Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: Qk1oZ0ZzHYb3yj37Av1rpvIdgSOGaByVM0SXLQb9s5w=
Subject key identifier: B9:43:7A:3B:38:E3:99:0A:45:00:91:DB:3D:C3:76:37:23:0A:32:28
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 019D273ACB36F6C0DA352FC7FA32D22F8034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 053F
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: 0q89mS6gseI0D55M872evmBEmUU.roa (hash: 22eo/4LzLP0tiO+wKFngnAq1euAw4BlN9YUGvUFUe5Y=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: xGkamxE2ssFndT4UH8Xu+iti64EsEID2ToJpTFVnd1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cb:36:f6:c0:da:35:2f:c7:fa:32:d2:2f:80:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=b9437a3b38e3990a450091db3dc37637230a3228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:35:91:f5:60:79:d8:fb:36:5c:5d:af:7e:
15:d8:a1:36:1c:b4:64:bc:b2:22:4e:38:0c:1e:61:
f0:1d:47:7b:86:48:91:53:bf:a0:cd:3f:20:36:ba:
cb:e9:dc:81:1b:bb:08:5d:d4:89:23:5b:dd:8f:33:
0b:a6:56:90:0f:83:b9:bb:61:7f:d1:76:d5:bf:4c:
53:e4:04:25:0c:58:77:f1:85:ad:e2:c8:3c:58:fe:
15:a0:e7:16:a0:d5:57:d0:36:e2:c1:73:83:89:b8:
59:b1:56:bc:88:b2:6e:a4:89:00:bc:98:fb:16:02:
98:43:7a:f7:0c:51:31:76:94:7c:6e:5f:83:38:10:
f6:54:06:14:4c:ec:ef:0c:aa:e1:b4:5d:36:34:28:
c8:fd:90:2a:74:c4:00:c3:9a:cb:32:c6:5d:c9:0b:
79:57:cd:fa:16:71:19:c0:ce:70:b7:5b:23:cf:fd:
e9:18:9a:b4:c5:fd:ab:3d:99:63:b5:c3:68:45:88:
fa:8c:7d:d4:ce:07:6a:37:33:b3:a2:27:0a:81:66:
17:ee:80:9f:7c:fd:38:bc:d6:44:25:96:37:65:bb:
1c:41:e4:81:5f:54:f9:be:da:a8:30:02:0c:32:68:
5a:85:cc:1b:ee:cc:6b:43:15:8b:a8:7d:50:dc:5f:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:7A:3B:38:E3:99:0A:45:00:91:DB:3D:C3:76:37:23:0A:32:28
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:66:f6:17:a3:52:15:71:49:25:5b:0f:1a:00:2a:b9:1f:
3c:5d:74:a0:4c:18:8d:fe:0b:45:d0:e0:57:ac:c4:39:9b:5f:
2b:56:45:d0:d0:e2:ab:4d:a6:bf:c5:a9:79:0e:00:52:b5:cb:
72:cd:d1:0f:0a:28:d0:7d:73:57:12:c7:29:a7:31:75:66:21:
d4:16:81:9a:c2:3d:5b:7d:17:25:19:8d:98:84:e7:13:5f:bf:
92:7c:55:96:33:1c:50:dc:c2:01:54:49:36:fa:26:75:f4:c4:
de:f6:55:28:87:7f:49:25:11:e3:3f:f8:d5:8d:29:cd:ae:b6:
b5:98:4a:3d:50:bd:1f:8d:fb:dc:d2:e0:44:b9:86:fc:fb:75:
7f:49:81:92:ae:a9:82:6e:b0:f3:06:ad:89:68:d3:15:3b:72:
4f:b0:72:f4:b3:88:a2:b4:3b:5d:da:7f:42:46:58:df:62:9c:
ac:35:98:11:09:54:87:62:85:cb:0a:8a:90:02:c4:36:3c:68:
53:67:fa:13:04:1e:e5:08:92:0d:5c:a5:dc:af:00:b1:a8:8f:
aa:20:ed:68:2a:64:45:aa:e8:04:90:0f:ea:f0:d3:4d:a8:09:
8b:e8:5e:60:a4:56:78:f4:45:af:40:6d:91:34:ab:ed:91:01:
1d:19:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:35 2026 by rpki-client