Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: X1Di9zchLZGRk0msg2rWt/PR7G7LKhcALGdBYUNO6w4=
Subject key identifier: 63:79:15:E4:73:69:CB:4D:30:D8:EA:56:7A:91:44:86:81:B5:B4:4F
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019D27728B406366739C388BF46A58918B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: qb_7krEk2T7S9jRpJ5MSFDtkffo.roa (hash: lIEMjy8AMkagBEJxT4ffs+QK3qsE1qpnuVxbq8dmbpY=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: lELkf7R4z05IDQu1LzpVghwsa5Xy2cSPJzPSHbgxkqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8b:40:63:66:73:9c:38:8b:f4:6a:58:91:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=637915e47369cb4d30d8ea567a91448681b5b44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:71:57:b1:dd:0f:11:7e:02:61:2f:18:57:
1b:71:59:f1:cd:22:61:92:12:70:a8:85:8b:16:23:
0c:d5:af:53:83:d4:ed:ec:1e:ab:e3:d2:d1:49:b4:
8d:fc:6d:c8:c2:10:b1:ed:3e:f5:6f:b4:fc:f8:99:
48:e3:bb:c7:0c:ac:e9:98:dd:6f:37:06:75:04:13:
bd:fc:11:ca:57:49:73:87:b4:ae:dd:b9:fe:9b:8f:
3b:29:e9:5f:8c:f4:2c:2c:43:3f:b1:60:e2:c3:7e:
0e:57:93:cd:76:ce:4a:3d:86:ef:85:f8:e3:00:3b:
df:c7:15:e7:88:90:76:2f:0a:ff:69:28:56:cd:92:
d2:e8:77:41:a6:53:cc:e8:ee:1e:37:6a:d5:7a:04:
87:33:ce:83:19:e8:90:77:4a:0c:48:a2:f3:e8:ba:
43:aa:cf:b0:75:37:8b:a0:1e:5a:0a:73:10:64:b2:
cf:35:a8:00:54:ff:54:62:5c:b3:4c:6d:68:ef:a8:
7c:74:11:e2:06:15:ea:48:06:e9:87:c6:43:da:17:
59:40:2e:60:81:e8:1b:78:2a:63:de:e0:0a:95:69:
e2:6d:b1:66:83:c3:23:9d:1a:f2:fe:b0:65:3f:dc:
7c:05:da:83:a3:b2:a5:ea:06:3f:50:7d:a1:be:c3:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:15:E4:73:69:CB:4D:30:D8:EA:56:7A:91:44:86:81:B5:B4:4F
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:97:3a:1f:4b:c5:24:16:aa:77:5f:b7:0b:91:8b:3e:1d:8e:
be:8a:67:f7:bc:99:45:1c:5e:f4:ba:7c:e8:cf:b5:a1:30:01:
67:87:30:c7:44:fa:23:c8:f0:de:df:de:c0:f6:21:d5:5e:d1:
14:d9:07:ad:cf:3d:7c:23:0b:01:45:95:98:38:bf:a6:d6:85:
28:5c:59:18:99:75:7b:bf:a3:19:4d:76:29:ff:14:77:d1:c5:
a6:b7:be:c3:cd:f5:fa:ff:b4:51:4d:b8:f2:e2:2d:b9:8a:93:
ac:ea:f4:9c:87:a9:ba:57:29:b3:60:b9:41:0b:74:6b:5d:2f:
58:c8:5b:63:cd:65:1e:10:6a:92:3f:58:1f:61:50:93:da:4e:
bd:b5:f3:00:f0:5a:f0:d4:57:a1:76:de:46:64:97:8a:a1:1b:
d9:0c:21:42:59:4f:8b:9f:5c:57:3c:a4:07:72:94:f2:c9:fb:
df:7c:6d:55:0b:b6:f8:93:93:0b:3f:84:c8:2a:9d:a7:76:39:
37:47:a0:f8:f8:48:2c:0e:94:21:3c:cb:0b:bd:5e:77:99:f2:
1b:55:14:b6:34:68:18:95:31:90:1f:3c:4b:f9:c9:73:14:bf:
3d:4c:5b:08:d4:32:50:49:d8:78:cc:51:78:d8:50:75:37:2b:
68:ff:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:12 2026 by rpki-client