Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: CDtRkGjsXyUi3NGdT84xxAizYnWdAyKFPCwMr8r0PXg=
Subject key identifier: A0:02:E1:7B:FE:9B:72:A2:E9:81:38:8C:9E:57:95:22:2B:81:81:46
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019D27DF595DF874499015C96C6FD540A00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0DD1
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: EVYQBbWAkx3kL8XmjWgYP0RlTmXunqp0zb8Wgo7Zvrg=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:59:5d:f8:74:49:90:15:c9:6c:6f:d5:40:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=a002e17bfe9b72a2e981388c9e5795222b818146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:9e:10:5e:0f:71:04:10:a6:3e:22:96:34:
29:15:8b:35:f3:09:1d:ae:2c:15:f8:f0:78:a3:f7:
04:01:06:13:51:e4:71:2b:b7:4d:b9:29:1c:c5:5e:
09:33:82:d4:72:8c:2f:23:97:f8:9f:c7:1b:c5:cf:
40:fc:68:58:cb:0f:e8:e4:3d:e8:2c:a9:79:70:72:
c2:33:e4:b1:93:03:7b:57:98:5e:9a:f1:91:c3:98:
b2:57:fa:8a:ad:47:30:c0:1b:9e:33:15:18:c5:b5:
15:f1:4d:66:da:9b:2b:15:4d:6a:8e:e0:fe:61:41:
23:64:87:1d:b1:2c:8a:66:05:65:7b:64:0a:ad:8c:
4f:c8:70:ca:43:bd:c5:38:7f:39:45:3c:a1:f4:b9:
d6:1b:76:42:0e:1d:81:14:48:db:6d:24:e8:86:96:
7d:d4:c0:63:6f:aa:83:6c:2b:98:81:8a:a7:5c:9c:
f3:ec:4d:f7:0b:55:0b:04:5e:8c:dc:0a:2d:0a:16:
eb:92:3a:3a:51:ae:ee:6c:53:72:01:c5:89:e1:9a:
fd:23:81:bc:64:2e:9a:11:58:a0:cf:85:88:01:bb:
06:f4:d6:da:b4:f8:f0:f7:08:48:15:31:8e:c1:0b:
2a:2f:bf:26:f4:7d:d0:2c:a5:56:f8:11:30:a1:f6:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:E1:7B:FE:9B:72:A2:E9:81:38:8C:9E:57:95:22:2B:81:81:46
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1e:60:29:f1:10:e2:cc:98:7d:ef:b7:e6:9a:46:18:4b:99:
40:ca:4c:b9:fb:ea:87:38:7f:a1:bb:a4:33:a5:59:a2:53:74:
09:eb:c2:ef:b9:c4:35:93:83:a3:c4:69:15:55:98:77:7e:4e:
af:c1:d0:20:28:9d:ef:c0:d8:5a:2f:7e:23:88:ab:64:1c:ab:
a1:e5:87:0e:74:97:64:2b:69:a6:32:d8:35:c4:6e:f9:bc:11:
39:06:98:90:9b:7e:db:4e:9d:89:c8:cb:c0:9e:29:c1:c0:cf:
58:f0:b3:5b:61:c8:a0:ee:f3:c8:97:73:1d:48:26:b3:aa:77:
ae:8c:ce:25:f4:ea:84:f7:52:aa:27:d8:62:3b:11:fd:27:fb:
9f:99:ea:8c:1f:38:d1:30:84:4b:3b:22:63:ec:e3:a7:47:48:
0e:63:3a:dc:de:00:a4:b7:f1:ba:29:7c:48:90:9f:b8:88:06:
a5:ac:22:b6:5c:27:56:bf:4d:f3:b0:31:a1:af:51:da:0f:2c:
6f:c2:7c:db:a8:8a:19:b4:33:44:7c:75:f1:02:a5:89:eb:f4:
c5:1f:5c:11:1c:91:85:a7:0c:5f:57:f5:ac:66:cc:33:c1:93:
dd:79:7c:21:37:21:c1:35:45:5a:3e:2c:e7:fa:30:44:b3:18:
e7:1e:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:35 2026 by rpki-client