Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: l5dneyJkUgp1BNe4ZQWwEyAjDF8DgAsgQK8dUz6uH04=
Subject key identifier: 4D:87:45:F4:E0:E5:68:82:41:E8:09:C5:E6:DE:8F:4B:8D:4E:7C:AD
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019D29CDC0F7E3E09E6D72E784FC21F1A2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 11F4
Signing time: Thu 26 Mar 2026 11:00:43 +0000
Manifest this update: Thu 26 Mar 2026 11:00:43 +0000
Manifest next update: Fri 27 Mar 2026 11:00:43 +0000
Files and hashes: 1: vMfnrpAebos3eaIEsMS2VFk8-QI.roa (hash: 4/jYsNoEYkp6fGrbtUoi3W/2IDsabtf81IB97bt4re0=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: O7RAXt05yrpExQhzbWXE/Yau4NrDNf6SXIh51Qt+hJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c0:f7:e3:e0:9e:6d:72:e7:84:fc:21:f1:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Mar 26 11:00:43 2026 GMT
Not After : Mar 27 11:00:43 2026 GMT
Subject: CN=4d8745f4e0e5688241e809c5e6de8f4b8d4e7cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:7a:5c:f1:40:2e:77:ca:66:fb:8a:bc:fe:
68:72:45:ee:b9:18:f1:8f:85:7d:90:c5:80:4c:02:
6a:6c:99:da:33:b6:04:00:d4:6d:a4:cf:ba:ef:cd:
aa:4e:e4:69:5a:16:c7:da:65:92:e8:b4:bd:ca:31:
99:68:a6:65:8e:b8:cc:6d:0e:39:72:22:0a:20:ac:
7a:11:3f:ef:a6:47:6c:ea:08:a0:ad:26:1a:d6:40:
a1:d7:86:4d:49:b5:37:f8:6a:38:73:56:44:36:48:
89:38:7b:d4:96:ff:b2:9a:a6:9d:a2:2b:d1:07:51:
f3:55:06:90:16:7c:58:1d:6a:ea:1f:7c:2b:b0:fd:
5c:2d:57:7d:0c:d8:fe:57:89:d4:4c:e1:2d:e9:0f:
d9:f5:25:3b:c1:11:d1:7b:83:27:a2:24:fb:23:0d:
c0:fa:ac:ad:47:d3:ee:67:0c:bb:b7:a0:e5:3f:6d:
46:c7:f9:5c:1b:a3:8a:b6:5b:78:6d:2e:e0:fd:7b:
44:b1:dd:40:61:be:42:83:0c:ef:ad:2a:18:ec:f8:
36:ee:9d:e4:71:44:31:ea:00:ec:cd:32:b3:13:c5:
82:94:d8:0e:ad:1e:28:a7:ca:e7:fe:35:d2:4d:28:
f8:a0:82:37:78:6c:80:74:3e:fc:ee:42:dc:49:43:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:45:F4:E0:E5:68:82:41:E8:09:C5:E6:DE:8F:4B:8D:4E:7C:AD
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:72:21:9f:7b:f9:e5:ad:4f:b6:0c:b0:ac:e5:85:e7:e9:2e:
81:76:f2:2f:57:38:cf:a4:79:6d:20:e4:4b:17:b6:91:0a:98:
7a:5a:8f:4a:a1:33:d2:d0:70:c5:15:b1:70:c5:d5:b4:70:c2:
da:e1:c9:1e:ff:ad:5b:34:71:af:3a:73:cd:f8:3f:b8:63:71:
a3:33:c3:dd:20:96:dc:c0:64:74:1a:26:5d:53:63:a1:b4:e4:
f2:a6:51:68:e7:eb:24:91:fa:04:8f:55:2b:19:0c:ca:10:ea:
01:e4:10:46:04:cd:71:79:f2:ff:5c:ea:a7:0d:b7:3b:7c:32:
df:31:50:c7:6e:82:95:e0:e1:f4:90:ce:2e:96:d8:e2:75:53:
cf:e0:27:64:95:0d:d4:fd:fb:19:a0:46:eb:aa:2b:2a:97:ef:
ef:1e:c4:35:60:65:56:f0:51:d8:7e:45:b0:46:36:b5:74:11:
68:26:2c:b1:74:04:ec:d3:20:f9:80:df:a1:f6:25:21:dc:29:
6f:2b:a3:b7:8d:a3:88:33:9d:7e:fb:5a:c8:f7:31:6b:71:cc:
df:57:be:55:0a:2c:97:3f:d4:32:b7:ef:61:35:69:0b:7d:04:
00:77:b6:a7:33:87:29:a6:54:0d:d9:6c:5e:fc:a3:bd:66:ed:
9d:2c:13:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:13 2026 by rpki-client