Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
File: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft (raw, json)
Hash identifier: EB6i77CXoWl3wq8Z/TaWJnjyUAhg+Kb72ArCVtCPq/8=
Subject key identifier: 4F:2F:DC:C5:10:8F:49:F0:5E:1C:55:34:52:E8:71:AB:02:60:A8:17
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Certificate issuer: /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial: 019D9D75E9153A026EAD95B10536B705644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
Manifest number: 3D
Signing time: Fri 17 Apr 2026 22:00:43 +0000
Manifest this update: Fri 17 Apr 2026 22:00:43 +0000
Manifest next update: Sat 18 Apr 2026 22:00:43 +0000
Files and hashes: 1: Stua-bI85s_Qjcis9xg3M4eoMT0.asa (hash: P9r1AQ6O3K6feHqh5gbLCxcbf2Aonowkyk/Ljn2V6bU=)
2: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl (hash: AVwwCjgcfxIyTmLaZnh2XfCMMFjC5fMxw7GLyqvISDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:e9:15:3a:02:6e:ad:95:b1:05:36:b7:05:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Validity
Not Before: Apr 17 22:00:43 2026 GMT
Not After : Apr 18 22:00:43 2026 GMT
Subject: CN=4f2fdcc5108f49f05e1c553452e871ab0260a817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:5f:da:92:7f:37:1f:51:1a:d1:50:6f:6e:
c9:e6:30:fc:6f:93:6d:a5:63:0a:c6:e7:b9:f2:50:
d2:ce:03:c2:07:3e:16:b9:1f:85:78:5a:ae:83:12:
50:2e:4c:2c:b0:25:50:64:d7:1c:53:27:b6:45:5b:
5b:19:83:93:35:d4:d7:bd:d9:de:a2:31:7c:41:bf:
08:c2:1a:db:7c:15:85:3a:77:f5:6e:c6:5c:82:87:
2b:4f:52:ed:cc:7b:81:1a:a4:dd:7c:e4:61:a2:51:
46:b9:20:2c:de:4b:30:e0:8f:94:62:ec:51:42:6c:
c4:5a:6b:27:ac:66:f5:a4:53:71:3d:82:a8:5b:88:
e3:2c:7b:71:bc:ac:fa:e5:e3:aa:6e:3c:48:ed:c0:
05:b9:5c:65:70:f8:4f:d8:65:a6:b8:8d:9e:09:be:
f3:be:35:65:c2:2f:2e:46:b6:b3:72:d0:d3:d5:65:
a8:f7:d7:9c:a2:71:34:87:98:2d:d6:0e:01:7e:64:
f8:ba:d3:2b:bf:65:fb:e6:89:e4:e0:31:d5:0f:f9:
2a:f6:b1:59:97:09:38:35:2b:41:f2:da:7d:75:30:
51:27:99:e6:79:78:45:51:54:23:2f:ba:64:e6:69:
d4:45:67:09:11:49:24:19:84:d6:2f:02:15:c9:cb:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:DC:C5:10:8F:49:F0:5E:1C:55:34:52:E8:71:AB:02:60:A8:17
X509v3 Authority Key Identifier:
keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:1c:1d:96:1b:fd:4f:53:0c:ad:7d:d2:99:dd:54:bf:32:
37:4b:4a:1c:19:3a:6e:44:a2:35:28:f5:87:fc:2e:17:10:42:
a0:48:bb:69:e9:f9:c5:4a:93:a7:95:0b:0b:19:8b:e8:0f:6d:
55:10:86:7a:d0:a1:ce:b1:84:bf:15:3f:50:75:04:90:f0:49:
f5:9d:95:d3:03:fc:6f:c3:22:b2:16:da:fd:0e:fd:4b:e5:5f:
56:93:b7:c5:1d:2c:00:f7:5a:08:e7:c0:b0:f5:9a:df:f7:4c:
ec:81:08:02:34:4b:73:c0:a9:07:9f:85:44:3d:31:ad:c8:8f:
f9:07:2f:c3:d6:57:64:57:70:21:62:0e:db:79:e0:48:c6:95:
20:17:9b:9e:e2:eb:d3:69:64:fa:d8:d9:68:9e:46:d2:05:9f:
91:ec:51:24:52:21:22:73:8f:d7:e0:2a:f4:5c:c8:8d:18:db:
11:7a:fe:1b:b4:d2:05:e7:34:d9:54:08:bf:97:c4:58:3f:12:
9c:49:f1:e7:40:48:a1:ab:04:cd:5d:5b:eb:78:53:72:e7:52:
34:f1:9f:6b:36:05:72:2c:b5:67:71:c4:f6:47:c8:85:be:53:
ab:31:93:3b:04:0a:a6:f5:04:a5:cd:bd:9c:af:52:a3:5b:44:
53:1c:77:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddekVOgJurZWxBTa3BWRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDQ4ODUwZTYxMmNkMjNkNmYwZjRlNGE0MTIzYzk4NGFh
OWY2ZWEwHhcNMjYwNDE3MjIwMDQzWhcNMjYwNDE4MjIwMDQzWjAzMTEwLwYDVQQD
Eyg0ZjJmZGNjNTEwOGY0OWYwNWUxYzU1MzQ1MmU4NzFhYjAyNjBhODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOtf2pJ/Nx9RGtFQb27J5jD8b5Nt
pWMKxue58lDSzgPCBz4WuR+FeFqugxJQLkwssCVQZNccUye2RVtbGYOTNdTXvdne
ojF8Qb8IwhrbfBWFOnf1bsZcgocrT1LtzHuBGqTdfORholFGuSAs3ksw4I+UYuxR
QmzEWmsnrGb1pFNxPYKoW4jjLHtxvKz65eOqbjxI7cAFuVxlcPhP2GWmuI2eCb7z
vjVlwi8uRrazctDT1WWo99econE0h5gt1g4BfmT4utMrv2X75onk4DHVD/kq9rFZ
lwk4NStB8tp9dTBRJ5nmeXhFUVQjL7pk5mnURWcJEUkkGYTWLwIVycusCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8v3MUQj0nwXhxVNFLocasCYKgXMB8GA1UdIwQY
MBaAFGUEiFDmEs0j1vD05KQSPJhKqfbqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFTSVVPWVN6U1BXOFBUa3BCSThtRXFwOXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xNDFmMDItMzI0OS00YmRiLTllNWYt
NTVjYzg3NjVlODQwLzEvWlFTSVVPWVN6U1BXOFBUa3BCSThtRXFwOXVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8xNDFmMDItMzI0OS00YmRiLTllNWYtNTVjYzg3NjVlODQw
LzEvWlFTSVVPWVN6U1BXOFBUa3BCSThtRXFwOXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZ4cHZYb
/U9TDK190pndVL8yN0tKHBk6bkSiNSj1h/wuFxBCoEi7aen5xUqTp5ULCxmL6A9t
VRCGetChzrGEvxU/UHUEkPBJ9Z2V0wP8b8Mishba/Q79S+VfVpO3xR0sAPdaCOfA
sPWa3/dM7IEIAjRLc8CpB5+FRD0xrciP+Qcvw9ZXZFdwIWIO23ngSMaVIBebnuLr
02lk+tjZaJ5G0gWfkexRJFIhInOP1+Aq9FzIjRjbEXr+G7TSBec02VQIv5fEWD8S
nEnx50BIoasEzV1b63hTcudSNPGfazYFciy1Z3HE9kfIhb5TqzGTOwQKpvUEpc29
nK9So1tEUxx3/g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:32:18 2026 by rpki-client