Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: d9tDj4dyqXsYtN2eNp1eUCNOge23pTLQomOSwjkkPq0=
Subject key identifier: 32:3D:7C:CE:77:02:68:81:1B:80:B1:7F:B5:E2:61:D1:CC:BF:F2:69
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 019DB16B4866B6C259921CE505FFF8F4A7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0F5E
Signing time: Tue 21 Apr 2026 19:01:31 +0000
Manifest this update: Tue 21 Apr 2026 19:01:31 +0000
Manifest next update: Wed 22 Apr 2026 19:01:31 +0000
Files and hashes: 1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: WBs/wjxMl4I3MgDF+Bw6XtKEbySWkx1pecrXfZDKTm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:48:66:b6:c2:59:92:1c:e5:05:ff:f8:f4:a7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: Apr 21 19:01:31 2026 GMT
Not After : Apr 22 19:01:31 2026 GMT
Subject: CN=323d7cce770268811b80b17fb5e261d1ccbff269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cc:d9:9d:17:ed:81:43:92:c3:17:7c:b2:ed:
d7:39:8c:38:6b:49:a9:5b:23:36:c8:2b:7d:60:ac:
6b:72:02:59:4a:3b:26:2e:33:34:f9:c8:1c:78:d1:
9c:f5:f8:8c:55:4f:83:bd:1e:7e:6e:67:12:18:61:
e3:0e:e3:f0:a6:62:0d:aa:2d:0c:89:6a:f0:41:0e:
9b:e6:23:b1:71:2c:8b:c8:e4:1d:b8:33:9d:69:29:
d6:30:0c:0c:e7:74:71:14:92:d4:c2:d5:3e:a4:3e:
93:e9:72:52:28:f6:e7:d8:d9:67:0d:01:23:13:fe:
ca:5d:94:e6:ae:cc:cf:d2:6b:5e:9d:66:4c:f3:6d:
48:ed:eb:20:cd:34:11:65:73:53:48:8d:19:a2:5f:
ec:66:b7:2b:dc:b2:51:ff:68:af:f7:cc:96:00:7c:
d4:d4:5c:8c:d1:76:34:9a:a6:bc:b2:c3:ff:c1:c0:
cf:94:20:17:e0:63:bd:9b:c7:e9:60:4f:f4:00:ea:
1c:7d:d7:81:53:88:2c:12:27:ba:38:17:8f:a0:9f:
c1:77:5f:5e:1b:45:ff:ec:59:d0:fe:db:78:8c:be:
89:46:1e:2d:7e:06:fd:0e:64:80:4b:a2:c0:f8:94:
0b:de:f5:7c:c9:62:b5:ca:69:ba:db:0a:00:58:ad:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:7C:CE:77:02:68:81:1B:80:B1:7F:B5:E2:61:D1:CC:BF:F2:69
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:d5:74:03:ac:d8:6e:e5:78:eb:65:94:ca:75:96:6e:63:
44:59:2f:b7:b3:27:20:7b:41:a8:80:0f:fd:9a:94:51:60:15:
de:2b:cc:49:b2:ae:66:86:be:6a:52:fa:3f:f5:24:dd:a7:74:
e1:0b:1b:3e:e4:95:0d:af:13:71:e5:81:8b:f6:73:f4:45:c0:
b9:51:2c:d5:ea:d2:27:b2:18:bf:cf:24:3d:b7:c0:98:bc:79:
cf:8f:1a:93:2f:00:be:7f:31:7e:12:70:69:1c:6d:59:24:09:
47:b8:c3:ca:f7:70:02:fb:dc:7f:3a:42:79:99:cf:e8:b2:dd:
63:34:4e:cf:54:00:22:c2:24:ef:35:86:86:69:0c:a7:c3:20:
67:c8:08:10:26:d0:68:48:ec:0f:53:c3:9a:a1:a7:f6:0d:c3:
03:b0:a0:30:78:a3:bf:8c:45:0f:3b:3e:9e:2c:e6:8d:17:1f:
42:79:5b:72:5d:ed:df:61:a3:7d:0a:4f:41:9c:7e:6a:ba:d6:
19:00:93:34:b8:6c:e3:04:b2:b5:12:d8:37:f1:fe:af:af:2a:
82:9b:34:84:d4:37:f1:56:2b:28:79:bd:f8:1f:ca:2e:57:50:
ef:02:91:a9:34:bf:19:d2:0f:31:0b:ee:91:3d:ac:b6:81:20:
e5:c0:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:44:37 2026 by rpki-client