Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: DCvKyAw4QBomaVN8WXHb+A0rmg3Zf0V6469+YcAidNg=
Subject key identifier: 88:4F:76:46:7B:C5:73:19:8C:F6:0A:35:D0:35:19:1C:EB:1D:2E:F8
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 019D992B95DB0AED41513F82BFF631D7D47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 057A
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: 0q89mS6gseI0D55M872evmBEmUU.roa (hash: 22eo/4LzLP0tiO+wKFngnAq1euAw4BlN9YUGvUFUe5Y=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: VBJc4deowVSyyb1xxS6+S2HXRFJA4m3Rf2F8CZszWqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:95:db:0a:ed:41:51:3f:82:bf:f6:31:d7:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=884f76467bc573198cf60a35d035191ceb1d2ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:38:77:ce:8c:e5:4a:58:62:23:81:63:05:
d1:71:cc:8e:c7:96:5d:86:84:92:fc:8c:58:90:b6:
1d:e0:c6:11:74:b2:6a:75:1b:b3:19:90:07:ae:70:
61:8b:c4:53:e0:bb:29:bd:dd:ca:6c:b9:08:01:e7:
75:25:33:cd:5e:1d:34:7a:45:fb:5f:78:74:2c:98:
b0:cc:be:0c:e9:04:02:7d:9c:96:f9:ca:8f:4f:3e:
34:d0:32:79:fa:50:7c:7d:6b:38:61:4f:3b:50:b2:
cb:35:d6:cb:96:f4:8c:ce:2a:11:74:5f:a6:b4:57:
7c:55:cd:cf:18:c7:b0:2c:44:72:f6:05:3d:db:07:
69:4a:7b:14:38:99:14:c6:b3:49:9e:7b:7a:57:27:
eb:bb:b3:ea:74:44:19:ab:14:be:a0:09:d1:b9:cb:
01:74:5d:07:84:6c:30:58:08:2a:84:7b:c2:8b:ef:
3a:4d:33:23:5c:c8:6b:6c:4a:07:20:ee:f6:11:78:
c0:69:ad:dc:35:a0:06:78:fa:37:ea:f3:6c:32:c1:
8c:2e:e8:92:24:b7:06:ea:0a:a9:10:61:76:18:46:
68:87:8a:29:31:21:85:12:1b:ae:81:8c:fa:93:ad:
ff:ec:f7:b7:db:6d:4e:d5:20:ea:28:d8:c8:3c:17:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:76:46:7B:C5:73:19:8C:F6:0A:35:D0:35:19:1C:EB:1D:2E:F8
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d3:83:ed:7d:c7:23:37:55:57:05:34:49:13:27:a9:88:ec:
24:05:63:5e:2d:9a:88:61:10:4c:77:dc:6d:34:4d:66:0e:44:
50:a1:f2:31:bb:2e:63:4a:54:40:16:95:40:62:14:d5:33:bd:
c7:43:a6:35:5f:42:1e:00:8a:7b:ed:42:e6:98:14:76:88:7c:
2d:fb:0d:17:0d:9a:c1:04:2e:d3:0e:a3:5c:2c:cb:a6:ec:b9:
d8:cb:55:4e:b2:0e:d9:2c:e2:cd:36:95:11:17:e8:2e:42:02:
0a:ca:4f:8b:24:90:23:77:ad:b1:b7:15:74:fa:c7:f4:b0:b0:
84:b9:60:ca:e5:81:e1:8b:62:c9:6b:bb:5b:e8:4c:a7:68:62:
9f:f4:66:b9:15:1d:53:f0:72:09:13:57:69:64:8f:85:07:b4:
89:92:60:39:c5:9c:4d:28:56:71:48:33:8d:f6:4e:5f:a1:19:
ea:46:f7:f4:5f:10:3f:85:6a:8e:70:f8:dd:36:17:63:25:e6:
2a:6e:16:83:96:e5:e4:a2:3d:cc:1e:56:10:47:48:52:5e:8c:
23:1f:5e:65:af:7d:63:b0:ed:f6:b5:6d:b2:22:20:32:2a:a3:
3e:ed:f9:48:2b:dd:e9:f0:e1:68:1c:6f:fd:23:6b:5a:92:65:
a6:13:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:48 2026 by rpki-client