Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: fbJnRFVSgfZz0lRsxyTIaSGIoTdTDdLjccnmwLBafD0=
Subject key identifier: BA:B6:EC:BE:55:33:39:2A:D3:F0:1C:08:49:03:75:89:24:FF:D4:13
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 019D25BA2C74313FA250F14D99E35EC0E404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:00:51 +0000
Manifest this update: Wed 25 Mar 2026 16:00:51 +0000
Manifest next update: Thu 26 Mar 2026 16:00:51 +0000
Files and hashes: 1: LEZ2eernw3AVIu_DBAVXUMvBBUI.roa (hash: mWWMsuTtrCWfoaF45z7yHf2yqMTPnwnlxC/hcOPnnAg=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: vCaehAtsun8YkTHLTlG18l/DaMuIl6HivjR7aCm7qjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:2c:74:31:3f:a2:50:f1:4d:99:e3:5e:c0:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Mar 25 16:00:51 2026 GMT
Not After : Mar 26 16:00:51 2026 GMT
Subject: CN=bab6ecbe5533392ad3f01c084903758924ffd413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:9f:85:5b:07:54:26:8d:c8:8d:33:8b:a7:
c4:ff:23:f2:30:55:b5:d9:91:2f:26:e5:f8:46:76:
6f:15:cb:ed:51:e7:3b:7c:db:e5:ba:0c:95:e0:9a:
2c:58:43:42:a3:1d:bd:33:3c:f3:d2:c6:ea:89:96:
ad:e5:b2:c3:e6:11:b8:c5:13:c2:4e:dc:90:c9:76:
09:8e:b6:31:0e:b6:28:11:3c:5c:59:86:0b:e1:1b:
09:2d:2d:dd:88:24:70:46:3a:66:8d:ba:64:88:35:
4e:90:0f:ca:e5:ce:66:d1:ba:7f:51:da:f6:76:03:
95:6e:ba:b6:9d:7a:67:b7:1b:2c:c1:67:99:8c:b0:
73:23:db:f8:aa:de:02:77:a2:36:a2:1e:d5:b7:f3:
08:0d:3f:89:22:af:85:61:7d:86:38:6c:da:bc:e9:
bc:06:c8:98:84:e1:df:02:7e:1c:46:71:73:1a:54:
4f:0b:27:fd:00:43:ce:f6:35:a7:9e:2a:41:e4:d7:
5d:7b:c0:74:de:3c:6e:5c:ed:70:8c:70:14:70:27:
23:80:71:58:b8:60:82:90:7c:bc:b3:76:56:80:56:
31:7b:f7:c4:39:56:bb:64:c6:07:98:bf:33:6f:2d:
b3:43:b6:f5:e0:d9:c3:a0:f0:83:0e:49:fb:1f:91:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:EC:BE:55:33:39:2A:D3:F0:1C:08:49:03:75:89:24:FF:D4:13
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:97:ad:a4:07:8f:85:06:b3:5a:4f:92:a0:60:7c:dd:46:
a9:fd:41:34:d1:f6:73:17:c6:f0:9d:8e:59:15:2a:15:6b:be:
48:37:f9:4e:71:49:1e:40:86:3a:8f:58:c2:c4:fb:30:d7:4b:
8d:17:a6:d4:1e:d1:00:c5:4a:f4:a7:a6:6a:fd:9a:57:20:6f:
0d:80:fa:f4:24:08:09:72:2f:ef:94:5d:0f:f3:29:39:da:50:
d2:5e:41:4e:cb:be:5b:15:c8:f3:7d:39:72:13:19:da:bb:56:
3d:65:c3:14:1d:68:6b:32:50:5e:e5:38:06:86:d9:de:1f:26:
92:df:e4:b6:65:ba:bd:5e:01:d1:67:07:0f:8b:69:0b:a3:ba:
22:bd:f6:56:4c:1c:3e:84:eb:3d:1e:27:3f:f9:21:1d:65:6e:
67:65:af:6d:fd:e6:e0:ae:f5:d3:67:fc:24:e6:da:3e:11:66:
43:cf:a9:65:5b:ab:bc:a1:cb:8b:89:87:b9:0e:74:7f:b9:21:
7c:aa:08:9b:cc:28:f9:a4:7a:1c:04:29:ce:48:1d:88:7b:14:
cf:e1:b2:24:ee:f9:55:03:6f:c3:f9:16:71:15:93:27:40:b2:
d4:5a:4a:d9:84:a9:d9:f9:ab:b3:ea:9b:34:8a:2e:3c:d3:6b:
d1:4f:a9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client