
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json)
Hash identifier: 4ccv36Seyd33WuDDXwUwz4nPej3BO8EJMYzsUC97iJU=
Subject key identifier: DD:ED:6E:FE:1A:C1:2C:E6:EF:3F:F5:84:3E:30:AF:91:92:18:37:82
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 019D273A8305254DDF1E91A8D864AD8525A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:38 +0000
Manifest this update: Wed 25 Mar 2026 23:00:38 +0000
Manifest next update: Thu 26 Mar 2026 23:00:38 +0000
Files and hashes: 1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=)
2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=)
3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: 4NW91CpO9pUULG04VuGUYxNYhmXE0BDuwEYY9faX4K4=)
4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:83:05:25:4d:df:1e:91:a8:d8:64:ad:85:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Mar 25 23:00:38 2026 GMT
Not After : Mar 26 23:00:38 2026 GMT
Subject: CN=dded6efe1ac12ce6ef3ff5843e30af9192183782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:db:53:d3:17:ab:43:d7:e7:68:13:eb:44:
bc:55:bd:c8:9b:f1:47:1c:05:a0:f6:8f:74:74:35:
e6:26:2a:1e:3c:33:36:7d:c8:ef:ec:8a:ac:2d:cb:
b1:ea:2d:c8:68:76:c0:67:47:b2:a9:90:fd:32:99:
72:ed:43:5c:a1:11:70:55:f0:17:c6:ea:6d:31:d6:
bc:fc:57:d6:b0:45:ab:96:9d:27:66:9a:df:c8:9d:
a9:15:c5:07:9f:14:4c:3a:1b:e6:d8:0c:21:93:65:
30:45:40:9c:a8:60:75:d4:cd:70:72:26:35:9e:73:
c9:fb:23:44:49:4f:b4:da:3f:d8:2a:1b:b2:a1:e5:
8b:b4:bb:82:d3:ce:34:ac:fe:d0:96:98:57:fd:08:
97:01:65:87:2f:e7:79:c9:d2:10:ac:1b:4a:d5:22:
ef:e0:94:8c:ff:44:b8:99:f2:c2:2b:61:36:e9:95:
4e:ae:ad:1f:31:2d:75:e0:42:88:23:b6:67:05:49:
43:d9:db:6b:b0:82:23:1d:93:a2:4a:41:f0:a1:c1:
18:28:6d:75:56:50:82:5d:4c:2c:74:ba:6f:71:9d:
d7:4b:45:9f:19:2e:af:14:92:c3:f9:78:da:f0:9f:
dc:2e:5d:92:17:32:44:75:31:70:95:e1:a1:8d:b1:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:6E:FE:1A:C1:2C:E6:EF:3F:F5:84:3E:30:AF:91:92:18:37:82
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fb:9f:1e:f0:b5:7b:c7:98:2a:87:38:36:26:3c:47:79:4b:
74:44:76:a0:b1:1e:2c:72:87:98:2a:71:05:3f:b9:2c:83:ca:
3f:29:28:ac:48:d8:c0:86:a7:ce:39:1c:40:b9:d5:41:3b:86:
b1:88:0a:4f:bb:30:9f:04:72:74:70:f4:4b:e0:89:9c:ed:09:
fd:ce:f0:98:94:10:31:2f:c6:1f:28:4c:6e:d9:aa:f6:31:04:
0d:a1:dc:d9:ca:23:0a:ec:09:bf:70:e0:76:62:e6:c2:dd:5e:
87:1e:78:cc:a4:d6:5d:70:88:ea:bb:a7:1e:57:ab:86:08:e7:
b7:c9:fd:dc:44:6b:97:17:09:7a:a5:f2:be:7e:e3:50:59:e1:
c9:1c:0b:c7:2f:c6:22:c4:0e:b6:46:f2:c8:6f:60:f8:f4:1e:
1e:8a:dd:47:8d:b0:83:4f:64:b9:43:f1:7f:31:d4:47:38:94:
d1:fa:a2:69:ae:e9:9f:27:0c:b6:f2:ab:0c:46:c2:c5:fb:f3:
19:ff:c9:9a:ef:4f:f4:d9:d7:dc:cb:21:91:fb:63:3b:bc:16:
4a:b5:dd:4a:93:8b:ce:34:01:b4:9b:93:53:ff:5f:5c:77:2f:
c8:d8:b3:72:02:0b:ef:25:ff:f3:2c:6a:7c:8c:17:fe:76:15:
dd:82:6f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOoMFJU3fHpGo2GSthSWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi
MjAwMjkwHhcNMjYwMzI1MjMwMDM4WhcNMjYwMzI2MjMwMDM4WjAzMTEwLwYDVQQD
EyhkZGVkNmVmZTFhYzEyY2U2ZWYzZmY1ODQzZTMwYWY5MTkyMTgzNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G/bU9MXq0PX52gT60S8Vb3Im/FH
HAWg9o90dDXmJioePDM2fcjv7IqsLcux6i3IaHbAZ0eyqZD9Mply7UNcoRFwVfAX
xuptMda8/FfWsEWrlp0nZprfyJ2pFcUHnxRMOhvm2Awhk2UwRUCcqGB11M1wciY1
nnPJ+yNESU+02j/YKhuyoeWLtLuC0840rP7QlphX/QiXAWWHL+d5ydIQrBtK1SLv
4JSM/0S4mfLCK2E26ZVOrq0fMS114EKII7ZnBUlD2dtrsIIjHZOiSkHwocEYKG11
VlCCXUwsdLpvcZ3XS0WfGS6vFJLD+Xja8J/cLl2SFzJEdTFwleGhjbFdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3tbv4awSzm7z/1hD4wr5GSGDeCMB8GA1UdIwQY
MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt
NWNiOTM0YTU1YjBkLzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk
LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfufHvC1
e8eYKoc4NiY8R3lLdER2oLEeLHKHmCpxBT+5LIPKPykorEjYwIanzjkcQLnVQTuG
sYgKT7swnwRydHD0S+CJnO0J/c7wmJQQMS/GHyhMbtmq9jEEDaHc2cojCuwJv3Dg
dmLmwt1ehx54zKTWXXCI6runHlerhgjnt8n93ERrlxcJeqXyvn7jUFnhyRwLxy/G
IsQOtkbyyG9g+PQeHordR42wg09kuUPxfzHURziU0fqiaa7pnycMtvKrDEbCxfvz
Gf/Jmu9P9NnX3MshkftjO7wWSrXdSpOLzjQBtJuTU/9fXHcvyNizcgIL7yX/8yxq
fIwX/nYV3YJvSw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:43 2026 by rpki-client