Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: gZ0RhW616Bsc5q6f/6WIOWuD1V+bhn8WFLweoTenY3k=
Subject key identifier: 7B:88:E8:5A:66:EF:72:D8:6B:FD:22:F1:EC:61:2A:2D:06:FD:D2:74
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 019D27A920732BD747118A0115348EA7E7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:28 +0000
Manifest this update: Thu 26 Mar 2026 01:01:28 +0000
Manifest next update: Fri 27 Mar 2026 01:01:28 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: pcPP9boaT6mhxW9AiC3b7LFqSBExP2O43011pUxj7bs=)
2: kEykguVs5gOkKU_5k7qyvCofolk.roa (hash: Gn4QfNQldi0PRVW/G1ca80Zkj+YUJm6Oi9CFZjoOuKE=)
3: uNLIyd7V4HU3pDKXDcfQdjnF5vo.roa (hash: p5fGMUK7hRzmC1gWrFuB/aW3upLQMZlcdSjSJk6KWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:20:73:2b:d7:47:11:8a:01:15:34:8e:a7:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Mar 26 01:01:28 2026 GMT
Not After : Mar 27 01:01:28 2026 GMT
Subject: CN=7b88e85a66ef72d86bfd22f1ec612a2d06fdd274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:6c:93:b2:94:08:df:22:2d:88:6f:c7:44:
38:de:85:ea:30:0f:ac:8c:9b:7b:8a:7a:21:28:25:
a0:8a:25:45:a8:2b:f3:4b:d0:81:c9:59:81:6a:46:
10:ad:84:6b:42:a7:16:ea:93:15:a5:27:d0:46:36:
f5:f9:9b:7b:94:7c:79:5a:89:e1:77:9c:57:fd:d0:
d2:57:3f:4d:b6:c9:0c:03:c3:0b:4c:8f:b3:4b:84:
29:5d:21:33:14:4e:7b:64:18:65:c9:c0:72:b5:3b:
36:c5:02:4c:95:76:fb:0d:bb:ab:0b:50:dd:81:b5:
d4:86:bb:59:2a:75:49:90:80:f9:75:da:b1:12:e8:
31:5d:3a:32:a2:da:7d:97:f6:81:ed:bd:4a:56:ac:
fc:d6:87:79:c4:f5:95:07:03:b1:d5:44:fc:28:85:
dd:39:e1:22:8a:aa:96:94:ab:47:d4:6b:91:04:5b:
ad:46:4f:94:36:0c:24:b7:e0:ba:fa:a1:93:ad:4e:
de:69:29:35:55:df:6b:92:5e:54:da:24:08:cc:d6:
eb:7a:a0:fc:bb:41:bd:9b:1b:f9:af:da:2c:fe:c1:
79:ec:cd:e0:26:03:88:6d:7a:95:f7:e4:6d:4c:22:
c9:52:74:e2:96:be:3c:b8:27:3a:9e:d5:e5:c6:fe:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:E8:5A:66:EF:72:D8:6B:FD:22:F1:EC:61:2A:2D:06:FD:D2:74
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:c3:e4:32:0b:3a:75:0d:d8:f5:73:0b:3e:2f:f8:2d:e9:
8c:b2:2a:b1:e2:7a:30:20:02:06:d7:95:6f:9e:30:59:bc:94:
50:0f:b8:fc:92:01:0c:88:59:a4:f6:38:7e:7a:89:b8:4a:21:
df:63:ae:ca:92:6d:d5:b9:bf:db:46:a7:27:84:bc:5e:2b:b1:
38:2a:2f:0f:02:96:97:62:e0:74:a7:0c:2c:78:f7:d3:34:7f:
76:b5:93:ed:68:ad:5c:14:cb:05:ca:98:61:6f:3f:cf:94:df:
de:83:18:04:2f:5b:4a:cc:e0:7f:b0:42:7c:29:da:88:7b:65:
83:00:05:ad:43:0a:49:63:ce:d2:73:cc:85:bc:bb:e4:29:0a:
c5:23:66:b8:d4:d8:47:63:a0:12:d0:7a:29:22:3b:aa:33:78:
6d:71:5f:60:0c:fb:2f:51:f3:aa:dd:68:2c:88:44:8c:6c:e1:
ce:d8:9c:f7:95:46:cd:94:31:92:e9:3a:3b:87:ba:49:79:cc:
e3:a4:df:12:3d:23:85:ff:89:02:a0:10:35:64:14:16:a7:8f:
80:19:1e:6f:72:ad:12:33:33:8b:d4:8c:2e:2b:af:22:ce:db:
3e:79:e4:d7:d8:00:92:de:4b:b1:4d:51:91:85:51:f6:65:8e:
a8:61:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:08 2026 by rpki-client