Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: 0esarupZvmbTwC/XHMVotqpRyzGWr7FycYHjbiSox1Y=
Subject key identifier: 7A:70:14:CB:2E:9D:8D:86:FB:B0:F6:A3:38:41:69:65:34:40:95:95
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 019CAC7E4D29F1ABE98D8F49D1BBE97185C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 11AE
Signing time: Mon 02 Mar 2026 03:01:24 +0000
Manifest this update: Mon 02 Mar 2026 03:01:24 +0000
Manifest next update: Tue 03 Mar 2026 03:01:24 +0000
Files and hashes: 1: 1gUVsb5eptHPfkWeIDJOnBtjCdM.roa (hash: 9UbrzakbahLSL538GmtoWSL/CzBIwVc0sR6kEFLy4PE=)
2: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: g8MqgSr/B3zUl65vlVPGSbfdtGc7Ou6nA4F+/SmW4YQ=)
3: uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa (hash: zVkALHO/eizkLv+esnlztVcjRzvGtYoCejf9vSgdAPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4d:29:f1:ab:e9:8d:8f:49:d1:bb:e9:71:85:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Mar 2 03:01:24 2026 GMT
Not After : Mar 3 03:01:24 2026 GMT
Subject: CN=7a7014cb2e9d8d86fbb0f6a33841696534409595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:cc:ae:80:58:23:77:2b:3d:5f:75:14:78:
b3:0f:4c:c3:11:42:14:85:e9:c7:4b:f6:2c:8a:56:
f7:a2:f1:b7:8b:c1:48:7b:73:23:c9:64:fe:b2:d2:
cc:7c:b9:bf:88:e2:c3:53:37:ac:71:d3:1b:48:d0:
66:10:a7:c2:5b:ef:f7:48:df:ba:79:70:e5:15:39:
16:af:0d:af:2f:34:df:a5:d0:f5:d6:21:3c:13:19:
31:83:ef:cc:99:aa:65:ea:1c:8c:8e:72:f3:b9:17:
5c:fe:77:d0:02:8b:d8:b0:52:ef:57:0d:7e:0a:1c:
4a:d9:14:c8:b2:80:5c:30:57:b8:2b:d9:9d:0d:bd:
07:96:5b:7f:cf:82:a0:c7:79:4f:45:c7:eb:80:4c:
45:79:7a:68:03:35:d2:85:c5:6f:67:8f:99:1a:40:
bf:62:31:6e:38:29:16:c4:2c:74:9a:94:e4:92:84:
a7:c5:f1:b7:c9:5b:4b:8c:2e:a4:c9:5d:3c:f9:39:
a1:7a:8c:6c:3a:b5:be:dc:b9:32:ef:8f:6c:d6:b9:
dd:d7:21:61:7f:63:e3:ad:a6:6b:6f:1d:61:63:05:
69:1d:fc:0c:5a:eb:2b:75:79:09:63:77:43:55:b7:
cc:5d:6f:5b:b2:a0:83:d7:c1:0b:33:d7:33:76:d6:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:70:14:CB:2E:9D:8D:86:FB:B0:F6:A3:38:41:69:65:34:40:95:95
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ab:74:e6:a6:c9:26:c0:fa:b5:23:2d:ea:e9:a1:5e:cc:c3:
8e:c2:6c:e8:cc:c6:58:f6:94:98:f2:33:ec:3e:c9:a0:e8:f0:
a6:8e:2f:4f:a1:60:31:41:2c:c4:b8:2e:64:3a:e2:0e:02:75:
fe:aa:8d:b6:a1:7a:a9:2d:8b:87:5b:6b:0a:43:4e:4c:81:50:
1c:55:e8:bc:df:ae:b7:c9:82:5f:cd:08:a2:bb:16:48:6e:88:
58:0c:3c:12:06:52:cd:6d:2b:1f:92:e2:d4:b8:f8:70:02:cb:
b1:8f:f5:48:14:ee:47:57:f7:1b:72:c2:9d:b5:33:13:15:0a:
29:4b:61:f7:30:84:3f:de:9d:56:8d:67:9a:29:96:23:78:3b:
95:06:e6:f8:f1:04:46:77:d5:ec:4f:2a:bd:8d:c5:00:bf:c8:
fa:b9:5f:55:dd:4f:4e:32:c9:86:bc:3f:44:3b:7a:15:3a:3e:
38:a1:94:5e:28:bc:f2:d5:24:08:2a:e8:1b:14:fc:72:55:78:
b7:59:b0:31:97:c1:da:19:f3:25:82:cb:6a:13:9a:19:9c:6c:
4d:ad:07:68:ab:8e:e0:a3:64:06:bf:5b:ad:15:8b:33:04:a5:
88:f7:d4:d6:ec:2e:93:cb:9b:ce:1d:f2:06:55:b7:0a:69:d9:
1c:c4:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:29 2026 by rpki-client