Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: alhtiutgYKlCSbV0tdsyXSUP6TxHWaJWpFQNxsIztVU=
Subject key identifier: 01:EF:5C:8C:13:E4:FD:83:9E:18:D7:90:A2:80:36:B2:A9:74:8A:5D
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019CF31659BDFECB2D14C4A04687AA69D1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0C55
Signing time: Sun 15 Mar 2026 20:00:54 +0000
Manifest this update: Sun 15 Mar 2026 20:00:54 +0000
Manifest next update: Mon 16 Mar 2026 20:00:54 +0000
Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: 52jNUKBwWdZtZx1SxVSSG+57Vt8J/rPrknqNHYxk7Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:16:59:bd:fe:cb:2d:14:c4:a0:46:87:aa:69:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Mar 15 20:00:54 2026 GMT
Not After : Mar 16 20:00:54 2026 GMT
Subject: CN=01ef5c8c13e4fd839e18d790a28036b2a9748a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:16:3c:6a:fd:ab:c8:55:2a:81:72:9c:d7:
de:28:89:f5:47:dc:d9:c9:18:b1:c2:21:47:a3:dc:
1c:93:fa:68:af:f0:fa:c5:24:5d:0e:65:d8:26:cf:
6e:e2:d2:0a:00:0e:9b:04:59:a5:5a:1e:29:0d:ea:
94:80:d2:44:aa:bb:e3:fe:6e:8e:dd:59:90:e6:28:
33:0e:33:22:4a:8e:e7:9d:d7:f8:da:c3:9b:8d:3f:
e2:42:e7:88:56:ba:94:29:e5:42:72:b5:0d:2c:59:
a0:5a:1d:2e:bb:c5:7f:a5:78:be:1d:f7:99:a2:9c:
89:ef:c6:7d:32:ef:48:6b:0c:c4:d0:25:11:3d:8b:
24:1c:47:29:57:6a:43:f1:ea:ac:2f:cb:f2:c4:94:
cb:55:a2:2b:cc:b7:7d:be:9e:4e:25:48:17:35:1a:
34:12:78:0e:65:73:d2:be:fb:6a:ac:cb:82:39:5b:
7e:2d:96:18:94:a8:4f:3f:4b:23:ff:b2:4f:12:49:
f7:6b:46:4c:d3:8f:3c:83:ad:b1:3f:ae:41:b4:c3:
43:81:63:8e:90:d7:59:01:28:76:23:23:75:0a:55:
9b:de:9a:28:e8:76:15:f5:f6:b4:cd:d5:ad:11:54:
b0:f2:cf:2b:45:4e:fa:03:11:ac:a3:d3:20:f2:4f:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:5C:8C:13:E4:FD:83:9E:18:D7:90:A2:80:36:B2:A9:74:8A:5D
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:96:1d:ce:24:50:49:02:da:ae:23:23:5e:46:c9:4f:da:
c4:0c:3e:12:ac:59:77:c9:68:f2:f5:82:29:f9:e9:4e:73:3d:
53:34:c0:3f:16:33:67:bb:6b:69:ca:2c:3d:c0:4a:93:37:bb:
26:0c:af:28:1c:bd:b6:ac:d9:96:8b:ac:c4:d5:8e:1b:60:d2:
80:43:4a:c2:0b:59:1e:e5:f9:63:b4:d2:b5:8e:3d:64:a4:84:
67:88:6e:ec:cf:40:5d:d9:62:2f:d7:d8:4d:86:4f:aa:d3:e5:
db:da:27:79:cf:6c:46:03:63:84:da:3d:c7:92:9a:9c:c7:35:
a1:4f:0e:45:64:10:6f:9c:f1:6e:1d:c1:88:d6:93:a0:80:64:
00:71:1d:f7:ee:81:c6:d3:b5:e8:db:f7:15:85:41:ed:ff:61:
af:b9:69:30:29:7d:6b:8c:69:5a:30:fb:71:32:a8:d5:f4:05:
a4:35:14:be:13:c1:8f:8d:6c:e2:52:0d:03:65:ad:62:fe:be:
e2:59:b2:c1:56:76:f1:53:24:f3:d9:83:88:31:24:50:ef:6d:
0c:0b:dd:e3:cc:70:8f:20:7a:2e:7c:2d:d4:e0:ad:92:60:f7:
49:83:dd:2a:15:53:53:6b:c7:81:21:df:ff:53:1c:d8:f2:8c:
50:23:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:00:14 2026 by rpki-client