Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: ThdFfBTQZVevZqrN2BV1NIe5bG0JmRr11e/IC/PgjyY=
Subject key identifier: FD:97:25:59:E5:DA:08:49:72:F5:49:06:F1:E3:D4:C8:10:36:0E:9A
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019CA86A5880791DC3657EDDC292100527EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 0793
Signing time: Sun 01 Mar 2026 08:01:07 +0000
Manifest this update: Sun 01 Mar 2026 08:01:07 +0000
Manifest next update: Mon 02 Mar 2026 08:01:07 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: V4PHCxrHl4rn58M1E7//d/fl2V364mljmop72w0pVIs=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:58:80:79:1d:c3:65:7e:dd:c2:92:10:05:27:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 1 08:01:07 2026 GMT
Not After : Mar 2 08:01:07 2026 GMT
Subject: CN=fd972559e5da084972f54906f1e3d4c810360e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:8d:c0:d6:45:89:60:39:6a:00:15:e8:f9:
e1:ee:a5:2d:ae:b0:9a:bf:81:87:bd:3a:d7:85:68:
38:cc:a0:6a:72:51:99:c7:94:6b:38:26:a9:8f:a0:
da:06:8b:09:cf:61:d0:0c:4b:df:2e:db:0e:3e:15:
aa:ec:7e:86:af:a2:f9:fa:0a:92:6f:68:11:4e:94:
1a:40:88:3f:57:ed:48:46:fb:7e:5c:4b:58:a6:ba:
56:45:91:30:95:6a:c1:73:6c:a0:6b:ac:56:bb:c5:
08:72:a0:fb:ce:8b:48:e3:53:ce:7f:bc:1b:bf:28:
df:a2:29:d5:a1:97:87:0f:a3:34:78:24:98:12:d4:
7b:c8:1e:33:fe:62:d2:36:89:08:20:8b:1e:c5:d1:
fb:ca:28:5a:1c:60:5c:44:6f:ba:f0:74:81:aa:8d:
1f:57:55:db:43:78:64:71:f1:23:5c:5a:a0:20:8a:
92:47:c3:ef:92:b0:62:7e:a3:7d:f4:35:e7:da:a6:
7e:32:fe:10:bc:8d:f6:eb:bf:df:ce:ac:48:3b:e1:
a4:b2:73:ac:1b:6d:d5:7c:80:82:33:70:8f:90:c8:
69:ea:d0:02:8c:2f:2f:22:0c:5e:28:32:0b:93:15:
78:e9:bd:bc:c4:36:c9:0f:8d:22:47:50:e0:84:fe:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:25:59:E5:DA:08:49:72:F5:49:06:F1:E3:D4:C8:10:36:0E:9A
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5c:72:f4:82:c3:eb:47:96:bb:1d:3e:3c:23:96:fb:5c:c4:
86:34:e4:f8:7d:8d:fc:94:3b:6c:1c:3c:54:b4:a8:71:9a:ac:
de:8a:55:75:f0:47:6e:fd:0d:b2:8b:33:8f:39:f2:91:b0:3b:
5e:30:72:14:cd:fd:55:7d:db:32:ba:0c:ec:e6:d6:d8:07:b4:
3a:6f:ce:d2:51:96:66:ae:3e:6f:d9:d8:84:b6:35:da:ad:8b:
fb:3c:29:df:10:dc:e7:76:e3:ef:51:91:1e:55:5e:4e:7d:c6:
68:03:83:f2:ff:6c:57:3e:46:80:bd:fe:c4:62:2d:e7:e5:50:
f0:09:34:99:4f:95:07:1a:a0:fe:84:56:56:1f:38:62:fb:a7:
0c:09:16:64:cf:0c:bc:19:2e:2a:54:b6:11:01:b1:c2:fa:6c:
69:1e:12:58:c9:a4:b5:52:48:7b:18:3c:74:ee:9d:cd:98:ed:
f1:7c:c0:65:25:38:43:41:0c:3f:5c:f1:78:83:cd:e7:03:a7:
8b:aa:51:c5:fc:9b:50:22:86:af:28:a4:ea:07:a6:dc:6a:a2:
4c:5a:3c:19:a2:5b:2f:d7:9b:6f:b2:23:4c:d5:cb:6c:6c:5b:
8a:36:3b:07:c4:d0:6a:86:82:52:27:85:df:f8:b8:aa:61:7b:
42:b6:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:38:18 2026 by rpki-client