
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier: dL5ciF9BfkHWgnkazv9b4OHPkUaMdaG3ash+c03O97Q=
Subject key identifier: 35:58:6E:A9:6F:FF:79:DD:ED:92:C3:9A:EE:5E:26:A1:B4:BA:7C:98
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019CBF5F89C3365EDA0A7076C903F4F64095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number: 159E
Signing time: Thu 05 Mar 2026 19:00:35 +0000
Manifest this update: Thu 05 Mar 2026 19:00:35 +0000
Manifest next update: Fri 06 Mar 2026 19:00:35 +0000
Files and hashes: 1: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (hash: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw=)
2: 17C_vnF79Z0SjoScCQYs0Qbx30M.roa (hash: 8O33ZZG4CQkBtT5Vng3e75/g1VOrRLzBwAenPZwIQiA=)
3: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (hash: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU=)
4: 33HmxX5laer88g91bQT40p7G6N8.roa (hash: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI=)
5: 3ytiWjmFt3rYZft34LBPp9IPn8M.roa (hash: t6Z85iFlhPkY9Mi/GJk5DDB2tSPS3ygni+I6/1lEoxk=)
6: 6Dm3L1A6fwNf5cdJCg_KzTtfF4U.roa (hash: JWGAhkB/RVPvN6u4alw1RrRc1axraV68/7+Pht7ruCE=)
7: 6qoBSrrhi2VKQ2-x91iDJmcoOhQ.roa (hash: urnXFLFxbktUpf/FnGonIt+QH0Pj4s4eEnHDC6hX/xw=)
8: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (hash: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE=)
9: 9T5_OTvwktW8zRDsIc_oghwfJK4.roa (hash: DN/iAPUdkXHSXPrEJqQVCF4jzwo8vDZFSIr5wO/Xikc=)
10: B60g_m0QJwYIuA9KKm-uF1NhLIM.roa (hash: 9NtMYll9Etxivck/4newooAS+FDFrk33e9AIEWgcc8E=)
11: BjY0UIUDYHmtHwBNhaObIWAI358.roa (hash: OvPE9LHEEN/9/jOSuoQZt3aJ0JqPRafOAp/r5JidHtY=)
12: EHgktTf6m7_fov1qGoLd_G4GBHE.roa (hash: qTES87h7tbtM80VYUBu7n7wmyWPsetKC04PB5cOHzdk=)
13: HUq5r-QJOoCJ1eLD0wrmN9WulXU.roa (hash: rohOtLkiJZ2lqEQyOwpJqZMVus71D3p6WIHeG55/DBA=)
14: KdL2r09wZul28eEPN4dewnB7ukk.roa (hash: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q=)
15: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (hash: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ=)
16: LoYqb50w0fBtfcHsb6vmg_Jp5HM.roa (hash: 5JEsLkJAmr1UNeD7WuJILvN07Z2E4VXvHyU2P3noRJQ=)
17: LtPnBk6NSxo0XNLt66J042Sgc0I.roa (hash: Ss/KW/qryEzrYA7hPSNoI8jm1o8wvpp7Ys+hj0l/oCk=)
18: OfxjuwiEKWgdwrg-K1K-c5_VgLQ.roa (hash: UWtmb6ZbxoAUabXWP2QO5S1E8N0sWVkGkKY+3/ZZOw8=)
19: OwThGODJImZhpEQ6VocAEXk08Wk.roa (hash: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE=)
20: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (hash: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg=)
21: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (hash: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc=)
22: UE_hgXeXCUPJYDw6I06aW1aAkJ0.roa (hash: B5wHSL8kle+kiYR4U2yvdOPBll+rksc+6BTwGU5+ZZw=)
23: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (hash: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4=)
24: WmaJm0jDrpyJX9Q-LqqqCt-uwIA.roa (hash: eCuLoI4rD6y1bR6VEKccwXQk5/tx5hypqNKOEMMl80A=)
25: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (hash: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs=)
26: ZI085fx17wglNov032bXlk10RTg.roa (hash: j5Ko4ezz0l/Zfw3a/ZhaxENbSPKBPqajPZNL6E/+Gv0=)
27: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (hash: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs=)
28: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (hash: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc=)
29: bEtFnc7rnzCNJYBVd6ns7_KpUB4.roa (hash: PfuSivsRFYIl84wqTHOi1o/Y41ISwKTYQsUGOVnvA8c=)
30: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (hash: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo=)
31: cMPrRmSojB9SkGby8eR98Ete7yU.roa (hash: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8=)
32: cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa (hash: kafroNNbYDnc2h6nBm4gxZIlVlKGznDzvdAVuH5RGlI=)
33: evRG__ex8JGxNVzyfa2c0uYKq_0.roa (hash: 93Yx357YevAnWmJ/tXlOKW8HTJL/2XO97iLj27xdMN4=)
34: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (hash: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4=)
35: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (hash: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE=)
36: fv_FIWsQ6j6A0tVez5uEd3louso.roa (hash: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k=)
37: hAJCIirAsZk8GUXF7WubyM8TjKI.roa (hash: j6pH65MDKZ3nETHCyHm0OLZKv7Eb9miovENp+54ETCc=)
38: iarmlWK_D1F2Y519OMWB6VCc31g.roa (hash: WFVbmq4d03vzZGnbmXlce/4IUJO9Lw5GHMqxL1YbJaE=)
39: j9orTwG1Vgweag4E9VIs_WouzoE.roa (hash: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is=)
40: jD6mM0pl55Gkfup6YBb23hzuzk0.roa (hash: gYpmzgS3WeGkMeLq1vK2W75gJCmA3gbQBsEJ6rVnTeg=)
41: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (hash: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc=)
42: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (hash: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14=)
43: n0NR6OiiSRVLpNipRarNfvBQVBQ.roa (hash: x7+Hnm6izCIj5uo7DZZ8rAC8clBtC3HKKYVdoqJqJww=)
44: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (hash: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0=)
45: o0zFW0tgu0SNCajq1-Pj04reASE.roa (hash: XI8Y+MP7U7GXabQcnglenR9AR3VDKkEoKmwdTMvnwSA=)
46: pP92nXUgnFxyzmxr642WITYfjR8.roa (hash: TqxUp210JvwrsHlKUxm5AHk6pYYpaSVTd52yZrfvpuk=)
47: s9bHtYw6qGInBE6Pd4y6dDNszho.roa (hash: DuL4nvwJ3GhqWQoioLF44KGKjnyU3aqouWmY/jU6w4Q=)
48: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (hash: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E=)
49: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (hash: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI=)
50: vxHiN8XYZlqNx9pegdEwtdXJzX4.roa (hash: DRRytWcqFbSlVtkcmI8YNqgxFW5pXUdMhy1Q5V9THDo=)
51: x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa (hash: T+4iofAbDpf5avC4l/+tJIoT9rhbeVtFuRCldw4lWGM=)
52: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (hash: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs=)
53: xREJbZysiuR_7AfAbkb-_mvdCJU.roa (hash: ge+uzdtNTlkRHujnITIjJNysWOPLtwdYoaqf4cikYBQ=)
54: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (hash: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58=)
55: yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa (hash: 8kj3LqF1iVRGrMYtJSTCYp1IezJP4n7oP1W8pfH6tR0=)
56: ytt2iIs36bszj8mftd5slrzDQco.roa (hash: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY=)
57: zGv39sxT-IgxK9wQigpzw1dL81k.roa (hash: +TgYlQl9Z+mDQd/s9Yb0REr9Dx/C5mDs1i0ouWI4Pcw=)
58: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: K6DkE02qWFPJJ3BSv/kRrETwTd/2GWE42BYPyg8qRI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:5f:89:c3:36:5e:da:0a:70:76:c9:03:f4:f6:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 5 19:00:35 2026 GMT
Not After : Mar 6 19:00:35 2026 GMT
Subject: CN=35586ea96fff79dded92c39aee5e26a1b4ba7c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:ce:ba:6c:ef:8f:7d:21:01:98:9a:09:ff:
cb:fa:9e:81:00:a1:2d:7e:3e:18:31:11:f0:84:d5:
47:d5:e4:1c:b8:2a:28:f6:9f:49:d2:03:0a:f5:11:
f3:be:0f:33:21:08:73:01:15:84:6d:52:f1:5b:de:
7d:bb:f7:b8:41:dd:06:8e:22:2f:5b:d5:1e:f9:ed:
aa:32:52:1d:12:25:ca:71:5d:28:55:86:59:0c:e8:
5c:15:23:e4:1b:ae:ad:ea:85:98:2d:43:e1:c9:ea:
3c:ea:bc:d5:7e:a7:62:ef:67:92:45:17:7d:96:53:
cb:c6:49:de:24:04:4e:17:01:45:ae:df:c0:af:b0:
b8:55:66:26:a7:5e:f4:30:b8:c5:b5:7f:fb:61:c5:
15:78:01:46:8d:25:bb:a2:6c:57:f6:93:0a:54:73:
bd:e9:a3:15:e7:9b:bf:96:4f:a5:34:df:6a:35:c1:
d1:d1:4a:29:3d:2f:99:07:e0:50:5c:bc:b9:69:a7:
4a:96:04:53:a3:0b:ad:19:6b:77:9b:9a:08:bd:40:
e1:6f:eb:51:e7:97:d2:28:13:25:38:89:5f:2d:b8:
fb:f9:76:99:2b:44:94:b5:d3:cc:9c:ef:f8:71:a8:
fc:5b:19:d9:92:d1:59:1f:de:af:70:3c:08:8b:b1:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:58:6E:A9:6F:FF:79:DD:ED:92:C3:9A:EE:5E:26:A1:B4:BA:7C:98
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:27:8f:d8:64:e7:0a:e3:f6:8d:6d:2f:0c:64:e0:e7:8b:6a:
e5:65:ab:0e:ac:ee:c6:38:b4:79:8a:27:eb:03:03:99:14:3f:
58:3b:c4:1a:77:4a:e5:71:51:01:ce:ef:71:b5:ac:ae:42:a4:
b9:04:5d:a0:86:34:1e:c2:ea:17:f2:2c:fd:c7:c6:15:0c:45:
d7:2a:c1:1a:05:38:4b:ae:13:7c:0a:2c:0c:f4:b3:b7:c6:97:
a5:88:ee:53:7f:e4:8e:b5:c7:74:e4:47:c8:11:2f:90:1f:6a:
91:ff:a4:8b:76:2f:01:04:62:dd:8e:d9:8d:8a:88:b0:6e:6f:
92:00:93:e7:ad:3b:2c:0b:b2:95:a1:70:2c:78:9e:48:17:0c:
4c:5f:5d:c8:81:1f:46:3d:42:8c:f6:cb:40:60:f6:cb:91:1d:
db:03:d2:56:52:da:15:43:11:be:62:c6:b2:da:60:2c:fd:1a:
a3:6c:2a:ce:fe:65:99:17:81:db:35:71:eb:ed:1a:b6:31:50:
22:57:73:7b:db:47:b8:6d:0d:44:a7:8e:53:3d:44:73:a0:1a:
f4:b7:ca:e7:d1:62:56:a9:79:a7:2d:aa:8f:ef:3b:9b:a3:1c:
bf:52:d0:cb:e7:5c:1c:52:28:29:c0:1c:69:a8:5b:7d:82:03:
95:a6:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:30 2026 by rpki-client