Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: 5bCjV4dkI+T+3Tq8qvqSSQFHdtYIXeiuuUb1P5ULPIk=
Subject key identifier: EE:A7:E3:01:D1:A2:AD:9E:EF:28:15:D0:87:21:9E:00:FC:F6:B3:B3
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 019D2928F8ACF81D612B7F5BAA6F2E546983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 1542
Signing time: Thu 26 Mar 2026 08:00:43 +0000
Manifest this update: Thu 26 Mar 2026 08:00:43 +0000
Manifest next update: Fri 27 Mar 2026 08:00:43 +0000
Files and hashes: 1: SYIf5Ik-OCMwc9Pf810Yroa_ZFU.roa (hash: 74Uxyj72SuLbr2jaxa3pXrDIfqGb08WX3YcRqaMlrGk=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: 9NHLaaIQOl6bEmP8gtjSI96J/hIZrRQJTo2WLCFbV5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f8:ac:f8:1d:61:2b:7f:5b:aa:6f:2e:54:69:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Mar 26 08:00:43 2026 GMT
Not After : Mar 27 08:00:43 2026 GMT
Subject: CN=eea7e301d1a2ad9eef2815d087219e00fcf6b3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:5c:c4:c8:cf:6a:01:01:07:f3:a6:a2:18:
77:d3:d6:01:47:db:45:d3:a3:c8:31:09:6c:21:f2:
16:8b:d6:fb:b8:fb:83:d4:6d:b3:1c:07:f1:41:50:
af:32:89:aa:99:a7:a9:56:72:0f:17:b4:d2:0a:3a:
3b:cd:6e:d2:9a:48:e8:71:e6:84:0b:5d:00:14:1c:
33:e7:14:0e:cd:de:47:7f:8e:c3:7f:38:b2:c9:9b:
60:d3:24:97:b4:ef:62:73:bb:a7:b7:f8:be:ee:87:
de:b3:ef:39:7f:da:a3:31:71:74:c7:5a:c4:fc:fa:
4a:f9:8e:f2:e0:4e:1d:43:d5:95:66:03:51:7b:00:
fa:cd:9e:2c:1b:8b:b2:05:77:2e:c9:bf:5d:36:35:
76:9f:bd:72:6e:17:32:23:2b:28:e6:47:5e:6e:f0:
4b:4f:2f:9e:40:8d:cb:61:0c:fb:bc:96:8f:9f:06:
f1:1c:6c:2f:45:22:94:2d:9a:0e:48:4e:67:87:71:
04:f6:84:c1:68:3d:3a:d5:4a:e2:0b:bd:80:0a:4b:
d6:56:f5:50:26:68:30:d6:b3:33:1c:b7:a1:da:05:
ce:a5:5a:93:ee:03:06:26:d5:9d:55:2a:f0:1b:8d:
a3:89:de:a6:c5:1b:74:be:84:c7:ba:6e:45:9c:37:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:E3:01:D1:A2:AD:9E:EF:28:15:D0:87:21:9E:00:FC:F6:B3:B3
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d5:cb:f8:32:2a:80:42:f4:03:8c:84:34:d3:2c:ed:64:71:
10:55:66:40:f0:68:be:59:0e:6e:13:07:88:0e:0d:af:dc:6c:
6a:00:ff:4d:99:24:b9:ac:9f:0a:8d:15:f3:a0:c8:71:f6:5a:
01:85:c1:27:87:22:27:05:64:88:6e:93:28:dc:68:d1:2d:57:
c9:b9:05:d3:29:30:fc:ff:9d:56:c3:19:bd:c4:cb:7e:fd:63:
97:e3:06:9d:4d:7f:39:d9:7b:d6:b1:b7:04:ab:35:df:0e:b6:
75:73:eb:25:6b:e4:72:42:fb:79:d1:28:61:c5:e9:98:dc:fc:
91:69:15:54:78:5f:e2:5f:97:a7:14:72:1f:19:9a:25:a6:6b:
eb:23:71:14:51:19:ac:ff:99:f7:9c:65:1f:a0:cb:72:39:3b:
fd:bc:a1:67:a5:46:06:92:41:35:f6:e6:a1:03:85:c9:ce:67:
68:28:21:33:32:b2:3f:5d:fc:f0:14:c2:b4:d3:aa:f2:d5:9e:
1c:40:02:3b:1b:c7:50:7c:29:c5:34:af:02:e9:78:57:ba:e0:
b1:48:45:1b:ec:57:8a:7f:be:4f:69:17:2c:80:6e:f6:46:7a:
98:45:94:ba:a1:62:bf:5f:65:3f:0b:f2:dc:9a:b9:56:94:41:
fa:70:ac:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:22 2026 by rpki-client