Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: BbY5OQdLHD0GDwlM+DDdbaULDp0BnkJndpR8K9zKYCI=
Subject key identifier: 7C:B4:66:50:B6:92:E3:0C:2E:91:E1:8B:DE:34:AB:55:15:CF:A4:80
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 019CABA21027DB3F5CA13E8FC63B8369764E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 04FF
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: 0q89mS6gseI0D55M872evmBEmUU.roa (hash: 22eo/4LzLP0tiO+wKFngnAq1euAw4BlN9YUGvUFUe5Y=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: LEe6HVZEv9dNf0UlQciDuI0bg9GFqzIYNHlgjBJkuGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:10:27:db:3f:5c:a1:3e:8f:c6:3b:83:69:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=7cb46650b692e30c2e91e18bde34ab5515cfa480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:d9:4c:b0:e1:a7:27:c1:31:4c:b6:0b:a4:
14:8e:73:72:c9:db:ff:8b:89:d1:4e:f8:0a:1e:1a:
d4:5d:8e:c9:7f:2b:12:0d:fe:e2:18:35:28:39:02:
f8:fb:89:ac:50:5f:75:46:1b:02:b4:6e:76:70:c3:
a4:e6:d0:5a:6e:92:16:4b:74:22:97:cf:78:89:ff:
b1:7a:78:a1:c9:88:06:5f:2e:1f:6d:f8:c5:5a:1d:
35:ee:d2:c4:59:36:fb:3f:8d:fa:80:4b:54:8d:2f:
9f:37:8b:d6:b8:a8:8c:7b:a8:00:dd:66:d7:e9:3a:
6f:30:6b:df:82:2f:4f:96:4a:aa:d4:5a:47:7e:01:
5a:c6:e4:36:1e:45:d0:59:e1:ef:be:59:21:77:e8:
9e:77:24:a6:20:c8:89:0b:44:7e:96:46:d8:8f:25:
d0:62:d4:f1:09:9a:e7:f9:d1:60:13:a0:60:88:1b:
6d:12:ec:e8:5f:39:1a:21:dc:e4:04:23:c4:64:9a:
90:2a:ce:e8:90:c1:97:2e:15:0a:67:c7:0f:16:58:
af:98:f1:05:67:bf:00:95:b2:92:77:02:48:c9:85:
f5:65:61:f3:45:af:c5:a8:6d:8d:94:2c:3d:4e:0b:
98:a7:80:46:b2:66:aa:20:0b:89:25:e1:74:9e:b9:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:66:50:B6:92:E3:0C:2E:91:E1:8B:DE:34:AB:55:15:CF:A4:80
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1f:86:a7:bc:1c:9f:0d:ca:8e:0b:67:a2:ef:ab:3c:99:86:
85:1a:90:46:72:a9:af:4d:3f:ce:b1:ed:b3:60:15:8d:ae:1f:
7d:49:54:0e:62:bc:22:28:30:4c:89:40:2c:8d:90:14:92:fc:
51:a7:74:26:a6:e8:87:25:ba:48:3d:03:22:93:e0:9d:fe:34:
8e:59:77:1b:bf:e1:f5:66:f9:56:93:7f:95:be:76:17:36:8e:
15:5b:60:d3:e3:b6:e5:d5:f7:ff:8a:06:73:bf:c4:99:f7:ef:
72:de:e7:2a:c5:a7:0c:fa:3a:a2:87:c2:bd:2a:b0:5f:cb:65:
1d:2b:c4:87:79:02:b4:1c:8f:f0:4d:dc:19:aa:65:32:a9:54:
30:4f:95:df:75:be:d4:38:92:35:d1:57:b4:63:27:c4:69:da:
06:da:2d:23:f2:ee:07:28:1b:2b:48:d0:48:0c:75:42:da:e5:
64:91:98:9e:2e:a0:95:a9:32:50:1a:a3:22:19:78:ee:7b:be:
12:d0:e3:63:cf:54:88:a1:fb:2c:f0:ab:68:75:1e:e0:d9:1b:
4e:5e:6e:75:7f:97:bf:67:10:9b:84:2b:1a:23:8f:ef:7b:a0:
d5:ab:50:e2:2b:0b:6c:d0:13:0e:77:8c:fe:57:b6:d0:47:8b:
c0:ef:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:44 2026 by rpki-client