Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: 1QJjt4dTLr/kxK7rxNSR93e3pE5A3G1lcnwEhoMRSPc=
Subject key identifier: 6D:79:D8:DF:2D:03:60:F0:C2:1E:54:D9:83:3D:0A:91:A4:23:7E:A1
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019D29CDE71AA56318C38E32CB91C2568506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 11:00:52 +0000
Manifest this update: Thu 26 Mar 2026 11:00:52 +0000
Manifest next update: Fri 27 Mar 2026 11:00:52 +0000
Files and hashes: 1: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: a3zxtDHt6p20qU3KUi4jXt4hz6L1r/U5zMeUiz7Wp5g=)
2: ezoJl0lo6SFxJ8FpRY4TWMPADso.roa (hash: cD7XM33EvM3euT16GARY/IJgPq96c1JjGDXWgdeNltc=)
3: tdM9a3Fj16C8DYivU329dA57WBk.roa (hash: Q27C5bR4yI1LsWJLJXdVxidjEUUsntcFj8QxNJysAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e7:1a:a5:63:18:c3:8e:32:cb:91:c2:56:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Mar 26 11:00:52 2026 GMT
Not After : Mar 27 11:00:52 2026 GMT
Subject: CN=6d79d8df2d0360f0c21e54d9833d0a91a4237ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:b3:0a:c8:e9:8f:26:5d:40:f0:74:76:13:
b7:88:ce:0f:e4:7a:cd:65:74:5b:d0:02:f6:5d:81:
6f:cc:e0:d4:b0:91:14:97:f3:05:29:3f:cd:13:74:
85:17:fe:de:ec:1c:11:04:93:0d:f8:16:fb:c2:f1:
d6:df:d2:a6:79:9b:eb:f0:7e:85:8a:c7:3e:7f:41:
ac:95:3a:85:f0:d9:bd:e6:19:1a:7f:e6:7d:1e:5d:
8b:6a:15:07:c8:47:2a:2c:4b:40:a0:c3:82:8c:05:
6d:e6:95:8a:2d:72:0e:2a:fe:3e:73:bf:6c:60:d3:
3b:c9:e7:28:0d:e7:64:75:3a:5a:88:65:e7:74:3b:
f4:d4:e3:b2:c0:92:5e:04:ad:ba:4e:df:ae:e4:59:
be:2a:9d:77:cd:55:87:5c:6f:9e:2f:dc:bc:4c:87:
e5:2a:93:27:aa:01:9a:57:8c:67:c4:bf:ff:a6:4a:
c3:2f:1b:ce:85:77:e0:c0:1e:f4:7e:22:1d:aa:fc:
53:ec:39:92:35:86:bb:12:c4:29:64:03:7d:e8:3b:
c5:2a:32:34:45:b4:94:e5:61:a3:b5:0b:b1:2d:8c:
90:2f:07:14:fd:d3:35:aa:d4:7f:a7:f2:d2:5e:ec:
2b:81:9a:78:bb:8b:2a:3c:b9:4e:38:d5:ab:a9:02:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:D8:DF:2D:03:60:F0:C2:1E:54:D9:83:3D:0A:91:A4:23:7E:A1
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ff:ec:6f:83:8b:43:09:d8:09:98:c4:22:74:4f:fd:53:00:
39:8b:87:72:6e:81:47:94:25:ad:24:66:8f:e7:d6:8c:74:f7:
61:a7:31:c6:de:30:8a:dc:b2:d7:99:cb:3c:aa:99:47:e4:be:
82:b2:62:16:8a:1b:e9:0c:90:9e:e3:08:62:32:dd:7d:07:ba:
80:5a:f6:47:21:5a:36:40:4f:03:d7:02:21:e5:bc:c0:8b:cb:
91:16:dc:90:34:7c:b8:2b:77:a4:aa:0f:6f:53:0c:09:21:fb:
b3:ea:06:37:f8:8f:a8:c9:c6:c1:99:64:3f:fd:4f:de:f2:37:
ed:77:2d:cd:db:42:2e:2b:e2:eb:e1:93:18:6e:98:0d:da:2a:
c0:45:7f:fb:7b:06:b3:89:4a:31:4f:3f:b4:37:ff:e1:11:b6:
83:a5:13:64:6b:a1:44:99:38:df:f5:6d:03:7c:fe:3b:cb:c4:
f6:37:8f:1c:1e:67:b2:68:f0:42:ab:8f:b8:48:63:80:c0:51:
29:14:13:33:7b:e5:b3:81:b6:4b:22:c8:50:2e:24:95:1c:34:
9d:77:95:2e:a0:d1:f0:ae:9e:dc:e3:88:f8:6e:02:f5:d6:73:
01:7f:f0:a5:b7:b2:15:11:8e:40:70:11:3c:59:50:13:5c:1c:
2a:2e:31:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzecapWMYw44yy5HCVoUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj
YmIzMjAwHhcNMjYwMzI2MTEwMDUyWhcNMjYwMzI3MTEwMDUyWjAzMTEwLwYDVQQD
Eyg2ZDc5ZDhkZjJkMDM2MGYwYzIxZTU0ZDk4MzNkMGE5MWE0MjM3ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygWzCsjpjyZdQPB0dhO3iM4P5HrN
ZXRb0AL2XYFvzODUsJEUl/MFKT/NE3SFF/7e7BwRBJMN+Bb7wvHW39KmeZvr8H6F
isc+f0GslTqF8Nm95hkaf+Z9Hl2LahUHyEcqLEtAoMOCjAVt5pWKLXIOKv4+c79s
YNM7yecoDedkdTpaiGXndDv01OOywJJeBK26Tt+u5Fm+Kp13zVWHXG+eL9y8TIfl
KpMnqgGaV4xnxL//pkrDLxvOhXfgwB70fiIdqvxT7DmSNYa7EsQpZAN96DvFKjI0
RbSU5WGjtQuxLYyQLwcU/dM1qtR/p/LSXuwrgZp4u4sqPLlOONWrqQL+5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG152N8tA2Dwwh5U2YM9CpGkI36hMB8GA1UdIwQY
MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt
ZjIxYjZhZTNiZTZjLzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj
LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxf/sb4OL
QwnYCZjEInRP/VMAOYuHcm6BR5QlrSRmj+fWjHT3Yacxxt4wityy15nLPKqZR+S+
grJiFoob6QyQnuMIYjLdfQe6gFr2RyFaNkBPA9cCIeW8wIvLkRbckDR8uCt3pKoP
b1MMCSH7s+oGN/iPqMnGwZlkP/1P3vI37XctzdtCLivi6+GTGG6YDdoqwEV/+3sG
s4lKMU8/tDf/4RG2g6UTZGuhRJk43/VtA3z+O8vE9jePHB5nsmjwQquPuEhjgMBR
KRQTM3vls4G2SyLIUC4klRw0nXeVLqDR8K6e3OOI+G4C9dZzAX/wpbeyFRGOQHAR
PFlQE1wcKi4xvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:35 2026 by rpki-client