Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: XdJ9gTcTCYCyTQEsNvZp6sIn6yDd2NVdWw49OtINHG0=
Subject key identifier: 1A:22:EB:93:2B:70:39:2A:8A:B0:6C:4E:7B:34:96:51:EE:69:72:7E
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019E1C7DF5B0973BF429A080B4725A2A4D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0BFA
Signing time: Tue 12 May 2026 14:01:17 +0000
Manifest this update: Tue 12 May 2026 14:01:17 +0000
Manifest next update: Wed 13 May 2026 14:01:17 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: 6+GLKU2ifvBPhDiZLhVzsSqxCChvPP2PeOgUOsfmRaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f5:b0:97:3b:f4:29:a0:80:b4:72:5a:2a:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: May 12 14:01:17 2026 GMT
Not After : May 13 14:01:17 2026 GMT
Subject: CN=1a22eb932b70392a8ab06c4e7b349651ee69727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:c7:a5:1d:f2:6b:f4:5a:45:61:64:00:dc:
34:20:34:57:e6:41:be:bf:0a:0b:cd:5d:4d:82:ea:
ee:76:72:bc:20:a9:69:fe:98:6f:94:aa:ab:b8:fd:
57:7e:58:e4:20:ce:e0:97:f3:30:39:6e:8c:1d:73:
d8:26:5e:6a:5e:d6:c4:f5:06:f7:c8:f4:1d:fe:61:
ba:bb:10:26:b9:bb:46:7c:d0:15:be:f0:84:f1:0a:
93:9b:c9:87:93:9e:48:ba:e0:dd:e4:2b:dd:0d:be:
89:d0:82:00:92:51:1e:0b:41:67:8d:c5:36:89:28:
f8:6c:81:50:bd:2b:a1:0e:2c:03:7b:9f:05:0d:31:
c9:94:b8:e2:ef:26:08:22:8b:03:01:25:1e:72:77:
86:bd:12:09:7c:3d:b8:c5:9a:ad:bf:f3:18:18:4a:
00:4a:9d:a8:3a:15:2c:5e:9a:e0:1a:7e:5d:6e:c9:
e8:5d:8a:c3:2b:d2:21:00:b7:82:2c:6f:a0:0c:75:
32:71:0e:00:63:30:55:ea:86:4e:a6:09:29:3b:3b:
25:5f:9e:d2:a1:f5:d3:2e:ad:66:92:ed:71:de:c5:
7f:e5:ec:a7:fc:1c:04:43:f4:94:ab:71:7e:72:67:
cf:db:97:e3:9b:34:fc:f7:7f:df:ca:6d:e6:c1:40:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:EB:93:2B:70:39:2A:8A:B0:6C:4E:7B:34:96:51:EE:69:72:7E
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f1:5c:f6:57:d3:59:9f:13:49:74:c8:8f:7a:00:c5:6d:95:
94:d1:d8:fb:48:ce:e8:4f:57:7c:9c:e0:d6:95:58:e6:54:c1:
65:4e:7b:7b:f8:50:12:5f:db:bc:60:f4:18:7e:55:53:cb:27:
94:49:0e:85:84:1b:a0:a3:ed:f1:27:e8:63:fe:2c:d0:1d:62:
e1:59:9e:91:62:b2:89:67:44:88:2c:62:d3:ee:06:14:ca:2e:
7e:6b:6b:43:8e:fe:f1:ff:48:4f:a4:b4:db:c7:2c:a1:07:06:
4e:40:8c:73:4d:0d:af:04:7b:f8:3a:39:8d:a3:b0:ea:e4:f6:
7b:53:62:21:b6:59:01:3c:72:d1:bd:90:0e:b1:55:d5:83:47:
d8:2d:53:c9:5b:66:a0:c3:11:ca:b5:e7:5c:88:13:b5:8a:1d:
21:ef:6d:e2:c9:83:03:41:f6:58:bd:e2:a3:b1:c2:bb:a8:ba:
c3:d9:e0:a4:a1:d6:e4:a3:a0:29:c1:51:42:48:c3:05:85:3b:
17:fb:0e:a1:68:11:bd:07:e2:5e:ee:8e:06:67:8c:ca:f0:37:
54:93:ea:c7:c3:ed:8d:8b:2e:f9:b4:64:72:00:62:68:7a:0c:
b3:fb:34:af:02:1f:cd:ef:f9:5c:12:95:d4:ba:b5:ec:0d:5e:
61:20:cc:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cffWwlzv0KaCAtHJaKk02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjYwNTEyMTQwMTE3WhcNMjYwNTEzMTQwMTE3WjAzMTEwLwYDVQQD
EygxYTIyZWI5MzJiNzAzOTJhOGFiMDZjNGU3YjM0OTY1MWVlNjk3MjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSnHpR3ya/RaRWFkANw0IDRX5kG+
vwoLzV1NgurudnK8IKlp/phvlKqruP1XfljkIM7gl/MwOW6MHXPYJl5qXtbE9Qb3
yPQd/mG6uxAmubtGfNAVvvCE8QqTm8mHk55IuuDd5CvdDb6J0IIAklEeC0FnjcU2
iSj4bIFQvSuhDiwDe58FDTHJlLji7yYIIosDASUecneGvRIJfD24xZqtv/MYGEoA
Sp2oOhUsXprgGn5dbsnoXYrDK9IhALeCLG+gDHUycQ4AYzBV6oZOpgkpOzslX57S
ofXTLq1mku1x3sV/5eyn/BwEQ/SUq3F+cmfP25fjmzT893/fym3mwUCVPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoi65MrcDkqirBsTns0llHuaXJ+MB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvFc9lfT
WZ8TSXTIj3oAxW2VlNHY+0jO6E9XfJzg1pVY5lTBZU57e/hQEl/bvGD0GH5VU8sn
lEkOhYQboKPt8SfoY/4s0B1i4VmekWKyiWdEiCxi0+4GFMoufmtrQ47+8f9IT6S0
28csoQcGTkCMc00NrwR7+Do5jaOw6uT2e1NiIbZZATxy0b2QDrFV1YNH2C1TyVtm
oMMRyrXnXIgTtYodIe9t4smDA0H2WL3io7HCu6i6w9ngpKHW5KOgKcFRQkjDBYU7
F/sOoWgRvQfiXu6OBmeMyvA3VJPqx8PtjYsu+bRkcgBiaHoMs/s0rwIfze/5XBKV
1Lq17A1eYSDM0A==
-----END CERTIFICATE-----
Generated at Tue May 12 22:08:37 2026 by rpki-client