Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: 7FyEi0sYC6d70JTtnb8WKhxUftkmS/myGbg2FJpmv/M=
Subject key identifier: 39:0B:C7:43:E1:C4:71:7C:72:FC:B0:85:5D:35:F4:5C:C5:99:5D:DE
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019D25842772073EE4526112E2D43784630B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 083E
Signing time: Wed 25 Mar 2026 15:01:50 +0000
Manifest this update: Wed 25 Mar 2026 15:01:50 +0000
Manifest next update: Thu 26 Mar 2026 15:01:50 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: WqRXGoQFv78CcLz/D7q/3qjLvSlPxSeAujyRpWsPMSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:27:72:07:3e:e4:52:61:12:e2:d4:37:84:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Mar 25 15:01:50 2026 GMT
Not After : Mar 26 15:01:50 2026 GMT
Subject: CN=390bc743e1c4717c72fcb0855d35f45cc5995dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:0b:31:1a:6f:aa:cf:71:7d:d7:08:2e:ac:
82:f5:24:40:35:8c:60:67:ab:85:d6:71:14:dd:0b:
c4:0e:68:4b:87:40:c5:9a:c4:3d:42:ab:0f:49:6f:
48:eb:c9:90:87:52:6b:ef:fc:22:fb:9f:1b:f0:ca:
aa:09:68:70:ab:93:e7:9f:01:15:e2:46:9e:bd:c6:
4c:4e:da:78:69:99:b2:29:40:26:33:80:80:8e:44:
69:e1:96:f9:ce:82:3a:bb:a0:7b:a0:8f:0f:82:45:
6f:4a:ad:d7:42:f5:27:f8:33:ad:89:f3:30:75:aa:
e8:13:9b:84:80:33:09:03:7c:a1:d9:ec:c6:8a:7f:
fb:d0:eb:5c:26:08:01:83:4e:46:a3:86:d2:c0:f9:
00:d6:ea:ab:66:18:fc:87:47:e9:da:9c:23:66:9b:
0a:05:07:96:00:09:19:ec:07:36:7f:e5:9f:24:82:
09:46:d8:e9:eb:39:44:af:43:17:51:07:6a:16:d4:
e1:9b:17:b3:23:2f:cf:0f:8c:e2:4c:0a:e0:69:a5:
a5:02:01:56:34:56:35:f9:92:9b:9e:88:17:ae:c1:
a1:36:a0:db:f1:04:5b:f6:58:ef:f0:02:ea:27:75:
fe:37:e1:cb:87:13:f9:f2:8d:4d:1a:60:1f:36:e4:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:C7:43:E1:C4:71:7C:72:FC:B0:85:5D:35:F4:5C:C5:99:5D:DE
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:e7:50:bc:20:07:39:70:d5:b8:96:3c:05:d5:7b:e9:1c:
14:dd:b0:9f:53:96:2f:32:9a:1f:da:55:55:8a:ba:4e:76:b2:
7e:ed:31:bc:31:c7:5a:a9:a9:e7:7e:25:8f:f5:12:d9:9a:4f:
64:7f:cf:ed:0d:69:2e:65:bf:4d:99:17:58:04:3e:b0:8d:f7:
a6:d9:28:c4:fa:4b:23:20:2b:a9:aa:2a:77:b9:c3:4b:4b:07:
0c:f2:19:8f:23:93:e1:8d:34:af:6e:71:10:4b:d3:82:3f:9f:
c5:46:46:f7:ae:0e:88:f6:93:39:e7:7d:9a:18:e8:17:85:b0:
b2:1b:8f:2e:41:b4:b9:bb:d2:dd:85:e7:a5:12:f4:48:e0:3b:
2d:39:f1:45:fa:19:24:25:0e:76:b7:0e:cf:63:c1:78:73:5a:
3f:89:9e:20:17:88:65:49:9a:a9:10:c3:3a:e0:77:b8:27:55:
87:5d:e8:64:ca:bb:87:f2:e4:ba:da:9f:64:b9:46:e5:c5:2d:
2f:fb:53:70:2e:d2:39:8a:74:7e:19:db:af:49:82:9b:3d:88:
c9:dc:4e:2b:49:2a:a3:a3:03:0e:4f:b0:76:d0:ad:aa:65:ba:
98:15:93:ca:51:0f:66:11:c7:9c:bb:a9:d3:d5:7b:dc:bd:8a:
af:83:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:28 2026 by rpki-client