Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: X/jx8BwmCTbSIg6dkmUhQLEnA2udmuv7Xqe29HiVEgw=
Subject key identifier: 80:EF:6D:D7:E8:EF:93:64:CA:FE:0A:5D:36:80:17:EC:63:BD:3F:76
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019D389C137A26F0759619EA99CD4D71E231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: 3kDRvhyYGLhqA-55XbpAGrLNvl0.roa (hash: Kd1IvjvDoUSLBaI4Td/hVyTLL9UmLBvq34CNcLf8TLU=)
2: QApS9RyloD4NoDnpEa95FuDk1ZI.roa (hash: CiFqNnH0ZASzXfep2jny9mXvFUeXbEdlqNdwXPVsg/I=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: snFhS8OAVPn/EiqzWxAlnMzmIdiBcvapC5kqzxogVAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:13:7a:26:f0:75:96:19:ea:99:cd:4d:71:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=80ef6dd7e8ef9364cafe0a5d368017ec63bd3f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:32:9b:69:e0:49:33:cd:00:8e:60:70:a8:
b7:97:62:da:1a:f5:19:05:98:0d:0b:95:1d:36:e9:
ac:85:af:f1:39:2d:6d:22:87:0b:94:40:32:1f:4d:
24:64:5b:88:f0:48:c6:03:75:fb:21:ad:6f:1b:e3:
6f:70:0f:23:40:0a:22:bf:95:8f:9b:b4:12:c8:94:
b9:b0:17:b0:c4:85:27:4a:eb:21:2c:31:76:1f:61:
11:18:f1:eb:cf:08:4e:b3:d7:5e:ea:8d:21:27:eb:
34:d4:83:c3:80:ad:43:55:27:13:90:90:2d:2e:53:
d4:01:1b:58:db:46:72:7e:8a:d7:ba:a2:98:83:b1:
18:27:ff:7f:2d:a7:a5:78:2d:7d:96:79:d5:12:fc:
0d:f4:e5:e9:56:22:bf:14:60:a5:e0:74:3a:66:35:
05:74:ba:6d:91:cc:cb:d0:8e:79:87:b3:00:df:12:
44:e0:17:19:5d:44:ba:a9:26:0b:5d:13:49:cb:27:
24:ea:74:7b:08:75:f1:93:c0:7d:3a:2c:ab:4e:45:
a6:b4:7b:53:4f:75:d7:d7:b1:17:12:7c:da:82:8a:
98:30:31:56:c7:86:c8:40:fb:96:a2:90:8e:89:1a:
ce:ef:fc:bc:4c:a7:f8:b4:71:ac:68:5f:10:e1:d1:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:6D:D7:E8:EF:93:64:CA:FE:0A:5D:36:80:17:EC:63:BD:3F:76
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:ac:ba:d1:96:ec:7a:8d:b0:a4:26:f4:ca:c4:c7:bc:80:
ac:ce:39:e8:97:82:3d:d8:c5:7c:2c:49:3d:d1:2f:e6:08:5d:
31:53:6b:7a:b9:db:d1:35:ed:b3:32:25:13:34:e0:73:b4:b7:
51:eb:ef:23:4a:08:26:d9:6b:57:8a:d0:0c:91:86:06:3e:bc:
08:1b:a3:aa:4a:24:e2:a4:71:bf:ba:a1:59:6e:32:60:28:ed:
80:95:07:cd:5d:77:17:0d:59:08:c3:53:80:35:9b:07:90:4e:
0d:79:64:69:53:f2:6e:be:ca:d8:46:f7:d7:5a:0a:70:0e:da:
30:d8:93:82:d1:23:8f:b9:01:a3:f2:b9:23:30:be:cd:6b:11:
c9:ce:73:19:46:bf:d2:54:96:e8:a6:5c:be:d1:66:ef:6f:f9:
03:96:e9:a5:12:90:8c:8e:41:7d:d5:8e:75:98:76:d4:7a:19:
4e:24:cf:8d:22:99:4a:55:cb:84:95:76:79:d8:a9:33:79:09:
f4:89:79:b7:94:00:3d:b3:16:fb:2f:85:c1:d9:75:37:a8:37:
2c:49:f2:62:31:27:36:d7:3e:61:a1:1b:40:cf:37:e4:2d:91:
d4:97:6b:d5:b0:7a:3b:8a:57:e1:36:7f:34:95:f7:7e:0d:63:
b2:77:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client