Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: XiMNanIQwH/Tc9uu3iLfEGKHhk6/Cstsit1z4IOeeyQ=
Subject key identifier: 50:E3:95:61:A9:BF:72:6A:58:23:1B:3E:D1:71:D9:39:96:AF:75:C9
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019D26965D52972CB4A91C72E315C0511B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0C9A
Signing time: Wed 25 Mar 2026 20:01:21 +0000
Manifest this update: Wed 25 Mar 2026 20:01:21 +0000
Manifest next update: Thu 26 Mar 2026 20:01:21 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 6haEm4KNUQTmc/7uGEryY+OBdqMDHvwDfxbHqKG4jOs=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:5d:52:97:2c:b4:a9:1c:72:e3:15:c0:51:1b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Mar 25 20:01:21 2026 GMT
Not After : Mar 26 20:01:21 2026 GMT
Subject: CN=50e39561a9bf726a58231b3ed171d93996af75c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:09:17:59:33:02:51:60:0e:00:7d:f8:35:
d1:a8:9e:c6:85:f8:fe:34:4e:f0:92:9d:7e:71:52:
9a:2c:02:bb:4d:77:ab:82:fd:eb:b7:0a:7c:fc:8e:
1a:63:1c:0b:50:c6:b0:70:09:ed:5f:8d:b0:82:ac:
d7:56:58:67:42:b2:73:26:91:8c:8b:88:93:4f:a7:
49:76:9a:f4:22:d3:8c:c2:e0:ff:30:58:13:a0:80:
15:1a:4f:50:3f:be:df:0a:b9:77:d7:c2:ae:4e:46:
30:f2:da:fc:ce:a8:54:5e:45:12:53:eb:73:4d:6b:
80:bd:44:2a:03:12:fe:60:db:3c:ed:3f:44:13:7c:
d1:51:59:a0:66:e3:a1:21:ef:03:50:e0:2a:e9:cd:
48:ab:45:84:ce:64:da:ef:c9:ab:8c:8f:4f:ed:2a:
6c:80:6e:3c:09:11:3f:c2:b0:44:03:66:a6:f6:87:
69:66:25:d0:28:77:4a:c3:7b:a4:d4:ba:92:05:8c:
23:3a:9f:23:1c:b4:b9:46:c8:1a:ac:92:41:fb:89:
80:21:56:e8:5d:bc:50:15:d2:b9:9f:1e:e8:d4:54:
56:03:9f:cf:66:1e:4e:1d:46:bc:50:2f:a8:29:1e:
8c:27:63:a9:22:87:b9:b6:6b:9d:1c:7a:e0:35:c3:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:95:61:A9:BF:72:6A:58:23:1B:3E:D1:71:D9:39:96:AF:75:C9
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:44:78:8c:b6:b6:f7:6f:d4:02:20:92:b0:85:da:de:18:01:
0c:3b:9a:48:9e:5b:9b:12:fd:87:bb:ca:06:42:13:66:5a:f4:
22:1f:ff:f9:8f:89:86:06:41:70:d1:4e:6b:40:a5:28:e6:cc:
d7:fe:be:72:d7:0d:a9:c7:6b:0d:f3:13:d5:d1:f5:82:62:5b:
aa:0d:99:50:ec:b2:0f:82:9a:65:5a:09:62:9d:1c:e2:e3:35:
12:1e:1f:33:1f:c8:12:d4:36:60:d7:78:19:8e:13:7e:0c:0a:
90:e1:da:89:b5:f0:87:19:b3:51:04:b9:4b:cb:fb:0c:ee:fb:
4f:d3:ed:8b:4a:e4:c8:35:4d:9f:f5:ed:bc:16:4b:09:d7:d9:
70:9c:52:e3:ab:cd:5e:58:02:66:72:cc:2a:0e:69:c0:ad:d2:
3d:02:c1:40:d2:d9:ad:e7:53:5d:10:12:9e:b7:42:67:26:5e:
48:9a:fa:1a:3a:72:33:4c:e0:6b:7d:d0:0e:8c:a0:13:10:51:
e6:89:ff:55:d9:76:ef:0c:b4:1b:c7:3a:63:f1:a7:17:e6:75:
6b:c2:09:88:82:a6:cf:48:56:73:e5:87:49:28:77:6f:90:07:
66:50:7f:95:ca:04:2a:c0:74:98:76:93:7d:ad:af:48:18:49:
ee:65:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:43 2026 by rpki-client