Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: E7mL4Y2bpKkn19zjkCJuej7aKa/kUMgfV5ehPNwJ+30=
Subject key identifier: 95:D4:07:4A:AE:AD:E7:8F:ED:99:37:EC:EA:AD:09:3A:D6:B9:B4:EA
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019FA9AC5AF08E032F2D9F4BFE2458F63CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 0922
Signing time: Tue 28 Jul 2026 17:01:12 +0000
Manifest this update: Tue 28 Jul 2026 17:01:12 +0000
Manifest next update: Wed 29 Jul 2026 17:01:12 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: IsPejzf2Dnr4aOLR_OzJuZaLXsQ.asa (hash: GStHzech3OT9Y5reas02hEXtnmFliA7XicAmtAnOHEE=)
5: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
6: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: /Wn2ernyMN2Z1HkEbZKPpzRhB0sBgbI/TnPn5HgZ/vo=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:5a:f0:8e:03:2f:2d:9f:4b:fe:24:58:f6:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jul 28 17:01:12 2026 GMT
Not After : Jul 29 17:01:12 2026 GMT
Subject: CN=95d4074aaeade78fed9937eceaad093ad6b9b4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:a9:04:df:3d:d3:e3:b7:28:66:5c:4f:68:
24:7d:83:dd:5c:a4:a6:e6:9f:b2:08:f5:21:6a:f5:
75:0a:43:ac:c1:5c:21:e8:60:3b:1f:89:48:46:48:
91:ca:5f:45:de:55:c2:7e:7b:bd:0e:21:53:02:c8:
7a:e8:be:46:01:81:1d:9a:3b:fe:e2:5f:fd:1c:2e:
a4:f9:36:15:36:6b:c0:66:c3:77:b9:89:1c:f0:0e:
36:3e:78:2e:f7:74:4f:1a:ad:8a:ca:30:26:74:40:
3f:23:f5:bc:54:9e:e2:02:2d:e3:bb:4e:4a:b8:01:
9e:4f:5d:f4:da:fd:c8:31:9d:c1:05:1d:6a:08:49:
13:e8:ae:23:53:e5:b1:3c:c4:62:07:dd:34:42:47:
df:14:27:88:40:0d:72:3a:ea:f8:c8:59:ed:06:5f:
81:71:cb:25:8b:ed:07:3c:00:84:c7:cf:bb:77:e5:
13:78:fa:9c:e0:fd:f5:18:d7:93:e8:19:d7:34:fc:
b8:24:15:d1:31:31:6a:e5:f6:28:a0:f4:31:0b:3c:
76:c5:cb:be:6d:61:19:6b:b8:58:42:6c:7f:43:8c:
ee:cc:f0:8f:5a:f8:40:af:f5:56:57:8b:01:d6:7c:
9f:a7:67:bc:c4:59:be:0a:b4:c0:fc:5b:32:80:b1:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:07:4A:AE:AD:E7:8F:ED:99:37:EC:EA:AD:09:3A:D6:B9:B4:EA
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:0b:9b:7e:54:26:9f:89:db:a5:d2:7d:7d:50:dc:d1:fc:
74:76:f8:96:b3:ae:d0:4d:55:f0:85:c5:74:83:c5:6c:78:3d:
0a:94:e0:51:ea:46:7a:16:59:79:0b:ed:e1:62:32:7a:dc:7d:
25:29:31:c6:72:ec:7c:a9:6f:a9:6f:7b:a7:45:90:e5:84:f4:
60:d9:2b:98:2d:50:26:f9:6d:6b:1a:ea:45:17:1f:2f:76:8a:
4f:de:33:be:00:38:16:f7:ff:5f:4c:25:33:ca:74:16:21:0a:
77:94:7c:40:49:f1:ef:dd:d9:e2:26:21:c1:17:3b:a4:f9:bf:
5e:19:8d:dc:53:a9:50:65:cb:fb:47:f0:d5:0c:97:88:6c:a0:
0a:73:da:20:ae:32:49:38:20:8d:3b:aa:bf:01:89:ed:de:c4:
24:23:5d:08:8e:06:60:08:54:ab:7d:2e:55:b0:64:7e:91:b9:
ab:3b:5f:12:d1:e7:3e:71:58:7e:46:ca:27:d2:2f:86:17:7f:
51:23:87:cf:95:fc:46:7a:81:18:73:d5:64:6f:96:20:88:27:
cf:44:a7:55:0c:1f:bf:bb:fd:21:3b:3f:c9:5f:be:97:8d:94:
47:f5:0e:19:0a:24:05:fa:68:d2:14:9e:47:f5:de:6a:4f:d6:
46:99:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:04 2026 by rpki-client