Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: EyNRZjCX0GHLHewgB4CiiwAbOYe40aDKMp6lz2/nrsU=
Subject key identifier: 2A:87:08:ED:7A:66:6C:78:45:A7:AD:C5:D9:AB:20:8C:93:E0:5C:A0
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019CA9464545713E09BB67C2D94C04B65F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0589
Signing time: Sun 01 Mar 2026 12:01:20 +0000
Manifest this update: Sun 01 Mar 2026 12:01:20 +0000
Manifest next update: Mon 02 Mar 2026 12:01:20 +0000
Files and hashes: 1: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: mRRFPbu4PSGqg88Um2nDocX58S3pwdkpSD1j0n4sijk=)
2: bFX8BWE_mId7wPfD7-rbsnwHc7Y.roa (hash: JGYpm2mH22JcdbZxTGstW5S3PCqzUD5Txtn6RzAsPBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:45:45:71:3e:09:bb:67:c2:d9:4c:04:b6:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Mar 1 12:01:20 2026 GMT
Not After : Mar 2 12:01:20 2026 GMT
Subject: CN=2a8708ed7a666c7845a7adc5d9ab208c93e05ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:3e:d1:2e:cc:42:00:da:8f:03:02:ab:28:
c4:6a:62:e0:c0:7f:3b:4f:bb:6a:13:ee:5f:88:15:
28:28:26:4c:ee:45:8c:8c:14:1c:e6:f2:09:f3:2f:
e1:ea:3e:aa:84:77:64:c1:a8:8c:f1:76:ee:2a:a9:
51:23:c7:82:81:55:4e:9a:59:09:8c:c6:90:18:76:
1e:3b:05:42:fa:6e:e4:ac:89:99:6d:11:c6:5a:2d:
88:af:a9:dc:43:9c:42:04:a5:02:1e:a6:9d:ba:e9:
4f:d7:b6:ad:74:8c:37:c8:b3:a8:9c:3a:81:69:3f:
d8:47:cd:02:52:7d:2d:0b:74:aa:c0:43:52:ee:4d:
86:0e:09:c4:f8:3e:73:e1:0e:de:f6:ca:04:99:bb:
5c:93:b4:59:82:e8:73:fd:84:d0:55:fd:2e:a5:03:
50:f1:3d:82:e0:33:53:c8:84:c5:40:03:be:0c:ef:
ea:78:d4:75:e6:49:c6:6b:b0:2d:88:03:67:e2:42:
97:5b:e0:98:9d:37:77:32:4f:60:d3:3a:2c:33:0f:
10:a1:cb:62:3c:9c:b6:ac:f6:51:9a:85:2d:36:9a:
fa:61:4e:9c:81:d6:3b:a9:d6:61:75:b4:5d:d7:23:
32:fa:da:2a:2d:b7:69:26:04:80:2f:7a:b6:3f:ed:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:08:ED:7A:66:6C:78:45:A7:AD:C5:D9:AB:20:8C:93:E0:5C:A0
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:92:eb:33:f5:43:21:f2:dd:58:5b:2b:68:7b:ac:4c:86:
51:74:34:7e:22:f8:f0:da:ce:a7:21:0c:be:c4:ae:06:e2:d5:
44:0a:99:ea:67:9a:d8:5a:b0:dd:cd:0b:51:58:ec:2d:0b:6c:
98:92:5b:c8:61:57:26:24:e0:53:48:a9:be:73:3b:e4:e9:0e:
06:c1:da:bc:e1:a1:50:5f:5e:4f:72:13:28:08:8e:5b:e4:72:
7c:72:21:0e:d5:a3:0a:17:24:95:bc:66:96:88:b3:24:4f:be:
11:42:ac:9d:c8:e3:f8:88:33:c9:08:55:b7:41:cf:cb:c7:45:
8f:1e:74:4a:f9:6a:b7:b2:26:d4:fd:5e:ad:dd:1e:58:72:03:
66:d6:8c:88:c1:91:ed:9a:1e:54:19:e3:c4:07:78:dd:37:73:
22:06:f6:e1:62:13:dd:19:1f:fd:77:08:24:70:ff:fc:66:df:
b1:b1:50:58:96:7b:15:23:19:ec:3f:d8:40:1d:82:8a:73:c7:
f3:3d:aa:c6:60:9a:67:10:f8:30:5d:1a:6f:94:44:65:29:3c:
a1:f9:9a:fe:da:7d:9f:5d:a3:80:44:2f:d9:5a:0d:ca:e3:15:
b5:8e:14:2c:d3:c1:47:c2:f8:30:8b:39:df:7f:76:c9:2d:c1:
41:3c:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:11 2026 by rpki-client