Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: WBz33MsSPjW37748x86N+IakE+7qWxLUxBI4iHULtsk=
Subject key identifier: BC:81:DE:CB:22:64:05:16:FD:FD:9C:FD:99:78:1D:E1:CB:EB:46:B8
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 019D389C04C3C98CA543E9DA5C6CEDEA70AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 101A
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: GwZ9dNA86AIDNnsAq70FiAkZYj8.roa (hash: qnSiAyQRIBiRzYavimYlFJSyS25EakQKaTIGVx1R3tU=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: uVbWjAyZ+nksKGF3kaQzUTa2Jydbm/J5pi+ym7gaEtc=)
3: irQyC0ot9r4PxzPSLvST2QH-X0Q.roa (hash: kwnqay2aLOiYKa/WS1eZrTNeCkIkn0WSXDieMB7/M7Y=)
4: yw5w5uCdPdnhgVsaZXUZ6mCgC8k.roa (hash: /944unZ7CSMOwiuR6yhIgpH4mt1fcLA58yVZkErRY/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:04:c3:c9:8c:a5:43:e9:da:5c:6c:ed:ea:70:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=bc81decb22640516fdfd9cfd99781de1cbeb46b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:d4:5d:c3:70:5b:1b:f5:6c:82:30:24:5e:
ba:a3:ec:83:39:11:e5:3b:73:85:9f:04:73:cf:3d:
21:4c:42:b9:80:24:90:ae:05:56:e2:ad:3d:f4:cd:
91:9d:25:63:db:9f:82:8b:44:a4:f7:01:e7:8e:48:
d5:6c:5b:ac:5f:47:8b:d2:58:23:d9:08:4f:d7:00:
4c:07:ff:47:7e:07:92:46:a0:9c:ad:03:d5:aa:67:
e2:d6:22:5b:09:dd:91:0f:86:e8:4d:de:2b:cb:55:
90:b1:de:1f:fa:23:4b:4a:f8:86:91:00:b6:04:06:
d0:1a:59:f2:ee:db:07:32:2c:9a:e5:8d:a3:11:f3:
61:4f:21:7b:f3:d7:03:10:22:47:86:47:75:cf:52:
ed:00:ed:50:07:cb:67:89:70:ef:17:20:53:21:fb:
89:fa:df:5f:bf:37:57:a3:8f:eb:69:1f:c0:d3:a0:
6d:31:90:33:4a:88:cf:d9:8a:0e:de:3f:f2:e5:4c:
ed:71:18:20:25:5d:eb:a1:3d:05:d8:1f:25:28:f8:
9d:d8:3f:7c:87:6d:ae:22:70:7e:2f:79:69:96:02:
b3:46:f5:68:9a:42:d8:ac:66:0b:75:6c:d5:4a:9a:
8b:cd:84:da:9c:9a:69:a7:c4:86:52:ee:70:58:71:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:DE:CB:22:64:05:16:FD:FD:9C:FD:99:78:1D:E1:CB:EB:46:B8
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:e1:02:f8:48:87:32:13:51:71:e3:5a:e4:4f:f1:c9:0d:
fb:fd:6d:89:1d:5e:5b:cf:69:54:09:be:86:8a:b6:7e:8a:64:
bf:b4:f7:b1:91:2d:13:8b:32:72:5f:da:86:5c:3a:ff:08:3c:
0c:79:ab:99:35:2c:70:5c:c6:02:9b:7e:3b:e4:40:3b:a0:b0:
26:4c:1e:d6:2c:8c:f3:cc:36:ef:09:6d:46:9a:f7:e9:39:b9:
96:36:73:4c:5a:c1:3b:bf:72:f8:58:b2:70:4a:f7:47:b4:17:
4f:48:12:e6:00:b2:11:55:3b:e6:bd:7c:4e:35:14:19:7c:d3:
c4:2d:c0:3f:c0:41:5d:f3:71:25:c8:f1:2b:f3:16:84:ab:07:
30:a5:4c:26:20:39:1b:68:60:f4:86:db:c4:b8:28:98:93:d4:
ad:7e:87:8c:a2:c9:cc:bc:04:82:26:96:ec:07:dc:64:07:5d:
5b:92:44:ea:cc:3c:eb:39:1d:e0:95:02:14:a9:f5:55:7c:a8:
56:65:43:be:e9:1e:68:d4:c6:4f:7f:0f:5b:fc:54:8f:af:1c:
7e:32:bd:c5:55:6b:c1:ee:32:16:b1:a7:d9:5a:93:58:a2:4a:
d8:63:70:ae:41:70:8a:c7:40:f9:23:8d:eb:7d:c6:82:82:ce:
f4:7d:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:52 2026 by rpki-client