Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: H+vQlBiQrO8LloeDMthLuoNbG7Pp7Co4ph0/6znESHY=
Subject key identifier: E0:FE:E0:FF:68:D1:13:92:38:DA:2E:1D:9A:80:BC:22:D6:EE:48:66
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 019CAA8F8E37E269DF3A7CECBD7EDDB3030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 1506
Signing time: Sun 01 Mar 2026 18:01:00 +0000
Manifest this update: Sun 01 Mar 2026 18:01:00 +0000
Manifest next update: Mon 02 Mar 2026 18:01:00 +0000
Files and hashes: 1: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: YoZu7TZUZOfL66GKlIDDh1En/KSFFV1GUC0slnqNdMo=)
2: zsJeYAbKofBpijDlV1JN21oSRPc.roa (hash: i7qvLARvFAbwyr2d6HJClZJICp4QULfuGH4ozBybTr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:8e:37:e2:69:df:3a:7c:ec:bd:7e:dd:b3:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Mar 1 18:01:00 2026 GMT
Not After : Mar 2 18:01:00 2026 GMT
Subject: CN=e0fee0ff68d1139238da2e1d9a80bc22d6ee4866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:b6:68:c7:2a:5d:c8:9a:b9:a1:59:ed:0c:
7d:ac:27:54:3c:72:08:2d:5d:44:7e:c8:b1:30:98:
62:de:b8:50:16:af:e2:51:7f:cf:01:20:6b:2e:36:
88:82:c4:2c:3a:f5:96:a6:d1:b8:72:60:16:20:3f:
e0:a4:6b:6d:b1:42:19:a4:e1:1e:ce:d4:74:bf:5f:
93:4b:85:3d:2d:08:6b:31:71:6f:37:bd:62:49:37:
55:46:39:86:19:5f:ea:8c:9a:18:a7:f7:bd:82:d1:
d8:bc:ea:52:f1:98:55:18:71:e5:bd:9c:50:1e:81:
e9:bd:d6:07:d6:55:c9:fa:00:4f:14:10:b0:2e:b3:
0b:12:99:96:17:44:6f:6a:2a:22:a1:95:d7:72:8d:
f0:36:2e:27:15:29:2d:54:15:99:3e:19:2f:20:77:
20:d1:4c:d9:77:e8:a0:bf:04:6d:86:c7:ef:7f:66:
ae:0e:e6:51:87:52:f5:81:d2:87:54:8c:46:03:68:
ed:98:3c:ed:02:ae:1f:50:19:96:65:98:23:a8:c4:
fb:b2:28:79:33:44:cd:41:cd:3a:46:09:2b:71:4f:
a0:28:71:d9:7d:08:34:d8:28:5d:88:8b:78:d8:51:
b2:a2:3b:63:b1:75:9c:75:74:70:a3:bf:82:06:66:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FE:E0:FF:68:D1:13:92:38:DA:2E:1D:9A:80:BC:22:D6:EE:48:66
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:58:65:9d:40:b1:fc:6a:97:1b:c4:cc:99:ed:72:a5:2a:
e5:a5:c8:18:71:98:d3:4e:c2:dc:9e:bb:87:38:17:7a:f3:77:
3a:d7:32:8e:42:76:61:fe:2b:41:67:94:22:88:46:c0:e7:5e:
f5:5f:0b:16:3d:15:e7:04:a3:8b:78:b2:d3:ed:85:2c:b4:f2:
b7:b7:f2:39:8b:d3:58:67:da:c3:ed:00:33:b7:0d:a8:8e:a0:
dc:9d:c7:35:5a:4a:a7:e1:6e:cd:4f:3f:66:a8:1e:46:50:e5:
4b:46:fd:2a:32:b6:1b:8d:d0:10:20:ee:75:f3:f4:bc:a1:d8:
39:05:95:0f:25:1d:08:89:3f:ad:01:c5:0f:85:7b:eb:c0:ca:
36:3f:d9:93:c8:a2:c6:58:64:45:54:ae:e1:7e:5f:f9:83:2f:
20:92:6e:84:ee:d9:57:06:a3:4b:15:1a:31:23:9d:27:86:4e:
63:cc:00:aa:63:a6:83:38:78:7c:75:c5:0c:cf:ee:93:71:a2:
15:c2:d9:74:62:b1:3d:f4:ae:d3:8a:4d:45:95:7b:04:cb:e4:
38:29:d2:01:f3:52:cf:9a:a1:11:a4:20:b8:b3:9a:23:0a:24:
4c:9b:bb:1a:4e:ac:ef:85:de:fb:3e:cd:d5:97:98:33:0d:84:
c5:54:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:25 2026 by rpki-client