Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: Jxswsp9RU3xpT+y7dcYT2jstOZyWhgCTIZ4O/oyMGtg=
Subject key identifier: 59:95:47:91:5A:30:18:2D:D8:21:E0:2E:E3:44:49:1D:39:8E:C7:E6
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019EBF914FEA1686FC85AE45671928075089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 0124
Signing time: Sat 13 Jun 2026 06:00:31 +0000
Manifest this update: Sat 13 Jun 2026 06:00:31 +0000
Manifest next update: Sun 14 Jun 2026 06:00:31 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: WsG2Y8l0l+Lhgfi2ekcV1B2QCDVkm+l6SjOfHRvr84o=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:4f:ea:16:86:fc:85:ae:45:67:19:28:07:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Jun 13 06:00:31 2026 GMT
Not After : Jun 14 06:00:31 2026 GMT
Subject: CN=599547915a30182dd821e02ee344491d398ec7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:68:5c:6c:a5:d1:f1:7b:95:a1:bf:ec:d0:
d5:43:73:35:7d:0f:9f:59:40:36:37:26:3b:ef:67:
e8:2e:f0:d3:c0:95:a4:4e:3e:f4:50:98:28:52:8d:
ac:46:f6:37:00:e3:a1:35:b1:a4:26:99:7f:d4:f3:
d3:52:76:6f:33:7b:0e:e6:ad:52:d6:ef:91:02:70:
2f:39:48:e7:e3:e1:fe:d5:90:c9:98:ff:3c:ee:ee:
81:ff:c2:35:02:80:83:a0:f9:35:9d:93:6a:40:2b:
26:4b:88:71:8e:7f:8a:f8:26:52:82:52:de:5e:88:
90:1f:14:33:d7:17:74:c4:ae:8c:4a:b1:c1:f2:e9:
f5:98:07:ec:09:48:c6:6a:35:78:3d:7b:7b:99:50:
c4:08:25:ab:c3:d8:9a:76:b0:31:9a:24:12:a5:3d:
a5:3b:75:2f:3f:11:bf:8e:76:c9:ec:2f:50:1d:9c:
4c:b8:33:2d:a4:07:d6:f7:82:97:df:88:a7:f9:de:
13:28:88:f3:f2:96:e2:ba:91:01:cc:3c:e6:5a:c1:
de:25:a8:7f:82:5d:36:9e:dc:6a:ca:b6:e0:6e:ed:
de:83:91:72:35:1f:74:53:74:ae:f4:7c:1a:a4:70:
78:c3:7d:ba:1c:65:be:40:9f:46:e3:56:69:fc:dc:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:47:91:5A:30:18:2D:D8:21:E0:2E:E3:44:49:1D:39:8E:C7:E6
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:f9:24:46:23:52:aa:31:f1:14:0f:58:6f:3c:76:ff:f7:
c2:9d:69:0a:37:f8:7c:62:dc:9a:a5:f5:9e:4e:18:de:e8:74:
d9:15:c5:7e:95:12:1f:e9:f5:b1:37:d8:ea:aa:2a:24:0d:d6:
84:17:c9:34:39:4b:38:d6:9c:dd:b5:ef:c9:b7:34:a7:80:b6:
2f:b7:7c:5e:1f:1e:3d:af:cb:61:1a:f7:4b:d5:47:b9:e0:bb:
f4:ad:68:ba:d1:c5:76:b7:db:8d:55:86:89:9e:5c:88:4f:62:
34:75:f5:94:87:55:b7:66:2f:58:7b:72:60:2b:02:43:b5:11:
f3:1a:5b:f0:ea:7f:14:53:11:e5:1b:dc:69:52:0e:2a:be:03:
f3:b7:77:1b:c6:0e:e2:a6:ec:2f:65:15:39:32:f5:f8:4a:8b:
dc:4f:aa:2e:92:ac:72:91:a9:a2:c3:1f:d8:2a:d9:c3:af:58:
c7:80:9b:df:d7:d7:45:56:b5:ac:25:27:86:38:e5:03:b7:25:
7a:f1:4f:c2:6f:f8:52:2d:98:ac:7c:34:05:12:a3:f9:56:6a:
59:6d:91:2e:54:50:79:a6:00:8d:b8:6f:50:33:09:14:66:85:
70:5b:35:14:d9:8a:ba:ad:41:31:2f:5c:ae:1a:dd:fa:8e:0d:
a8:e0:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:22:20 2026 by rpki-client