Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json)
Hash identifier: 0xy1I8aONz9O5QgSA0EaEyDp2aHhHEEAO2kiFZX8rsg=
Subject key identifier: D0:F4:2A:0E:0A:F7:1F:66:97:AE:C3:7D:47:38:0C:3C:C0:C3:CE:CB
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019DDCC2D7B2D8A29738DA4941A87F446D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
Manifest number: 0CCE
Signing time: Thu 30 Apr 2026 05:00:49 +0000
Manifest this update: Thu 30 Apr 2026 05:00:49 +0000
Manifest next update: Fri 01 May 2026 05:00:49 +0000
Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=)
2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: LQwZuveMBI98St2XP74x8ehLxkLqIV2TYRfN6bvtiBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c2:d7:b2:d8:a2:97:38:da:49:41:a8:7f:44:6d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Apr 30 05:00:49 2026 GMT
Not After : May 1 05:00:49 2026 GMT
Subject: CN=d0f42a0e0af71f6697aec37d47380c3cc0c3cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:98:52:ee:e3:a2:ed:68:5e:22:f1:fa:38:26:
c3:91:c6:a4:f0:b9:f1:25:60:08:00:75:1c:bf:b7:
b1:ea:10:57:27:52:62:96:0b:74:fb:27:1a:da:54:
ea:8f:0d:e8:f6:2c:57:ca:f8:2c:34:57:ff:56:e8:
4e:35:2d:be:fb:6d:fa:84:9a:9f:95:73:9e:d7:b8:
a3:c1:8c:c8:d4:17:33:cd:b1:23:8e:fc:93:9b:85:
e5:72:c5:31:65:e0:77:d1:c9:73:4a:69:3b:d4:91:
0f:fe:33:f1:8a:15:74:99:6f:1b:97:07:ec:a2:3a:
26:b8:b9:5c:a7:02:ba:0c:3c:43:bd:8f:8a:60:46:
6e:26:2a:e9:bc:e7:5a:ae:13:30:11:26:9a:6f:ae:
6b:9b:ff:71:de:9e:ca:28:e2:30:89:df:4b:8d:67:
32:e0:d3:45:0b:db:69:b2:31:93:ad:ed:5d:94:a5:
4c:b9:fc:8e:6c:45:64:61:95:34:f3:79:b9:1b:be:
2a:b7:8b:02:71:5a:7f:32:fa:04:07:b7:bb:a9:dd:
88:28:7b:6f:1e:c9:36:c0:f8:73:f5:7c:06:21:a5:
2e:81:b9:6a:87:a7:b7:9b:a3:e3:5f:ec:a5:90:d3:
f6:e6:d5:28:5d:0b:7a:d3:7d:af:cb:b6:ae:e4:98:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:2A:0E:0A:F7:1F:66:97:AE:C3:7D:47:38:0C:3C:C0:C3:CE:CB
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:d2:f1:f2:d0:6e:e9:eb:cd:52:10:19:b3:1a:82:31:ea:
ee:e2:3e:05:bd:10:d3:ba:db:a9:c7:bc:7c:43:47:8e:d1:74:
53:84:e5:d5:ae:c1:a7:5f:d4:f2:44:0d:70:97:66:61:52:b6:
cf:eb:c7:74:ca:7d:94:bb:0f:50:b0:8e:81:eb:eb:4f:83:37:
07:b5:c9:73:03:2b:50:85:9d:15:db:d3:ed:9f:f3:a8:82:9e:
95:63:0e:5d:5b:b0:bc:96:b6:85:e0:e1:e9:96:c6:82:a2:74:
00:97:0a:37:42:e7:01:c4:7c:a7:52:3e:c1:e2:9d:b6:09:b8:
b9:56:16:c1:88:33:cc:be:b7:07:ea:84:54:e6:65:37:23:14:
2c:a9:e9:1a:b3:e4:2a:03:f9:b7:62:4e:0a:7d:0b:5a:9e:51:
73:5e:54:4f:5f:37:ab:54:ee:65:7f:dd:e4:be:63:be:97:e2:
3f:6f:da:98:2a:2c:64:cf:5c:d3:cc:ba:3e:1e:b7:b5:69:b9:
a7:c8:db:ea:06:98:88:e8:67:18:1e:96:08:0f:32:bb:c0:0a:
ad:9e:50:95:b7:bf:1c:ca:ea:27:72:04:74:3b:b7:0f:2b:61:
18:40:75:88:9e:c2:24:3a:8a:6a:f4:4a:21:55:f9:2c:b6:0f:
a7:cd:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:30 2026 by rpki-client