Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: iJFHRI+1oy1oDMWoyKqgU2S08BQ3r2tRIavE/eqTqkg=
Subject key identifier: 77:2A:03:FA:00:C3:02:78:79:73:E7:33:0A:03:4E:58:DA:62:64:3B
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019E405346FA8E23DD3DA70907486EEA2568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1921
Signing time: Tue 19 May 2026 13:00:59 +0000
Manifest this update: Tue 19 May 2026 13:00:59 +0000
Manifest next update: Wed 20 May 2026 13:00:59 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: 40gYpmF/1oMmrgn9Ws57IXuNqXuC8tivXkgek8veMJU=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:53:46:fa:8e:23:dd:3d:a7:09:07:48:6e:ea:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: May 19 13:00:59 2026 GMT
Not After : May 20 13:00:59 2026 GMT
Subject: CN=772a03fa00c302787973e7330a034e58da62643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:5b:a7:87:34:db:0b:da:43:83:f3:db:e9:
74:07:fa:b1:d4:08:25:fa:99:87:22:42:97:11:03:
ac:12:65:68:19:df:22:5c:bb:eb:63:8f:d1:88:c9:
9f:13:47:27:fd:3d:a5:a8:c4:6c:a6:5f:c5:13:0a:
52:54:d7:75:77:1b:44:65:39:19:55:cf:b0:e6:ab:
51:a1:a3:87:45:b3:05:b4:b5:f7:da:d6:48:84:7c:
44:8b:d2:49:d3:bc:32:58:60:5e:82:59:6c:b4:d2:
f3:e5:80:3f:37:41:8d:8c:e8:35:79:9c:e6:a0:04:
25:59:7c:90:d0:f1:69:7c:73:b2:da:36:77:b7:7f:
06:32:0e:bf:ae:77:2c:c8:51:2b:4e:04:d1:07:c0:
2d:7b:5e:90:2b:63:7e:13:e2:07:08:d5:48:77:84:
e6:5a:14:0e:ba:15:a5:03:dd:10:f0:8d:1b:fd:95:
2d:9a:40:75:0c:41:2d:8d:8b:7b:8d:e1:74:15:31:
d4:56:bf:64:89:c6:96:68:59:51:4a:4b:80:33:44:
a0:0a:38:d9:35:fb:26:28:7a:28:fe:a2:ad:71:95:
62:f0:d4:dd:1e:84:4d:ff:bd:ca:73:ed:f8:74:4a:
de:6c:4f:d8:b6:be:54:b7:4b:9a:4b:74:48:23:48:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:03:FA:00:C3:02:78:79:73:E7:33:0A:03:4E:58:DA:62:64:3B
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:03:b5:ee:97:b2:57:8a:e4:f5:9c:67:03:56:8a:3a:10:6a:
99:ba:94:23:e6:75:f6:99:bb:09:86:64:f0:56:9d:9c:16:29:
6e:b0:05:43:6f:f2:cc:4e:6b:ce:ea:ec:f4:3e:da:f5:eb:81:
b2:1e:9d:c5:fc:5f:f5:17:7f:f8:e1:3f:0d:5d:56:57:b0:74:
bb:75:72:04:e1:c8:ba:cb:87:22:6f:91:b5:7a:47:01:dc:d3:
4c:3c:b3:72:52:32:35:ce:13:c4:ef:a2:27:74:b1:f6:d8:10:
15:fc:99:4f:64:51:38:f3:64:4b:93:99:fd:5f:d1:17:28:65:
3e:e6:20:98:62:84:ed:3b:dc:cb:6f:a1:07:a6:f5:66:0e:16:
42:27:47:b3:63:b9:69:30:56:b4:c5:e1:60:39:e5:13:90:0c:
13:19:83:c2:f7:9e:50:3c:00:be:b6:f3:e6:51:68:ce:f5:bc:
28:a8:08:74:7b:8a:c5:09:f8:cb:2f:d2:23:51:0e:df:43:50:
fe:63:34:09:46:a9:ad:fa:ef:bc:a7:ff:64:6b:23:21:cd:60:
91:21:28:8c:fb:c5:40:2a:d3:14:96:7f:1d:a1:9f:f5:d3:9e:
08:6c:bb:18:d0:a9:a5:4b:62:38:fa:5e:93:59:28:7f:63:8c:
73:d2:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:45:50 2026 by rpki-client