Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: jzuzF14KK8ZOnW1rCR1PjMgxKc4htTRn61lqOYoXNLs=
Subject key identifier: 1B:D6:6E:98:3E:2B:A5:7F:ED:1C:93:48:29:8A:F5:B1:77:35:44:44
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 019DCE2B5888D529E752922BC07EA44C7818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 09:00:40 +0000
Manifest this update: Mon 27 Apr 2026 09:00:40 +0000
Manifest next update: Tue 28 Apr 2026 09:00:40 +0000
Files and hashes: 1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=)
2: H65TgkcKS-a8hILxMZ_8VIGp_Q0.asa (hash: EHncor9xUQtHcVvs7d4fpQlv6e3PfXGs5zWe6/zrxDQ=)
3: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (hash: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=)
4: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: 2rMMZySrsQncxPbwQ5N9yH4nvIpbYVFmiHhrRRTIOpc=)
5: nfa8lcMTUWIbtIpuf80s2YziubY.roa (hash: hUm8YjaYLbHJUISE3EmfzpSWnBzmCV6l9EAAD3oXKsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:58:88:d5:29:e7:52:92:2b:c0:7e:a4:4c:78:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Apr 27 09:00:40 2026 GMT
Not After : Apr 28 09:00:40 2026 GMT
Subject: CN=1bd66e983e2ba57fed1c9348298af5b177354444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:8e:18:56:6e:ea:77:e2:da:15:b2:94:7d:
6f:61:57:3f:e1:8d:4e:5d:33:ab:bc:ce:bf:d5:f8:
fb:21:55:59:d2:4c:aa:f8:9f:80:76:a4:d6:a6:90:
97:9b:13:27:69:42:2d:eb:37:43:53:8b:71:37:0d:
95:d2:f8:70:d6:90:08:f1:d0:f6:9e:ad:d4:95:70:
ba:81:1b:db:4c:ba:f6:9c:e3:25:0b:48:d8:bc:7d:
31:2b:fc:ab:68:37:f6:b2:ed:52:d9:05:5b:39:7b:
a8:06:ca:9c:ee:eb:1b:47:77:8a:20:62:8b:5d:31:
f9:7b:70:7e:90:b8:78:a3:6d:80:8c:4c:d3:53:26:
ca:63:d4:b1:12:06:48:1b:d4:9e:57:fd:ab:38:ac:
78:ab:e4:b7:2a:90:8d:1a:4a:b3:b0:65:d3:29:e4:
6f:01:ff:e9:52:82:dd:d0:77:e8:e1:b0:11:3d:25:
2e:bf:58:39:1c:15:b9:47:e4:c6:a5:42:db:ab:09:
73:8e:b6:e2:ad:6f:d3:c9:07:53:f7:55:76:3d:c0:
fd:e3:83:78:ff:8c:99:cd:b5:79:e1:85:f7:b2:25:
40:8a:de:cd:cf:b3:52:8f:f5:21:72:64:bd:71:16:
5c:f4:4e:54:f2:08:df:b4:51:b1:e1:d3:aa:25:0f:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:6E:98:3E:2B:A5:7F:ED:1C:93:48:29:8A:F5:B1:77:35:44:44
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:c8:df:aa:65:7b:cc:a8:66:06:3d:31:1d:91:27:66:28:
3f:f4:d2:58:3b:94:bb:11:b9:bc:28:45:96:a8:e3:2a:81:ea:
82:4c:6e:4f:bb:0e:95:31:b4:fc:a3:74:d9:ce:30:68:50:a4:
39:80:a1:16:1f:6c:c1:c2:cc:8f:8f:78:58:c2:9f:eb:c2:af:
97:a4:31:32:0a:89:cd:2b:f3:0a:73:29:05:99:90:b7:5d:38:
82:ff:8c:3e:75:d4:19:ca:52:85:7f:8e:b7:a7:4d:b8:e3:c3:
5f:11:21:7d:92:a8:19:67:59:de:73:fb:d9:82:1e:ad:87:60:
71:68:fa:ba:7c:a5:28:f8:02:43:f3:6c:8c:f3:c3:5f:a5:e2:
b4:e7:da:57:76:83:16:ce:87:1c:18:d3:b0:bc:0a:a6:04:3f:
93:18:7a:11:fb:f1:b8:ca:45:39:0a:d5:2a:fc:65:b5:39:e7:
cb:6a:d1:32:d2:b3:05:91:d5:12:b0:b0:28:02:d5:33:75:f9:
82:3b:e4:a7:5b:e5:2c:71:1f:89:88:76:fd:98:6f:fe:d0:bb:
cf:cb:ce:4d:06:e2:fa:10:b9:fe:3c:6d:92:61:24:ef:11:ff:
90:90:e0:f2:85:80:a5:86:14:02:63:bf:9b:1e:57:4b:9a:6c:
40:50:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:30:02 2026 by rpki-client