBSrrhi2VKQ2-x91iDJmcoOhQ.roa (hash: urnXFLFxbktUpf/FnGonIt+QH0Pj4s4eEnHDC6hX/xw=)
10: 7s8Zd4ojiKtZ9DGR5Pd0PnhYYoc.roa (hash: UzKpuxfOPy68fW95fKfvWl7CL59JMmKXeRepdx93Bls=)
11: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (hash: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE=)
12: B60g_m0QJwYIuA9KKm-uF1NhLIM.roa (hash: 9NtMYll9Etxivck/4newooAS+FDFrk33e9AIEWgcc8E=)
13: BjY0UIUDYHmtHwBNhaObIWAI358.roa (hash: OvPE9LHEEN/9/jOSuoQZt3aJ0JqPRafOAp/r5JidHtY=)
14: EHgktTf6m7_fov1qGoLd_G4GBHE.roa (hash: qTES87h7tbtM80VYUBu7n7wmyWPsetKC04PB5cOHzdk=)
15: KdL2r09wZul28eEPN4dewnB7ukk.roa (hash: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q=)
16: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (hash: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ=)
17: LoYqb50w0fBtfcHsb6vmg_Jp5HM.roa (hash: 5JEsLkJAmr1UNeD7WuJILvN07Z2E4VXvHyU2P3noRJQ=)
18: LtPnBk6NSxo0XNLt66J042Sgc0I.roa (hash: Ss/KW/qryEzrYA7hPSNoI8jm1o8wvpp7Ys+hj0l/oCk=)
19: OfxjuwiEKWgdwrg-K1K-c5_VgLQ.roa (hash: UWtmb6ZbxoAUabXWP2QO5S1E8N0sWVkGkKY+3/ZZOw8=)
20: OiZkApTkbsub96VB1Z9E4YWYXsY.roa (hash: 8WK7mfrWGnsXUnqRlkBdlaeLjGIF0lIsOcdanN+xnyE=)
21: OwThGODJImZhpEQ6VocAEXk08Wk.roa (hash: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE=)
22: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (hash: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg=)
23: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (hash: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc=)
24: UE_hgXeXCUPJYDw6I06aW1aAkJ0.roa (hash: B5wHSL8kle+kiYR4U2yvdOPBll+rksc+6BTwGU5+ZZw=)
25: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (hash: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4=)
26: WmaJm0jDrpyJX9Q-LqqqCt-uwIA.roa (hash: eCuLoI4rD6y1bR6VEKccwXQk5/tx5hypqNKOEMMl80A=)
27: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (hash: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs=)
28: ZI085fx17wglNov032bXlk10RTg.roa (hash: j5Ko4ezz0l/Zfw3a/ZhaxENbSPKBPqajPZNL6E/+Gv0=)
29: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (hash: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs=)
30: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (hash: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc=)
31: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (hash: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo=)
32: cMPrRmSojB9SkGby8eR98Ete7yU.roa (hash: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8=)
33: evRG__ex8JGxNVzyfa2c0uYKq_0.roa (hash: 93Yx357YevAnWmJ/tXlOKW8HTJL/2XO97iLj27xdMN4=)
34: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (hash: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4=)
35: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (hash: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE=)
36: fv_FIWsQ6j6A0tVez5uEd3louso.roa (hash: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k=)
37: g7RkFmxmt6dHTrZc9IVO6X8Dpo4.roa (hash: /Ry0uNAREBMj0cSEog0s+syKKhljtc1oVlJp5tMB5Ic=)
38: hAJCIirAsZk8GUXF7WubyM8TjKI.roa (hash: j6pH65MDKZ3nETHCyHm0OLZKv7Eb9miovENp+54ETCc=)
39: iarmlWK_D1F2Y519OMWB6VCc31g.roa (hash: WFVbmq4d03vzZGnbmXlce/4IUJO9Lw5GHMqxL1YbJaE=)
40: j9orTwG1Vgweag4E9VIs_WouzoE.roa (hash: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is=)
41: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (hash: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc=)
42: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (hash: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14=)
43: mTd7XvcDuUN2DG4uSN1Xu0dl-2U.roa (hash: TDCGsKMUOaf2u45RBP43sdcfUFGQMDT4ZuJCc2A0WLo=)
44: n0NR6OiiSRVLpNipRarNfvBQVBQ.roa (hash: x7+Hnm6izCIj5uo7DZZ8rAC8clBtC3HKKYVdoqJqJww=)
45: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (hash: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0=)
46: o0zFW0tgu0SNCajq1-Pj04reASE.roa (hash: XI8Y+MP7U7GXabQcnglenR9AR3VDKkEoKmwdTMvnwSA=)
47: s9bHtYw6qGInBE6Pd4y6dDNszho.roa (hash: DuL4nvwJ3GhqWQoioLF44KGKjnyU3aqouWmY/jU6w4Q=)
48: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (hash: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E=)
49: tUODhl9BHob7C8bkCdeYc_Pg5BQ.roa (hash: gDjAS+mz8+AorNq75Vb1x8jNLGPvVGSU1qMuAh09Nno=)
50: tXRou836sWSHaKyCZp3oRjnDf4o.roa (hash: J2Ao585n1e9ibSlrdTNEo3VKGryVXlpaJXSNT1NNST0=)
51: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (hash: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI=)
52: upSbRMNnxG2ylwfUtURsJ3bxtNQ.roa (hash: mky2Qs0AJCLM4nhOYK0/Rl4J20evzMeN8B/lZFydtzs=)
53: vxHiN8XYZlqNx9pegdEwtdXJzX4.roa (hash: DRRytWcqFbSlVtkcmI8YNqgxFW5pXUdMhy1Q5V9THDo=)
54: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (hash: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs=)
55: xREJbZysiuR_7AfAbkb-_mvdCJU.roa (hash: ge+uzdtNTlkRHujnITIjJNysWOPLtwdYoaqf4cikYBQ=)
56: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (hash: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58=)
57: yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa (hash: 8kj3LqF1iVRGrMYtJSTCYp1IezJP4n7oP1W8pfH6tR0=)
58: ytt2iIs36bszj8mftd5slrzDQco.roa (hash: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY=)
59: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: PvqMFUpwrn+b65mXjENfiJuqnNw3W2KBxxt7eunhJ1M=)
60: zngLcIvgC9YcAiHWh1ke0MM5mbc.roa (hash: 7E0EDEX7fzdeB/iudhekYerAfUhvgxJP3o/StF1jxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:ed:3f:02:1e:42:f0:ea:c4:d2:8c:aa:0b:00:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 19 03:00:43 2026 GMT
Not After : Apr 20 03:00:43 2026 GMT
Subject: CN=32f928119602152ae9b0a4c4fbce86c8319967d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:87:55:a8:9c:01:62:b9:0b:8b:e4:ad:e1:
4d:91:2a:79:2e:50:44:f7:c4:01:89:19:85:7f:3c:
20:ab:58:0d:d2:f7:16:5e:d9:d5:2b:a6:ad:b3:e2:
4b:c7:42:7a:7c:a7:f5:2a:28:13:ed:da:3a:be:ec:
d3:e8:44:68:cf:ab:fa:65:cc:db:50:eb:56:47:85:
64:89:68:d7:d0:3f:e9:b3:e8:20:d1:69:01:13:e5:
5c:ef:09:5b:36:7f:dd:bd:fa:f7:26:1e:8b:4f:1a:
db:9b:1e:02:c3:2e:a9:88:58:13:48:5c:67:bd:7a:
ed:bb:19:00:a9:7d:df:e2:54:b9:9e:64:4f:9f:77:
b5:a8:95:d2:a0:a4:76:ff:73:2e:59:e9:98:f8:d3:
f0:2a:8b:a0:71:bc:d1:d1:ff:2b:b7:ca:11:2a:f2:
ea:26:9d:2d:92:60:45:f2:9a:68:cd:ad:af:53:63:
ca:05:7a:6c:c9:72:83:1c:e7:75:f6:98:21:f9:60:
09:5a:9c:c3:41:f7:26:97:10:f5:98:0f:75:b1:39:
6d:29:c9:ae:1d:34:76:61:5a:f2:b2:dd:e7:9f:5f:
6b:d7:65:5c:2c:ff:63:73:cd:d7:2a:58:35:02:95:
8c:76:35:26:fa:19:fe:67:85:ca:47:af:32:4b:fc:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:28:11:96:02:15:2A:E9:B0:A4:C4:FB:CE:86:C8:31:99:67:D5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2f:2d:11:eb:ab:f5:15:b1:25:fd:6e:85:72:21:ef:b2:d1:
10:e1:ae:17:39:a5:d2:fa:64:66:24:77:b6:b5:87:f7:f9:82:
68:30:41:8f:57:a4:18:ac:58:6c:77:09:69:1a:e5:84:e8:bc:
45:0a:a0:6b:65:e4:c4:0b:65:f5:14:1d:1d:f2:97:b0:a6:21:
55:15:07:0f:0c:a6:92:37:02:8e:d6:18:03:e4:fa:c2:5f:f3:
0e:82:00:3f:21:a5:c4:f1:72:9d:84:95:32:e3:75:57:b5:d0:
c0:65:c1:0c:1d:b3:bc:25:0b:2c:02:e0:1f:13:86:27:f4:b9:
dd:c3:02:7b:ad:61:a1:8f:a7:ec:85:a2:73:85:39:55:d1:a3:
2a:f5:06:53:2b:2a:e0:b0:60:23:69:84:88:ea:7e:2c:d9:d7:
b2:d8:e8:31:e2:4e:17:7c:7d:2a:25:fc:82:f8:d1:1e:66:56:
e4:ba:4e:34:b4:a9:5f:9b:e7:b4:67:dd:2c:57:30:5b:41:e4:
d7:f7:e0:ee:dd:26:8d:3f:de:33:b6:14:67:34:e8:a8:31:e3:
14:54:ba:80:8e:65:8c:24:06:b3:e8:0c:46:dd:6e:16:1c:18:
46:cf:ea:98:6c:69:20:91:ae:df:4f:4d:b8:9b:ac:a6:bd:47:
ab:c7:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:46 2026 by rpki-client