
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier: jF7hEAkO2XK2Nk1MpNcIE5AeS/mfpzb0YbTxyDf0lqw=
Subject key identifier: DB:86:8C:46:87:66:5D:A8:61:3D:3B:DD:D9:35:2B:F4:4C:BE:A4:D7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019DA78BCBDB1E194FB82A301D0768AB01D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number: 161F
Signing time: Sun 19 Apr 2026 21:00:49 +0000
Manifest this update: Sun 19 Apr 2026 21:00:49 +0000
Manifest next update: Mon 20 Apr 2026 21:00:49 +0000
Files and hashes: 1: 1-NsEHLx-eCVp3HdDoeVIIDfOsCY.roa (hash: pj0S6oIRxdwKeKdRCJ8qFa3eLIG38zihiKc5Ag9MNh0=)
2: 1-p6L-7qJU2ku_9VBNoVZguN8tJ4.roa (hash: ZUbeF7b+rOkR43MMCdm/LVogv18EYaheT3PjiUGBxXw=)
3: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (hash: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw=)
4: 17C_vnF79Z0SjoScCQYs0Qbx30M.roa (hash: 8O33ZZG4CQkBtT5Vng3e75/g1VOrRLzBwAenPZwIQiA=)
5: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (hash: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU=)
6: 33HmxX5laer88g91bQT40p7G6N8.roa (hash: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI=)
7: 3ytiWjmFt3rYZft34LBPp9IPn8M.roa (hash: t6Z85iFlhPkY9Mi/GJk5DDB2tSPS3ygni+I6/1lEoxk=)
8: 6Dm3L1A6fwNf5cdJCg_KzTtfF4U.roa (hash: JWGAhkB/RVPvN6u4alw1RrRc1axraV68/7+Pht7ruCE=)
9: 6qoBSrrhi2VKQ2-x91iDJmcoOhQ.roa (hash: urnXFLFxbktUpf/FnGonIt+QH0Pj4s4eEnHDC6hX/xw=)
10: 7s8Zd4ojiKtZ9DGR5Pd0PnhYYoc.roa (hash: UzKpuxfOPy68fW95fKfvWl7CL59JMmKXeRepdx93Bls=)
11: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (hash: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE=)
12: B60g_m0QJwYIuA9KKm-uF1NhLIM.roa (hash: 9NtMYll9Etxivck/4newooAS+FDFrk33e9AIEWgcc8E=)
13: BjY0UIUDYHmtHwBNhaObIWAI358.roa (hash: OvPE9LHEEN/9/jOSuoQZt3aJ0JqPRafOAp/r5JidHtY=)
14: EHgktTf6m7_fov1qGoLd_G4GBHE.roa (hash: qTES87h7tbtM80VYUBu7n7wmyWPsetKC04PB5cOHzdk=)
15: KdL2r09wZul28eEPN4dewnB7ukk.roa (hash: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q=)
16: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (hash: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ=)
17: LoYqb50w0fBtfcHsb6vmg_Jp5HM.roa (hash: 5JEsLkJAmr1UNeD7WuJILvN07Z2E4VXvHyU2P3noRJQ=)
18: LtPnBk6NSxo0XNLt66J042Sgc0I.roa (hash: Ss/KW/qryEzrYA7hPSNoI8jm1o8wvpp7Ys+hj0l/oCk=)
19: OfxjuwiEKWgdwrg-K1K-c5_VgLQ.roa (hash: UWtmb6ZbxoAUabXWP2QO5S1E8N0sWVkGkKY+3/ZZOw8=)
20: OiZkApTkbsub96VB1Z9E4YWYXsY.roa (hash: 8WK7mfrWGnsXUnqRlkBdlaeLjGIF0lIsOcdanN+xnyE=)
21: OwThGODJImZhpEQ6VocAEXk08Wk.roa (hash: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE=)
22: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (hash: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg=)
23: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (hash: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc=)
24: UE_hgXeXCUPJYDw6I06aW1aAkJ0.roa (hash: B5wHSL8kle+kiYR4U2yvdOPBll+rksc+6BTwGU5+ZZw=)
25: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (hash: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4=)
26: WmaJm0jDrpyJX9Q-LqqqCt-uwIA.roa (hash: eCuLoI4rD6y1bR6VEKccwXQk5/tx5hypqNKOEMMl80A=)
27: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (hash: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs=)
28: ZI085fx17wglNov032bXlk10RTg.roa (hash: j5Ko4ezz0l/Zfw3a/ZhaxENbSPKBPqajPZNL6E/+Gv0=)
29: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (hash: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs=)
30: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (hash: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc=)
31: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (hash: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo=)
32: cMPrRmSojB9SkGby8eR98Ete7yU.roa (hash: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8=)
33: evRG__ex8JGxNVzyfa2c0uYKq_0.roa (hash: 93Yx357YevAnWmJ/tXlOKW8HTJL/2XO97iLj27xdMN4=)
34: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (hash: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4=)
35: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (hash: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE=)
36: fv_FIWsQ6j6A0tVez5uEd3louso.roa (hash: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k=)
37: g7RkFmxmt6dHTrZc9IVO6X8Dpo4.roa (hash: /Ry0uNAREBMj0cSEog0s+syKKhljtc1oVlJp5tMB5Ic=)
38: hAJCIirAsZk8GUXF7WubyM8TjKI.roa (hash: j6pH65MDKZ3nETHCyHm0OLZKv7Eb9miovENp+54ETCc=)
39: iarmlWK_D1F2Y519OMWB6VCc31g.roa (hash: WFVbmq4d03vzZGnbmXlce/4IUJO9Lw5GHMqxL1YbJaE=)
40: j9orTwG1Vgweag4E9VIs_WouzoE.roa (hash: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is=)
41: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (hash: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc=)
42: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (hash: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14=)
43: mTd7XvcDuUN2DG4uSN1Xu0dl-2U.roa (hash: TDCGsKMUOaf2u45RBP43sdcfUFGQMDT4ZuJCc2A0WLo=)
44: n0NR6OiiSRVLpNipRarNfvBQVBQ.roa (hash: x7+Hnm6izCIj5uo7DZZ8rAC8clBtC3HKKYVdoqJqJww=)
45: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (hash: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0=)
46: o0zFW0tgu0SNCajq1-Pj04reASE.roa (hash: XI8Y+MP7U7GXabQcnglenR9AR3VDKkEoKmwdTMvnwSA=)
47: s9bHtYw6qGInBE6Pd4y6dDNszho.roa (hash: DuL4nvwJ3GhqWQoioLF44KGKjnyU3aqouWmY/jU6w4Q=)
48: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (hash: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E=)
49: tUODhl9BHob7C8bkCdeYc_Pg5BQ.roa (hash: gDjAS+mz8+AorNq75Vb1x8jNLGPvVGSU1qMuAh09Nno=)
50: tXRou836sWSHaKyCZp3oRjnDf4o.roa (hash: J2Ao585n1e9ibSlrdTNEo3VKGryVXlpaJXSNT1NNST0=)
51: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (hash: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI=)
52: upSbRMNnxG2ylwfUtURsJ3bxtNQ.roa (hash: mky2Qs0AJCLM4nhOYK0/Rl4J20evzMeN8B/lZFydtzs=)
53: vxHiN8XYZlqNx9pegdEwtdXJzX4.roa (hash: DRRytWcqFbSlVtkcmI8YNqgxFW5pXUdMhy1Q5V9THDo=)
54: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (hash: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs=)
55: xREJbZysiuR_7AfAbkb-_mvdCJU.roa (hash: ge+uzdtNTlkRHujnITIjJNysWOPLtwdYoaqf4cikYBQ=)
56: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (hash: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58=)
57: yZFDQ2r1QfFeLUyZVXNNbA_wP28.roa (hash: 8kj3LqF1iVRGrMYtJSTCYp1IezJP4n7oP1W8pfH6tR0=)
58: ytt2iIs36bszj8mftd5slrzDQco.roa (hash: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY=)
59: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: A9ElHhrridOQWhay0JLZ1D1r6DfRo46r7JeYt9QLpeY=)
60: zngLcIvgC9YcAiHWh1ke0MM5mbc.roa (hash: 7E0EDEX7fzdeB/iudhekYerAfUhvgxJP3o/StF1jxt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:8b:cb:db:1e:19:4f:b8:2a:30:1d:07:68:ab:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 19 21:00:49 2026 GMT
Not After : Apr 20 21:00:49 2026 GMT
Subject: CN=db868c4687665da8613d3bddd9352bf44cbea4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:77:c1:44:2a:4c:f7:92:e7:09:38:c2:d0:
90:fe:64:7e:df:1d:5b:39:5c:58:c7:4b:02:fa:94:
50:c2:a0:00:8b:6f:7c:0d:36:b5:40:07:0f:1c:d9:
78:e6:1f:b8:49:3c:fe:9b:84:75:e2:c9:d7:2b:b9:
86:4f:33:d8:8f:b5:e8:65:f2:ae:5f:cc:8a:8e:0f:
09:01:59:82:26:1e:2d:55:ad:91:be:ca:20:93:73:
d0:04:5c:64:33:12:cc:0e:d1:6e:0e:fa:3f:6d:e0:
06:82:e9:c6:29:06:62:b6:b6:22:9f:59:a8:f1:6d:
82:d6:da:79:da:df:42:d3:1d:ee:1d:81:18:65:1e:
fa:5a:ea:86:02:81:ac:91:e0:73:cc:8b:ed:82:63:
56:b5:44:70:6a:f7:58:8c:f7:d2:2c:85:10:92:93:
72:1a:51:52:ff:09:3c:2b:33:55:c0:73:ce:57:29:
6b:be:2a:16:18:fa:50:e5:7e:75:2c:89:25:cb:54:
8d:c8:3d:6c:78:bb:ab:03:a8:64:e7:0a:9a:0c:44:
75:d9:04:44:32:92:5e:54:ff:71:74:21:4c:2c:09:
3a:9c:35:29:8a:0a:ac:cc:56:b6:07:bc:fb:a7:f5:
11:f5:d4:6f:13:a7:78:c9:e3:46:2d:0c:08:5e:8d:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:8C:46:87:66:5D:A8:61:3D:3B:DD:D9:35:2B:F4:4C:BE:A4:D7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:23:63:b9:1b:db:1d:43:3e:43:d3:c9:b8:f2:3e:08:fe:
b1:e5:5b:57:34:3b:b2:61:64:41:8a:16:d0:af:18:ce:9e:b2:
f0:cc:e0:6f:4c:0a:32:d8:1c:c6:c3:11:ce:fe:00:3c:12:b8:
fb:20:bd:5e:75:25:a6:db:a9:fd:13:f9:e6:50:7e:f7:fe:a7:
b6:58:d6:3f:73:14:be:4f:18:fc:d6:18:d7:7c:f6:a1:e8:2f:
62:f4:17:34:96:3d:bd:4b:e1:21:40:32:cb:c8:4b:a6:4e:2d:
ac:68:4d:de:81:59:3e:e7:74:dc:ac:4d:af:76:12:23:f5:90:
ec:9a:b4:45:5e:2f:6b:46:9a:90:d3:9c:46:77:0a:81:83:ba:
e6:2c:37:d4:37:ed:54:72:19:a1:d7:54:b0:c9:8a:2c:40:80:
19:ef:9d:6e:02:72:6b:11:61:39:be:8c:4e:0c:04:33:2b:e1:
da:75:c5:6b:3f:29:3f:c7:4a:7f:03:5c:b3:db:c5:f8:d4:2a:
80:24:e4:5a:2f:f6:09:fe:53:33:5f:c4:74:24:cc:9d:8e:97:
be:15:2d:f2:c8:7c:58:7c:f6:ac:69:80:02:3c:29:aa:05:e7:
4e:5d:eb:e1:9e:7e:a9:6e:d5:b3:33:c5:b5:51:11:a6:8e:b1:
d0:03:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:19 2026 by rpki-client