Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: wkpCW1A2yS36yvImswkM34KHlaImpYXwnft3KNo/zh8=
Subject key identifier: FE:8D:E9:E5:00:B6:8A:54:D3:4C:E6:B8:3F:D3:31:55:E1:05:8B:C4
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 019D262895F6D02AE04EFCEF0D08680A38B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 11ED
Signing time: Wed 25 Mar 2026 18:01:27 +0000
Manifest this update: Wed 25 Mar 2026 18:01:27 +0000
Manifest next update: Thu 26 Mar 2026 18:01:27 +0000
Files and hashes: 1: 1gUVsb5eptHPfkWeIDJOnBtjCdM.roa (hash: 9UbrzakbahLSL538GmtoWSL/CzBIwVc0sR6kEFLy4PE=)
2: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: /4OFYhTOUdLKt7fZGUdlq+YH1lBs+ROO15cf0Yy4a3g=)
3: uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa (hash: zVkALHO/eizkLv+esnlztVcjRzvGtYoCejf9vSgdAPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:95:f6:d0:2a:e0:4e:fc:ef:0d:08:68:0a:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Mar 25 18:01:27 2026 GMT
Not After : Mar 26 18:01:27 2026 GMT
Subject: CN=fe8de9e500b68a54d34ce6b83fd33155e1058bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:66:e8:22:b3:fe:7b:7c:fa:72:64:40:d2:
3f:7f:8c:27:2e:e3:54:7e:db:f4:7c:b4:3a:72:56:
35:9d:7a:c6:58:05:7c:d1:ca:6f:5c:c9:b7:72:d8:
ae:fa:f9:15:a0:68:64:a9:42:00:8e:ff:71:b2:b7:
46:21:53:87:48:e1:a8:1a:2e:3a:64:77:9c:8c:a3:
92:d9:cc:2d:87:ee:e0:49:18:10:95:08:22:b7:05:
72:8d:0d:62:e8:55:34:16:ac:0e:f6:f2:f4:0d:98:
9e:d2:32:5d:34:77:6f:2f:0d:34:ad:cf:67:55:5b:
66:9a:d6:6b:43:70:05:bc:dc:70:6f:95:07:3a:a1:
e7:12:b1:36:13:07:7c:8c:5c:28:bf:ee:e2:51:5e:
5b:83:1a:06:07:d0:66:be:d4:96:d7:32:08:29:e9:
98:48:f9:78:dc:bd:fa:6c:af:f9:14:ca:8a:9b:97:
c0:9f:75:74:62:8c:6e:14:7d:c5:5c:5a:81:b2:47:
02:ec:c4:f2:3c:37:29:0d:e4:b9:dd:50:2c:c7:93:
83:fc:14:c9:fc:a8:9f:47:fb:a2:dd:6f:5d:d6:07:
cf:7c:48:0a:3a:e1:6a:a7:17:c7:8d:65:f0:7d:19:
37:a7:06:84:56:ed:9c:9b:23:11:b2:c1:83:e6:04:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:E9:E5:00:B6:8A:54:D3:4C:E6:B8:3F:D3:31:55:E1:05:8B:C4
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:80:54:be:d8:a6:df:a8:b4:62:e5:8c:b1:2f:1c:64:1d:
45:90:6d:8b:f9:c5:96:0f:e7:38:b9:f3:ba:4f:68:d5:86:fc:
19:9f:1b:b8:46:9e:b1:2f:73:2a:80:51:cb:6e:ca:29:60:25:
cb:09:25:97:87:b5:6b:d7:4d:88:6a:36:c9:dc:0b:a8:50:f1:
7b:14:f8:58:b4:bc:a3:82:26:0b:5f:f2:61:9a:67:21:d5:83:
0e:26:76:12:50:81:53:b1:0a:28:c0:63:f1:33:38:4b:4c:3e:
ee:c7:bb:fa:d5:6f:cc:b6:a8:d7:98:15:b0:87:14:3a:02:67:
88:45:3f:70:e9:eb:2f:5e:a6:11:16:77:b4:68:b1:dd:83:08:
57:bf:5b:ef:f5:be:f5:b7:8d:e8:9a:a0:30:54:2f:9a:0f:f1:
5b:a5:2d:dd:7a:0c:fb:65:ac:68:d5:da:ec:94:31:16:21:3e:
67:6e:5f:48:74:dc:9f:5c:b0:4c:4c:fd:4d:18:bd:52:7f:13:
93:2f:8c:1a:1a:2c:97:72:bb:93:a8:7b:86:0e:1c:5a:60:37:
14:fb:5e:7a:e3:a0:d9:c7:bf:21:e9:51:b2:49:b3:86:b9:ee:
9d:6c:c9:5d:60:ec:9c:6e:8e:1f:8b:e0:12:ca:38:8f:36:35:
c3:48:49:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJX20CrgTvzvDQhoCjiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4
MDljZjkwHhcNMjYwMzI1MTgwMTI3WhcNMjYwMzI2MTgwMTI3WjAzMTEwLwYDVQQD
EyhmZThkZTllNTAwYjY4YTU0ZDM0Y2U2YjgzZmQzMzE1NWUxMDU4YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVRm6CKz/nt8+nJkQNI/f4wnLuNU
ftv0fLQ6clY1nXrGWAV80cpvXMm3ctiu+vkVoGhkqUIAjv9xsrdGIVOHSOGoGi46
ZHecjKOS2cwth+7gSRgQlQgitwVyjQ1i6FU0FqwO9vL0DZie0jJdNHdvLw00rc9n
VVtmmtZrQ3AFvNxwb5UHOqHnErE2Ewd8jFwov+7iUV5bgxoGB9BmvtSW1zIIKemY
SPl43L36bK/5FMqKm5fAn3V0YoxuFH3FXFqBskcC7MTyPDcpDeS53VAsx5OD/BTJ
/KifR/ui3W9d1gfPfEgKOuFqpxfHjWXwfRk3pwaEVu2cmyMRssGD5gRtswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6N6eUAtopU00zmuD/TMVXhBYvEMB8GA1UdIwQY
MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt
NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy
LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrqAVL7Y
pt+otGLljLEvHGQdRZBti/nFlg/nOLnzuk9o1Yb8GZ8buEaesS9zKoBRy27KKWAl
ywkll4e1a9dNiGo2ydwLqFDxexT4WLS8o4ImC1/yYZpnIdWDDiZ2ElCBU7EKKMBj
8TM4S0w+7se7+tVvzLao15gVsIcUOgJniEU/cOnrL16mERZ3tGix3YMIV79b7/W+
9beN6JqgMFQvmg/xW6Ut3XoM+2WsaNXa7JQxFiE+Z25fSHTcn1ywTEz9TRi9Un8T
ky+MGhosl3K7k6h7hg4cWmA3FPteeuOg2ce/IelRskmzhrnunWzJXWDsnG6OH4vg
Eso4jzY1w0hJCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:08 2026 by rpki-client