Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: V9QnAQfF9DWLqEvG1vlYGxmV2wFVxzjfFRh3DwWGXnc=
Subject key identifier: 12:59:C7:FD:21:21:5B:EB:AD:4B:25:4E:A0:B7:83:62:4E:A1:1F:6C
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019E1F1182F2D4E6AF928C6B91667E5166BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 0855
Signing time: Wed 13 May 2026 02:01:41 +0000
Manifest this update: Wed 13 May 2026 02:01:41 +0000
Manifest next update: Thu 14 May 2026 02:01:41 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: qAvJ/IOZpSsSOefTLxsTGBptzBydixwQRf5oMZihUr0=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:82:f2:d4:e6:af:92:8c:6b:91:66:7e:51:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: May 13 02:01:41 2026 GMT
Not After : May 14 02:01:41 2026 GMT
Subject: CN=1259c7fd21215bebad4b254ea0b783624ea11f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:4f:fe:02:43:21:88:51:b8:e3:69:30:81:
84:3a:44:f8:07:6f:c7:84:c3:d7:65:0d:de:88:69:
d6:13:1e:3e:b6:bd:9b:af:c1:01:56:96:f1:40:a4:
be:40:a0:8f:3e:24:c3:ce:85:3a:1f:79:22:13:33:
93:32:58:7c:94:09:2d:7d:7b:e6:b0:cb:47:2e:20:
e5:cd:3d:00:b2:26:c6:b3:88:55:91:cf:66:ca:a6:
c9:fd:1d:56:e3:02:30:e2:ed:ec:e8:82:d7:ae:8a:
e6:d9:b0:fd:c8:5c:a8:ad:93:8c:ab:5a:4b:1e:8e:
e3:c5:aa:65:ca:86:2d:50:01:f0:51:c4:3c:09:64:
5c:3d:7a:74:6b:ca:3f:dc:64:81:49:37:25:8a:01:
5c:31:87:ca:d2:23:9e:e5:51:e6:1b:4d:16:53:ae:
4a:19:21:a4:6f:5d:73:6c:f6:eb:03:1b:05:f2:4c:
6c:21:60:35:38:1e:0e:b6:59:2c:4f:62:54:f8:e2:
d7:82:4e:d2:4b:52:07:d2:be:48:c7:95:d7:c5:e7:
b4:89:48:23:a3:fe:aa:37:be:e2:87:97:5b:af:9a:
93:36:45:3f:a8:10:24:e8:ba:4d:5c:a3:20:cd:22:
c1:a7:c2:5e:9b:75:68:03:0c:ed:ef:5b:0b:b3:6d:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:C7:FD:21:21:5B:EB:AD:4B:25:4E:A0:B7:83:62:4E:A1:1F:6C
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f0:17:66:91:44:52:57:24:fe:c8:35:8b:85:c8:fa:eb:7c:
a1:a7:5d:e5:e3:c1:7c:45:a3:62:d3:18:52:b4:2f:f8:ad:8f:
b9:de:a0:b3:8d:4f:2d:b4:4e:8f:ff:6a:5d:78:81:dc:8d:1a:
c5:1c:e8:e9:fd:fc:8c:23:ef:f5:33:39:1f:65:b8:38:29:17:
5c:08:b8:4d:bf:a9:53:3f:4b:0f:c7:98:9b:c1:45:05:68:bc:
34:94:40:82:a7:e7:36:bc:1e:73:a7:46:b4:ea:cd:32:91:7d:
2d:1e:70:40:71:d9:f5:f4:81:1f:fb:f1:bc:66:04:1e:2b:5b:
66:8f:45:e2:40:38:c2:fa:83:0e:5f:57:3a:87:6e:ea:ca:0f:
ed:c1:91:33:66:0d:b0:b5:bb:78:da:ac:54:0c:06:00:6f:61:
29:34:9b:c9:fd:f9:3e:9f:74:d2:da:82:4e:6c:15:e7:24:d7:
74:a9:3a:9e:51:02:3a:c1:42:70:9e:4c:60:b5:bf:dd:27:bc:
38:f6:60:e3:8d:b8:d6:00:af:a2:4a:62:9d:86:10:c7:4a:11:
31:97:8e:ad:86:d2:23:7c:66:b0:d2:b9:d0:52:62:26:48:43:
1b:ab:c1:4d:23:f5:3f:90:dd:2d:77:68:bc:51:cb:b4:bf:18:
37:75:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:43 2026 by rpki-client