Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: DXI/C95FEHWERse3n7nXxkBXEl5MdJm1g7rQ37IZVro=
Subject key identifier: 03:BE:A1:83:9E:51:7B:3B:A2:BF:46:24:B7:DA:B4:25:A4:25:A3:91
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 019E30048D8E1486A989B86FFF8A82A59308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 16E1
Signing time: Sat 16 May 2026 09:01:05 +0000
Manifest this update: Sat 16 May 2026 09:01:05 +0000
Manifest next update: Sun 17 May 2026 09:01:05 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: YkojdO7mGBeCQU/2Tc+Xn45c52S2wYev9197/+Yc+Gc=)
2: aZozQbsLNzWTWh979aC5KVoomjc.roa (hash: khyaB+xGbWO3xIBxNeT7Qhtel/gluFX742TffrR7Ijw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:8d:8e:14:86:a9:89:b8:6f:ff:8a:82:a5:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: May 16 09:01:05 2026 GMT
Not After : May 17 09:01:05 2026 GMT
Subject: CN=03bea1839e517b3ba2bf4624b7dab425a425a391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:2a:f9:8f:40:c3:17:45:95:86:9d:d8:a5:
ba:e8:97:ad:3c:52:60:e7:57:fd:6c:cd:f7:b5:ac:
61:84:b5:15:78:3a:75:bf:18:04:e2:e7:44:40:67:
79:4c:1c:2e:60:cc:60:f4:b8:3a:c7:48:6b:af:9f:
ce:4f:76:2c:e2:63:41:0a:57:ab:93:bc:c4:db:4a:
ad:e1:dd:a7:be:24:bc:ab:c8:66:d3:5d:a1:71:ec:
e6:d6:84:ee:87:28:e3:4f:1b:44:b2:6e:22:b1:ef:
e7:00:33:82:b5:98:a6:a5:f3:39:f5:06:12:80:9e:
5d:16:22:68:ec:3c:97:67:72:68:24:a6:fd:75:8b:
80:47:12:38:9d:4f:2f:79:78:e2:75:35:b7:0a:26:
98:1e:53:9c:bc:1c:17:b7:94:58:ff:51:ad:a0:d8:
b9:d7:e0:b7:b0:2a:f2:7c:0a:97:45:c9:1c:0e:dc:
0c:51:ce:ad:4f:6a:14:2a:05:51:35:98:e4:df:8c:
c0:94:2d:e2:25:32:a0:fc:cb:7d:20:45:65:6b:56:
3a:b4:72:17:22:86:97:ba:54:32:a6:e9:be:68:69:
0a:21:f8:a3:05:c5:93:8b:ef:ec:53:95:82:01:f9:
9e:ad:be:77:5c:39:ea:1d:6a:e5:b2:15:ae:2c:a3:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:A1:83:9E:51:7B:3B:A2:BF:46:24:B7:DA:B4:25:A4:25:A3:91
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:59:d2:19:36:93:e5:c9:9c:08:b3:76:a6:fc:0b:64:9e:c3:
70:13:8b:7b:b6:59:1b:45:df:6b:e6:ee:f8:5c:8c:75:0c:af:
c1:4f:e4:84:5d:ad:a8:ff:fa:f0:79:a8:5b:ec:5a:96:6f:70:
8c:cf:30:5e:1a:d4:21:c0:cd:f1:c9:5e:d4:99:3c:ac:50:fd:
c5:dc:b5:6b:59:85:a5:9b:a0:7b:53:5d:58:d7:d6:96:1a:66:
4c:08:57:6e:e7:81:21:a8:02:07:fc:b4:b9:3e:70:fb:4a:26:
97:d1:63:33:bf:02:98:04:76:60:06:f6:43:55:ed:71:5a:87:
d6:3d:e8:2a:56:13:3d:c4:4a:9e:62:dd:18:91:96:82:38:7d:
59:21:86:73:cb:1b:66:0d:76:44:66:3f:f9:3c:d4:8b:74:db:
45:32:7f:c4:71:06:f0:3d:48:13:4b:c8:84:6b:9c:d0:4e:da:
35:bd:99:64:87:29:97:f6:30:6d:83:c7:02:6b:96:c6:cd:44:
df:53:59:50:e8:05:98:3d:f3:f9:40:d4:d1:a2:fd:82:51:ef:
4e:51:43:6a:fe:e7:3c:d4:41:dc:2d:7c:85:2a:c5:14:25:a4:
3b:53:67:e9:48:3c:77:f3:b5:a6:08:11:6b:bf:d2:49:81:f6:
76:4b:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:02 2026 by rpki-client