Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: xxQ3U2kGAAYFO57527XUszSvGPhsPpGaXp5CbaraGM4=
Subject key identifier: 13:49:63:82:E3:0A:6E:A0:B5:5F:FD:CC:AF:C9:41:24:1F:78:F2:DD
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 019D3752C364110FD7B28F1C0EDB0A142B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 10EE
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: Wcz0ftkKeuX2k1o_TiQ_1hXFk58.roa (hash: iZlk4p7VXTU6ENrDviKNzDvlEi8TVpmFuM/Rky4WSog=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: linG/x8U0ytH80M1bvFjjVjCcxVPFJr/otbOOF4wcfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c3:64:11:0f:d7:b2:8f:1c:0e:db:0a:14:2b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=13496382e30a6ea0b55ffdccafc941241f78f2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:77:57:02:19:be:cd:18:31:74:99:e1:24:
a3:88:43:9f:7d:54:9e:c7:37:53:0f:d9:89:ee:7d:
64:8f:d7:cb:1f:56:27:5e:86:be:7a:30:1c:34:d8:
69:86:48:73:3b:07:d7:17:bb:65:0d:aa:cb:7d:42:
1b:32:f5:2c:44:40:3a:71:5f:94:a7:ee:6d:8b:bf:
8c:e5:39:e2:66:f7:a1:c9:83:52:dd:07:4e:fd:2a:
3c:e5:a0:a6:d1:08:79:e6:bd:96:25:37:b4:66:39:
20:1a:a7:70:f7:89:10:13:ed:a6:63:5a:6f:af:2a:
c1:22:6e:a7:ae:82:87:d3:7f:5c:2e:a7:5e:b2:79:
75:bd:5f:8f:f4:0f:7f:52:98:ba:c6:32:b7:07:13:
11:35:c4:66:d9:3c:8e:6c:58:5f:71:89:d8:45:46:
de:23:25:38:f4:35:44:f6:40:2f:dc:bc:e9:fc:7b:
e1:0e:af:21:04:4f:c6:ae:52:52:f6:7d:a1:56:db:
01:53:d7:a9:74:91:31:30:4c:9d:55:53:79:f4:9d:
15:33:f6:76:0d:cd:f0:e7:0f:95:01:a4:c4:de:09:
92:ff:17:be:a2:e4:ce:3d:93:c8:06:87:5e:f1:46:
e1:d6:c6:9b:10:5f:3b:94:d7:fc:44:25:ad:27:27:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:63:82:E3:0A:6E:A0:B5:5F:FD:CC:AF:C9:41:24:1F:78:F2:DD
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7f:19:a6:54:07:c3:02:27:aa:69:69:ad:61:85:41:13:1c:
66:46:d9:cc:c8:81:e9:11:6c:7b:4e:a9:0a:6d:74:08:e2:85:
e6:ed:74:cd:4c:25:9d:54:07:22:62:49:7c:e9:a6:62:37:1e:
93:2f:89:9c:8c:55:28:0a:a9:d8:72:26:01:bb:08:e0:73:4b:
1f:c3:62:e1:0c:70:e3:c4:21:14:17:ac:0f:83:f7:9a:6e:cc:
65:20:78:82:69:97:52:4e:90:4c:45:d8:54:6a:8e:3a:46:89:
69:23:78:58:04:ae:32:91:f2:bb:0d:6b:f9:c4:02:40:f3:ac:
bc:a9:bb:51:31:ac:24:fd:08:0b:7e:67:94:59:f0:0b:4e:d4:
1a:1b:06:10:f6:b6:74:e3:e9:f3:b6:18:a2:9c:29:86:8a:9f:
51:76:d7:7f:27:c8:00:01:d0:c1:fc:f1:98:62:9c:7f:fd:21:
11:65:5d:03:28:f4:77:30:44:1a:c3:2d:31:52:b2:87:39:e0:
f6:80:70:90:c3:45:ff:41:5c:74:c7:e8:b2:27:5d:5b:f2:3f:
38:6e:d5:46:1f:2f:3a:1b:b9:85:f3:34:86:68:6f:8d:ef:ab:
3c:da:e1:72:98:58:d8:c2:09:51:da:da:a2:a1:d9:0f:e0:1e:
82:d8:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:42 2026 by rpki-client