Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: xAR6D7jfbipnWG2EG3oGCOiy8mWnhG47VA60NC4/gjs=
Subject key identifier: 36:4A:8A:FE:9C:19:C3:E3:BC:98:9E:CA:83:45:53:8E:D1:78:8D:A2
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019CAA58FB6023320E5B09EC153DA049525B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 0794
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: PoljaRDA7cniBoMszpUf9ufFEQfoQkCD6Q/DNAc9FNI=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:fb:60:23:32:0e:5b:09:ec:15:3d:a0:49:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=364a8afe9c19c3e3bc989eca8345538ed1788da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:57:c8:d3:53:c8:01:1c:17:9e:9d:de:8a:
dd:b7:f8:4d:b4:4d:22:6c:f1:9c:7f:c1:b5:da:fa:
f1:eb:8a:73:88:6d:19:61:13:f4:ec:10:e9:c8:19:
c1:77:f0:4d:d4:d6:e8:a5:63:af:d7:99:db:1d:ef:
30:4d:6e:54:27:bf:17:83:dc:c6:ee:ad:8e:5c:ba:
17:32:7c:96:ab:d1:37:59:73:9b:41:0f:5c:cb:69:
03:84:64:48:6b:9d:65:4a:cc:6d:a6:10:88:77:93:
fd:87:f4:e2:9f:e0:24:31:ab:c2:ce:79:be:a5:06:
58:a8:2d:71:d7:a6:4f:5d:17:82:c3:17:d2:3b:4e:
6e:fc:e9:fc:c4:7c:1e:c8:3c:21:01:c3:c2:6f:0d:
96:5e:41:af:8a:33:d8:4e:40:c6:ab:26:aa:17:7a:
40:fd:81:83:04:2d:f6:0e:39:b4:e7:bc:00:df:75:
f3:0f:e3:f0:9f:3d:06:8b:10:2b:5b:97:1b:b1:17:
6c:f7:ea:f1:ca:d7:d2:58:91:f1:f3:bd:da:89:10:
60:8d:3e:f1:54:3f:a1:02:db:6e:3e:ba:f9:54:32:
6d:fa:e7:db:5e:41:2c:9f:69:d3:8b:d3:57:8f:93:
54:04:53:fd:99:d3:fa:70:2f:ae:ad:32:1c:08:06:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4A:8A:FE:9C:19:C3:E3:BC:98:9E:CA:83:45:53:8E:D1:78:8D:A2
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a2:5f:4e:46:a0:33:41:31:28:09:52:88:c9:56:b5:3c:21:
13:28:f3:11:da:03:fb:60:3b:b7:32:c3:fd:4a:6b:38:58:72:
56:c4:82:72:fd:b7:4a:81:15:ff:3e:fb:6b:f9:16:e3:d2:2b:
31:96:dd:d7:43:56:7d:77:95:51:52:d8:2a:ac:63:be:8e:bd:
9c:d9:fa:64:76:94:5c:fe:91:b8:78:b3:3c:f9:ab:bf:9a:00:
2d:ac:f0:c5:93:2c:04:93:05:46:f6:d8:75:36:05:eb:fd:bb:
fb:1d:2b:17:13:97:04:0b:35:e7:93:d5:70:f2:05:0a:90:8d:
09:ca:10:92:1b:aa:a6:c6:81:79:d5:d4:47:90:27:ca:24:83:
40:b0:ca:69:a6:b3:cd:78:be:92:95:70:db:82:7d:fe:7d:1b:
c7:73:74:e4:14:68:17:cf:02:b5:d8:58:a4:b8:06:53:93:07:
ef:f0:b4:35:a1:56:59:b5:8f:ad:91:b0:eb:46:7a:9c:8c:dc:
9f:9f:0a:e4:52:1c:48:d0:96:f9:85:bb:9d:6c:48:fc:a7:e3:
81:9b:5f:86:6d:01:6f:c4:c8:6f:8f:d8:03:27:93:af:f3:c3:
54:61:18:cb:55:93:ca:c8:1d:81:b6:11:d3:36:1a:85:09:d2:
d9:35:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:43 2026 by rpki-client