Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: fgtnAWK6sKMsveoVADdic0ibOX0py7kfiiOkWkAqjpU=
Subject key identifier: D5:56:86:3B:97:80:88:34:47:1B:2F:46:7E:DF:D5:E9:14:CC:9E:1D
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019CAC46C5E1FF57725BD5D3CD5902E6A5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0D91
Signing time: Mon 02 Mar 2026 02:00:45 +0000
Manifest this update: Mon 02 Mar 2026 02:00:45 +0000
Manifest next update: Tue 03 Mar 2026 02:00:45 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: eA7WoWJjLLPLvOzZwohX1JsyNn+sQabp7OmJuU9tFts=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c5:e1:ff:57:72:5b:d5:d3:cd:59:02:e6:a5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Mar 2 02:00:45 2026 GMT
Not After : Mar 3 02:00:45 2026 GMT
Subject: CN=d556863b97808834471b2f467edfd5e914cc9e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:a2:06:74:b0:b9:72:42:3b:30:3d:3f:ab:
25:b9:41:3e:c8:e7:a9:0a:1b:bf:61:71:54:f8:8b:
25:41:87:14:54:5a:92:00:a8:d5:58:6f:39:55:91:
5e:08:25:27:bb:0d:cf:7c:5b:e8:05:37:81:26:55:
de:e1:24:a6:8e:21:93:5a:c3:c6:02:72:2c:cf:62:
ee:49:f8:29:52:be:30:7b:8b:47:1c:92:45:f3:aa:
9b:f2:e6:54:5e:a9:f0:46:3d:08:ce:ca:8d:62:d0:
d0:48:ad:ff:f0:33:2b:d3:ee:6f:41:2a:c6:b3:86:
e3:55:56:ac:c3:e9:f1:76:0d:e4:7c:7f:6e:c7:ea:
bc:ab:13:d2:eb:ec:00:d6:74:bd:c4:a5:16:b7:58:
48:24:db:fc:c6:f7:fd:b1:f7:4f:0c:f0:37:bb:7f:
43:ab:ed:c3:4d:5c:47:d6:5a:ed:4c:8d:97:e8:13:
ad:a3:ea:4a:31:38:56:55:df:52:c9:4c:ac:49:2d:
07:45:1a:64:b4:79:49:89:98:d0:af:be:5d:3d:94:
8e:4a:0b:a9:0a:84:32:1c:a8:c8:e4:96:c5:f0:1c:
fe:b0:3b:02:68:ac:6f:c9:00:32:d7:7e:3f:29:02:
fe:dd:97:60:6c:86:b0:8a:90:9e:71:14:1d:ba:3b:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:86:3B:97:80:88:34:47:1B:2F:46:7E:DF:D5:E9:14:CC:9E:1D
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5a:30:f4:83:78:ba:13:7a:ba:50:88:af:62:2d:69:b5:6b:
70:cb:e3:b5:0f:83:dd:8a:43:9f:e6:71:70:19:85:b8:44:03:
93:1e:1a:34:b4:be:05:41:11:d4:84:c6:31:99:e2:d4:b0:9e:
43:66:11:ca:e3:61:b5:49:35:ad:d8:44:87:bd:03:b8:74:76:
ee:14:0c:7c:0e:5b:44:b7:67:cd:a1:3d:cd:24:24:79:b7:6e:
af:b7:55:a7:d0:c5:ce:6f:67:3d:15:52:16:6a:ca:f6:d6:f3:
bb:1a:e8:1f:a9:5d:dc:e9:e0:17:df:42:30:39:fd:dd:5e:9e:
b6:cd:d5:97:68:ce:b3:80:ce:20:05:a5:82:3f:51:ec:19:f1:
6a:97:74:a4:5d:b5:5b:0d:13:0a:88:3b:50:30:bb:11:b7:6d:
08:a2:ed:fb:a0:c8:31:2b:93:b1:4e:67:d8:31:56:5b:25:74:
b0:b0:6a:02:cc:f3:a4:90:96:54:6d:2a:81:54:a0:1e:4c:47:
31:17:12:f7:61:e6:11:99:2f:2c:ee:f4:4b:5e:55:ff:4a:8f:
bc:95:c4:7d:b7:fb:a0:25:7d:f5:a7:23:1c:3c:78:09:73:7c:
10:1e:1e:5f:a4:f6:c9:1b:75:63:d3:6b:2a:d4:3d:36:ad:d0:
12:fa:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:20 2026 by rpki-client