Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: CY9Tbl8LAGyMuozV5XK/6tJ6j7AWwigw2t75UEoKNbY=
Subject key identifier: 5A:39:65:CC:CB:B9:2A:13:E7:E9:DB:E6:C3:07:35:7D:24:4E:10:1F
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 019D265F6DA91C911DC042A4350A4D89E776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0DDB
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: R+/MCoIItddlTIY7x9SnS7ZwegThNp48s658mW+J5AY=)
2: eX-mxCe4aOVRvqfABXD3XD44-Q0.roa (hash: WteYUUqDb29xXfLR9yOCxZhFZTrxf/JEk97tf2HnzV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6d:a9:1c:91:1d:c0:42:a4:35:0a:4d:89:e7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=5a3965cccbb92a13e7e9dbe6c307357d244e101f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c4:42:ac:a9:63:c3:69:d0:2e:19:17:b6:0f:
10:25:64:44:54:df:ff:c0:f6:3a:fb:72:1e:24:65:
99:67:d2:98:2e:fc:e6:b0:30:37:e9:5b:40:01:1c:
03:d2:a9:11:ab:f7:6f:23:82:1a:b2:94:b2:4c:4e:
7e:1d:39:e9:2a:a3:8c:b1:2f:21:8e:ea:27:1a:a0:
b2:ce:f5:5f:6f:1b:05:23:cc:47:16:cb:68:9c:68:
c6:7a:a3:5b:a4:e5:77:40:3a:90:77:c3:9a:24:1d:
46:bb:98:3e:61:f6:02:6e:c1:27:90:a4:61:fe:b7:
28:50:8d:4a:83:82:6f:d8:3e:bd:e1:1f:e0:c7:f9:
dd:a0:b9:f6:36:d6:ce:fc:54:1c:74:55:1a:09:eb:
ab:0b:57:1e:cd:46:0b:6b:ee:ed:d2:5b:7c:64:c7:
d2:0f:e0:cc:5d:32:a4:6d:8e:ab:32:25:3c:58:32:
83:a2:2b:db:b5:73:55:13:28:5a:a4:68:d1:f6:d0:
4d:cf:2c:dd:1b:94:9d:8b:e1:3e:51:70:81:e8:7c:
29:41:a1:08:d8:89:31:4d:2a:5b:aa:44:e2:10:dc:
df:6b:08:70:62:74:0e:0c:71:39:89:79:7d:19:58:
57:84:19:ce:7b:24:cd:88:b5:41:1a:98:5d:29:29:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:65:CC:CB:B9:2A:13:E7:E9:DB:E6:C3:07:35:7D:24:4E:10:1F
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:35:35:68:07:9f:f4:f2:de:b2:fb:47:a7:12:0f:db:93:ae:
db:6d:23:83:40:dd:bb:cd:a3:54:81:e3:fe:2b:a1:59:63:92:
5e:2f:1e:5b:b1:d7:e4:83:16:e0:c0:d2:29:91:ea:d1:99:09:
71:8a:f9:6c:9d:b9:9c:08:11:b5:32:be:55:bc:ab:6d:99:cc:
45:30:ed:5b:35:b8:eb:1a:c6:12:18:76:a0:bf:fa:c0:54:0f:
06:f8:6a:a2:17:6c:97:51:7b:a5:61:c1:80:db:f8:93:f1:19:
42:fa:97:31:17:bd:62:43:31:f2:b0:34:f7:03:db:f2:54:d3:
6d:78:3b:0c:cc:b2:03:54:a9:bf:79:9e:a5:e5:7d:07:bc:34:
a5:ea:a3:ed:ff:84:d6:6f:7f:45:52:87:67:eb:c5:2c:bd:ca:
bc:9a:3d:a3:a3:e7:f1:d3:5f:ea:e2:94:c4:85:0c:21:cf:2a:
00:db:70:51:e9:4d:a2:bf:6c:78:42:6d:e8:28:ac:7b:44:42:
13:e2:9c:f7:3a:1b:57:ff:43:56:ea:1b:00:f1:80:8c:ae:92:
74:74:f1:3a:bf:c5:bc:27:48:04:33:a6:d4:e1:bc:55:c2:9f:
81:23:3c:cd:68:bd:88:a5:84:15:24:0d:d7:4e:8a:89:1a:6f:
e7:2e:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:40 2026 by rpki-client