Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: XauIhm5owSHBT7qQMnFhKWIyIM+iy67ULOJTnf5kjfo=
Subject key identifier: B6:F2:40:3D:1E:5F:A1:FC:C8:D2:3E:FD:7E:B5:38:C0:AB:7A:35:C9
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019F927F3A7684AE9A739897086217EA8EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0DDB
Signing time: Fri 24 Jul 2026 05:00:39 +0000
Manifest this update: Fri 24 Jul 2026 05:00:39 +0000
Manifest next update: Sat 25 Jul 2026 05:00:39 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: nvPT3tTAtSrjKXWCAexTBgoGmR52rxAGjIfdpYezL8A=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:3a:76:84:ae:9a:73:98:97:08:62:17:ea:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jul 24 05:00:39 2026 GMT
Not After : Jul 25 05:00:39 2026 GMT
Subject: CN=b6f2403d1e5fa1fcc8d23efd7eb538c0ab7a35c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:1a:f1:39:b0:45:c2:07:64:6d:51:dc:e7:
79:c8:41:b8:8e:00:dd:ca:db:d4:06:cd:ac:b5:15:
dc:db:88:4e:30:53:6d:a8:6b:64:05:8d:64:d6:d4:
df:b2:49:90:93:13:c9:52:e2:8c:85:b7:67:4b:95:
27:9c:c5:df:7e:ad:c0:61:08:a4:65:1a:21:cc:ab:
77:0f:0e:71:8d:a4:70:5c:c5:21:5b:43:d4:c5:09:
c1:63:39:fa:b5:38:29:09:6d:5b:2f:6e:84:b6:85:
4e:cc:f5:4b:7b:16:c2:30:ef:e3:29:0a:e8:67:0f:
92:06:a4:a0:16:5c:98:5e:83:38:ab:07:99:84:c9:
21:c8:0a:4b:10:b0:a3:5e:bd:4e:c8:20:f3:6f:bd:
bf:c1:25:1f:27:df:57:b2:e8:ce:ff:2f:fa:b8:b1:
6c:48:6e:5e:8c:bf:2a:2a:3c:d9:47:47:6e:32:fa:
c7:28:be:12:ce:8b:66:5b:79:7a:78:1d:f8:54:e6:
e7:ab:c4:81:20:23:f5:ce:b5:6b:c1:eb:10:99:46:
1e:14:d3:51:1f:7e:00:3f:36:b4:97:ef:8c:42:86:
93:4d:8e:7a:07:67:9a:fd:8a:29:70:07:21:2a:ef:
9b:4e:ea:67:da:a6:53:ae:1b:9e:2c:c0:c2:03:94:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F2:40:3D:1E:5F:A1:FC:C8:D2:3E:FD:7E:B5:38:C0:AB:7A:35:C9
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:23:5b:a5:ae:a4:b9:be:14:b5:b1:8d:f1:9a:03:1b:f9:4c:
3f:b5:1f:ac:f2:1f:97:e5:b6:1d:79:23:9f:bb:77:7e:24:60:
e3:8f:5c:c5:0b:d3:f0:6c:00:3b:4c:7e:bd:aa:d8:ed:0c:d5:
56:11:38:70:f2:e9:cd:28:35:7a:3c:de:e8:cf:86:b4:83:77:
f5:91:0d:75:33:d5:1b:38:47:ad:11:c0:49:ab:ff:4f:3c:7f:
7d:bc:12:a9:22:19:c6:7d:60:79:77:8d:56:d1:52:50:a2:67:
07:ae:da:4e:b4:0c:3d:4a:d2:c6:f3:0e:58:5b:c2:f7:47:e5:
bd:db:b4:30:5c:d1:9e:5e:2e:2e:4f:51:d8:f1:83:96:e3:14:
6e:45:c4:9b:f9:fc:2c:83:2d:5b:0a:27:05:4c:1e:00:b1:c8:
14:06:7c:3e:0d:10:f8:65:8a:24:ea:ea:dc:62:be:fd:97:8b:
24:a2:ac:2f:de:4b:a4:e1:45:4b:5a:ed:05:c2:af:ad:19:4d:
89:9b:86:38:cb:6a:e5:62:a0:0c:67:b5:24:01:df:3b:bd:bd:
9b:50:e4:5a:6b:88:83:3c:5f:64:8f:94:6b:34:f0:0d:65:6e:
5d:8d:81:9b:11:21:95:75:3f:2f:17:b6:df:fa:12:13:31:e2:
aa:6a:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:31 2026 by rpki-client