Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: OzT6hUewUxQHDNUIBUpBfZsAppIf6d0Dstc0lyan27Y=
Subject key identifier: 8A:E3:A1:5A:11:E5:6C:CA:F6:9B:D9:12:BB:83:7C:31:53:8B:0F:EC
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 019D2816BA3CD3AC63E8CAB1B43EF11E0EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 0F6B
Signing time: Thu 26 Mar 2026 03:01:11 +0000
Manifest this update: Thu 26 Mar 2026 03:01:11 +0000
Manifest next update: Fri 27 Mar 2026 03:01:11 +0000
Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: f6Z57mNKfH+p7/WfG1JBmRh6H1cYsVWWhhjuAtNCBWU=)
2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ba:3c:d3:ac:63:e8:ca:b1:b4:3e:f1:1e:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Mar 26 03:01:11 2026 GMT
Not After : Mar 27 03:01:11 2026 GMT
Subject: CN=8ae3a15a11e56ccaf69bd912bb837c31538b0fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:27:46:f8:bd:71:8c:12:1b:a4:64:11:ac:
a7:ae:fd:7c:ab:c2:be:76:6f:7a:16:29:7e:47:4c:
7e:cb:fb:23:dd:8a:67:e8:ea:96:e1:9c:a7:40:0e:
33:50:94:b0:4d:64:4c:74:02:d1:bb:b9:37:39:06:
cc:5b:e4:0b:ec:a0:0d:71:03:60:84:85:fb:c4:a8:
0d:73:a7:40:bc:d5:45:50:75:ac:ae:57:32:87:07:
dc:86:43:f5:8e:6c:4d:82:96:bf:ec:f2:a0:8a:ce:
6a:41:ef:9e:7c:09:28:a1:9e:fd:17:80:c3:4a:e4:
fe:df:17:59:81:8f:28:f8:9d:5b:62:37:21:2b:05:
a6:62:0e:b6:87:cc:5d:41:a4:97:64:a1:38:2a:ad:
77:8c:21:28:f9:e9:83:65:5c:b1:9a:51:3d:cd:b0:
12:36:39:00:67:9f:44:58:f9:61:6d:42:63:1c:75:
41:2a:ce:75:d5:6e:40:6d:a0:56:e0:b8:6a:48:ae:
0f:98:81:cb:bd:63:af:e3:cd:8b:4b:17:12:42:0b:
63:ef:0d:d5:fa:99:55:18:af:38:5c:f7:00:be:e0:
2c:2c:0d:78:f1:e9:bf:c2:e2:f8:17:93:cf:c0:c2:
72:cb:d9:25:64:73:54:4d:01:71:91:9a:1a:86:d8:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E3:A1:5A:11:E5:6C:CA:F6:9B:D9:12:BB:83:7C:31:53:8B:0F:EC
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:d6:35:69:5d:8d:70:d8:32:ae:8e:4e:21:8f:80:42:b8:
43:db:e4:30:97:08:c3:3c:dd:f2:51:1c:cf:63:16:66:51:44:
c1:f7:88:5c:c2:7f:d6:8c:a4:94:5b:d2:90:d4:5b:e6:fc:bf:
ef:9c:b7:ae:60:4e:70:1c:d4:ff:9d:79:a8:d4:9b:6a:97:c5:
4e:bb:3d:8f:cd:33:72:84:6a:2f:8e:7a:32:9c:bc:77:51:36:
ce:95:83:b2:b1:5e:bd:33:7d:3b:e7:44:84:d1:21:3a:e7:21:
14:b6:07:19:79:70:f0:4d:58:49:a2:57:6b:4d:79:9b:86:3a:
db:a6:57:1e:44:cb:b4:8f:2f:62:f0:7a:8d:71:41:99:e9:3e:
69:9f:a7:4f:e3:ea:ad:21:58:57:f3:3d:63:dc:69:b7:84:d5:
ef:33:0a:8a:6d:5b:77:39:73:e5:02:54:ea:68:74:34:cf:f6:
1d:55:95:34:a3:c8:e0:92:dd:a4:ca:66:57:9e:09:f5:43:33:
23:2b:d6:3a:12:a7:7c:1d:0b:d2:e7:37:70:63:66:37:12:52:
4f:fb:e4:0c:32:71:d6:78:a1:43:bd:57:45:d9:b7:ed:57:c6:
f3:82:dc:92:87:a9:28:f2:bb:ef:4f:dd:5b:f1:38:88:ef:e9:
ad:cd:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:17 2026 by rpki-client