Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: DZ7F4bK8D5tvOQmY9gZr0Yp7h5G+HBF1cKB0QRKu3K8=
Subject key identifier: A8:A2:74:46:93:89:76:06:A9:98:4C:84:B5:EA:8F:E4:36:FA:A5:C4
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019E1F10B89004DAEB75CF077DED8761D216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 02:00:49 +0000
Manifest this update: Wed 13 May 2026 02:00:49 +0000
Manifest next update: Thu 14 May 2026 02:00:49 +0000
Files and hashes: 1: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: Kpb1f+nkgXtb629uqwPiL530UDfrDf0ed0LEh7znKj4=)
2: ezoJl0lo6SFxJ8FpRY4TWMPADso.roa (hash: cD7XM33EvM3euT16GARY/IJgPq96c1JjGDXWgdeNltc=)
3: tdM9a3Fj16C8DYivU329dA57WBk.roa (hash: Q27C5bR4yI1LsWJLJXdVxidjEUUsntcFj8QxNJysAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b8:90:04:da:eb:75:cf:07:7d:ed:87:61:d2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: May 13 02:00:49 2026 GMT
Not After : May 14 02:00:49 2026 GMT
Subject: CN=a8a2744693897606a9984c84b5ea8fe436faa5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:a9:82:7c:8c:2c:72:6b:87:38:39:ab:5e:
27:39:16:cb:09:db:53:52:d0:ac:90:13:80:fe:9d:
2a:15:8d:5c:37:0f:bb:a4:98:14:79:13:39:7d:67:
dd:41:23:02:45:a7:a7:f0:6c:c3:ab:00:5c:51:30:
48:96:88:87:8a:ce:3d:60:47:65:a2:43:19:03:d4:
b1:a4:4a:7d:d6:78:b1:5d:3d:61:d0:1f:bd:2a:51:
97:4f:92:d2:d2:b0:25:fe:88:60:9b:6e:0a:4a:70:
8f:83:94:45:46:40:99:a6:1c:8d:9d:08:01:8e:9a:
51:f5:e8:a8:7b:33:24:fb:25:58:f1:5e:d0:c3:e4:
e1:28:bf:ea:f0:06:17:a7:23:50:05:3a:cb:aa:49:
94:24:4d:79:e4:df:c0:87:20:75:28:f9:ec:14:b7:
4f:32:ed:a8:08:01:3e:28:60:9d:4d:85:57:fa:a0:
48:fa:c1:9d:3e:94:12:a4:23:c2:dc:4e:fc:b5:a4:
9d:e5:c6:d5:0f:c0:79:2b:7d:e6:f8:4c:2c:e8:8c:
d4:af:07:93:65:fd:84:37:44:82:a3:47:32:ac:20:
b4:e5:49:f6:17:cf:d2:2d:3f:67:5f:3b:a8:5f:58:
a2:83:41:64:78:3b:53:4a:6d:42:5f:98:cf:71:94:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:74:46:93:89:76:06:A9:98:4C:84:B5:EA:8F:E4:36:FA:A5:C4
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:b1:27:72:e4:fc:da:bf:d0:42:f5:ae:bd:28:e3:09:17:
eb:5c:ac:84:c1:3d:be:22:80:36:30:b0:44:52:e6:42:a3:19:
96:29:0b:48:52:49:38:a8:93:e3:95:bf:67:97:01:a9:88:47:
f2:2d:82:b8:27:b5:cf:c1:2b:f6:72:ea:b6:13:e0:c0:7b:5f:
77:28:75:73:e0:39:90:74:95:3e:63:35:3e:cb:3e:2c:74:21:
ca:48:12:6e:b9:5f:a0:35:da:e4:0b:05:4f:cf:87:02:2c:f5:
ca:01:6b:61:2b:8d:4e:83:4b:91:b6:fd:31:9f:6c:ff:fb:52:
da:12:bf:c7:1e:0b:0e:63:a2:ec:08:fc:e7:3a:1c:48:bd:a3:
d3:bb:f9:ee:86:3c:4d:d5:70:14:8a:e0:67:a1:2b:81:3f:62:
21:90:a1:2a:0e:f6:1c:08:03:22:ef:72:20:8f:5f:86:c0:9e:
0c:6f:88:c5:f5:18:17:2b:52:8f:0e:f2:22:b3:bb:9e:a6:e0:
5b:33:5c:73:9f:75:bf:d8:0b:9b:79:3e:2c:3d:d4:bd:1b:42:
e3:ad:d4:7b:dc:9f:29:4f:ab:1f:bf:56:33:51:e8:53:61:b4:
08:1f:6e:2e:25:46:2d:81:28:85:84:2d:0e:b1:95:27:27:0a:
c1:2a:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:08 2026 by rpki-client