Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: EXTCgTlSb5w2OHtE48kwpZbCDqK7eUoV0vkqjDgJMao=
Subject key identifier: 41:52:A2:D4:8C:E3:D3:DC:94:96:3D:37:89:14:CC:B5:7F:56:17:CB
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019CA9B38DA66F7E5AEA45A61558EB3C1C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0B3A
Signing time: Sun 01 Mar 2026 14:00:42 +0000
Manifest this update: Sun 01 Mar 2026 14:00:42 +0000
Manifest next update: Mon 02 Mar 2026 14:00:42 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: 9SnN7axzwtzqqIyKcvQxl6VPwdXlMSm6KQoTlFgQVZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:8d:a6:6f:7e:5a:ea:45:a6:15:58:eb:3c:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Mar 1 14:00:42 2026 GMT
Not After : Mar 2 14:00:42 2026 GMT
Subject: CN=4152a2d48ce3d3dc94963d378914ccb57f5617cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:bf:12:75:3b:f8:f4:8e:41:0c:8f:f8:69:
f3:10:74:b3:0b:ee:fa:cf:f2:5e:9b:f5:6f:ab:a0:
2a:1f:fc:88:aa:b5:93:55:9e:b5:ea:b6:54:e1:ae:
4e:63:56:5b:e4:c3:8c:c4:de:1f:f4:26:78:30:81:
69:a8:c8:9b:7d:3f:0e:f2:4f:8e:ba:47:1c:a9:d8:
cc:3d:ee:fb:46:12:4b:ce:c0:a9:da:d5:94:cb:75:
b8:a9:a1:0b:6c:2d:31:f3:50:ba:80:e7:4c:f5:1c:
de:75:a4:a3:4c:c3:76:d1:47:c7:56:56:4c:f7:7f:
ff:38:63:ef:1d:d6:5f:c0:39:ea:0e:f2:80:d5:9e:
bc:49:2d:d3:e5:7c:84:35:dc:a8:c6:cf:3a:28:51:
34:c1:8b:e8:91:f5:96:c3:23:23:eb:bf:2f:79:d5:
52:af:ba:9b:51:c2:c8:bb:da:42:b7:4f:9f:a6:c4:
56:a2:06:38:23:21:7f:ff:61:a5:ef:1b:c4:91:90:
fb:73:11:dd:3e:5c:83:99:cf:3e:23:82:0f:a8:df:
ff:91:fb:14:cb:d7:df:76:2d:e4:f3:26:0b:b4:bf:
9d:54:a1:50:89:a2:d8:9d:6c:3e:9e:a5:cf:ae:24:
07:6f:27:2d:c1:ea:66:f6:c8:38:48:83:04:35:31:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:A2:D4:8C:E3:D3:DC:94:96:3D:37:89:14:CC:B5:7F:56:17:CB
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7d:78:f6:b3:04:ed:7f:5d:6b:e2:20:41:86:9d:b7:31:3f:
22:67:5c:08:18:13:14:7d:e1:10:68:a5:48:fc:33:dd:21:5c:
14:5e:34:d6:3d:37:5e:1a:c9:6e:11:33:35:56:c7:c3:e9:a1:
27:0f:57:2f:e2:19:65:41:8b:99:d3:28:b6:bc:03:d3:74:92:
6a:e7:08:c4:a8:d4:39:d5:f8:3f:2c:b0:e2:a8:51:df:d5:b2:
39:7c:e5:ce:6f:50:d6:1c:61:89:2f:5d:6e:11:72:0f:b8:14:
43:52:26:f3:6c:28:a2:11:ce:17:b7:b0:15:40:b9:a1:67:3b:
61:15:31:62:e6:b3:8d:76:32:37:00:fd:21:5a:44:d7:80:a3:
31:8f:e7:e1:10:29:a4:ac:67:0d:75:5e:c9:c2:b8:ef:34:5b:
92:a6:bb:56:ad:f9:63:3e:1d:83:d5:92:bf:24:04:18:63:50:
66:0b:23:49:2e:00:c9:c7:bf:f0:2a:34:25:67:49:fb:d6:c1:
85:20:fd:53:7b:47:62:d6:98:2a:74:ff:5c:0d:90:9c:5c:d8:
c9:fb:f6:fa:09:56:49:e2:6e:63:37:63:27:df:07:79:19:4d:
ed:2f:af:d6:ae:64:f7:e1:81:f8:70:b2:f0:7d:2a:9d:7b:d7:
23:00:fd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:16 2026 by rpki-client