Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: dUPrnqz5B5kHij34bdfWT9kyFQd+u5OrFYzcZ1stQ5w=
Subject key identifier: 61:01:B4:FF:7B:42:EE:EE:73:F3:87:78:98:7D:01:E8:9F:6C:AE:A4
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 019CAB343A752F19A90478808E50E2157F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0D17
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: GyI44ywFgDL-tIZOk-8lHYup6C0.roa (hash: G6Has1owART2ONYwMGdXhGXjBMiqm1IjR539vTMUHLc=)
2: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: oLqwLHokaXIGmN8yRzJ9WWocc9tMlAcXr8yrymZes8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3a:75:2f:19:a9:04:78:80:8e:50:e2:15:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=6101b4ff7b42eeee73f38778987d01e89f6caea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:72:a7:04:31:54:ab:aa:e6:0e:fe:c8:08:
a7:b1:36:86:3b:b7:36:ab:3f:70:af:75:46:c4:bb:
2a:ee:35:67:43:a8:03:60:c1:26:d6:3f:57:20:fa:
93:95:53:5b:bc:e0:8c:d0:0f:94:ff:aa:9a:46:86:
21:0d:71:97:a9:16:43:79:9f:ae:46:3c:78:72:57:
1f:f5:81:64:5b:19:35:2e:56:ad:ef:0a:42:d6:22:
ba:80:98:37:8b:da:2c:18:1a:19:d0:4f:a4:d5:f9:
40:d1:cf:d5:63:5e:52:e3:5e:7a:ae:4c:5c:59:4d:
9e:cf:c5:48:bb:f4:44:c9:f7:01:21:2c:1f:90:4a:
a8:65:75:80:e8:4f:eb:ea:0e:76:ce:d3:f1:29:a5:
4a:ba:ab:26:24:e9:57:e3:bd:09:a0:3a:6a:2f:46:
a2:24:ed:25:91:c7:50:3a:26:55:09:f7:1a:0e:eb:
76:ec:6a:36:6d:f3:77:f7:54:da:b9:9e:82:4f:5d:
0e:bf:2c:4a:08:77:65:bd:f2:f5:5c:64:a9:d8:30:
fb:99:ac:3e:ec:a1:1b:d9:1a:1a:9e:04:3a:2c:00:
d8:57:71:f8:00:4d:9b:21:04:de:f3:0b:39:81:a6:
a7:f6:b6:e5:1f:f2:4f:9e:60:7e:47:bd:61:d7:14:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:B4:FF:7B:42:EE:EE:73:F3:87:78:98:7D:01:E8:9F:6C:AE:A4
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:9d:2d:23:05:ff:ee:4e:e1:91:57:d3:b0:93:87:01:d8:
78:b5:2e:e5:54:aa:62:52:da:e9:bb:59:d1:b4:8f:49:1b:e3:
ba:4d:64:e1:96:7c:a2:6f:59:06:76:45:ce:81:9d:c8:b0:47:
7b:d6:24:d5:ad:fa:64:f1:06:2a:b8:c4:09:d5:cc:ac:9a:e4:
75:2d:90:c8:f0:ae:d2:49:24:a3:6f:89:5a:aa:fc:12:25:8a:
3e:90:e9:5b:37:82:e1:35:77:b0:e4:6c:99:bb:6f:35:2a:52:
d7:e1:50:0c:e7:91:4a:98:11:37:3b:a4:45:3b:02:63:2f:4b:
8d:ee:51:d4:59:b2:b8:79:20:c2:08:0b:28:ff:0a:a8:e8:09:
fc:92:bf:32:68:9c:19:8e:6b:ab:d4:86:b2:d8:f3:f9:e7:8b:
3f:8b:45:32:77:05:2e:b4:e2:03:67:62:16:f1:d7:fd:83:05:
af:4b:ac:47:05:cd:d0:ea:44:e3:8a:2d:e5:26:b9:ac:78:5d:
87:66:9e:c9:ac:67:c9:cc:5f:1a:a1:35:07:61:86:5e:6f:4c:
c9:1b:e0:b8:c9:58:50:af:64:1d:b3:b3:d7:75:d9:e1:39:cc:
61:2b:85:d1:5a:1a:30:f6:65:3b:bf:70:0e:8e:b0:74:40:d2:
06:b9:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:05 2026 by rpki-client