Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: HnkEHoCKBVuzL6FtHPqs9ayP4GynLbt6JlSBDD2t4Xk=
Subject key identifier: B4:18:F5:7D:FA:06:F3:D0:75:9F:4A:7A:ED:13:6B:B0:F5:48:14:3D
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 019D2960FDD35546A7400C9BF751CAD458AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 15F5
Signing time: Thu 26 Mar 2026 09:01:55 +0000
Manifest this update: Thu 26 Mar 2026 09:01:55 +0000
Manifest next update: Fri 27 Mar 2026 09:01:55 +0000
Files and hashes: 1: PAK2KvwTG30-jUzj7sYacw3L9ic.roa (hash: Lb1okikdPiNmYkmLldNkAdsJr1dPWTMaZXm3lhpA5to=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: yjTt0VBjELZIVKCnnxAwOLuXJbWnPSOTeYupruVewgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fd:d3:55:46:a7:40:0c:9b:f7:51:ca:d4:58:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Mar 26 09:01:55 2026 GMT
Not After : Mar 27 09:01:55 2026 GMT
Subject: CN=b418f57dfa06f3d0759f4a7aed136bb0f548143d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:2f:12:5b:da:b5:6c:22:19:c3:34:a6:0e:
2c:17:20:b9:a5:e1:58:39:2d:04:6a:af:8a:1e:68:
39:8e:7f:20:8d:ca:18:4d:a5:4f:a9:a0:54:38:a4:
6d:07:9b:e0:61:4e:9e:63:3a:26:58:0c:30:36:27:
da:08:ca:7f:e7:d0:e8:7a:c0:ed:82:ea:59:96:57:
0f:c7:76:97:11:16:50:1f:d9:63:ab:7d:d2:56:93:
70:7d:fd:4d:b4:01:8c:7c:1f:b0:bb:1f:9c:af:42:
4b:16:0f:6f:4f:65:20:b1:b3:be:b2:fd:77:95:ee:
99:ad:fa:33:82:c1:64:1e:7b:13:4e:b9:1d:85:ea:
d3:71:09:4b:6f:bc:a7:a7:9d:db:97:f3:bc:22:63:
5b:8d:83:4f:cf:4c:b2:91:65:47:d4:7e:4c:00:8e:
ec:13:7e:b3:4b:97:a1:95:90:bf:3f:cc:33:d0:c3:
5d:da:4b:9f:cd:9c:3e:d7:c3:c1:92:a4:08:19:ac:
d6:3b:35:a3:5c:5c:ab:b5:3c:b1:b7:b5:34:1e:4a:
db:b2:81:34:03:77:fc:b9:d6:ed:5a:45:b9:f3:0d:
2d:a0:e6:16:ae:46:10:e6:01:fd:84:e1:70:b9:a5:
57:75:09:05:0d:ac:50:8f:96:b1:5a:95:e0:48:a7:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:F5:7D:FA:06:F3:D0:75:9F:4A:7A:ED:13:6B:B0:F5:48:14:3D
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:df:b3:06:87:0d:37:b4:a3:38:68:65:55:78:cb:36:24:bb:
7d:c0:b5:1e:f7:ba:c7:13:37:f4:47:65:30:8b:61:be:e1:75:
2e:35:12:20:a7:a5:8e:07:1d:fd:55:ed:c3:9f:fc:ce:88:1b:
a9:58:d8:30:16:54:db:95:f9:7a:49:ca:bc:58:f2:e7:54:f3:
71:e9:4e:68:a8:fa:83:b9:ce:42:dc:32:1b:eb:ba:23:9b:14:
63:fe:02:fa:40:c5:6d:35:89:67:cc:36:5f:85:41:cd:12:c9:
4c:18:be:ed:89:c9:4c:d1:70:8d:12:56:44:78:3f:75:af:a4:
f1:22:90:16:1d:70:81:0f:28:cc:af:9c:b2:df:7e:52:23:39:
a6:ab:0a:db:47:b1:3a:ed:30:11:20:79:de:3c:da:37:0f:b6:
cd:08:13:81:94:c4:e9:08:91:84:2d:79:17:5e:fe:8e:c7:1b:
66:7a:79:b1:a2:25:6f:f4:02:b6:56:9f:64:af:02:2c:d2:01:
65:92:97:24:02:d2:96:ec:71:f9:f1:75:2c:1a:e4:2e:e5:a0:
36:61:f5:99:d7:fc:e6:93:93:b9:b4:ab:60:1e:0d:20:28:6d:
c3:ad:28:65:a7:13:bc:ad:e9:23:8b:f1:76:3c:e7:99:3b:b1:
a1:5c:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:00 2026 by rpki-client