Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier: vVMfdeW7anH5YUNBteGZN4Y12aAAuOyFhSbYDmKLSk0=
Subject key identifier: 34:E3:14:4E:56:4F:FF:8C:FB:4E:79:E1:28:52:56:56:D6:39:74:7F
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 019D25F12529913775D91DB55A06C3F6061B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:53 +0000
Manifest this update: Wed 25 Mar 2026 17:00:53 +0000
Manifest next update: Thu 26 Mar 2026 17:00:53 +0000
Files and hashes: 1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: UryUpuYYOs2UsqoqAhoxXfk2SwnUmzWAaRp0vVWt7/s=)
2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
3: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:25:29:91:37:75:d9:1d:b5:5a:06:c3:f6:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Mar 25 17:00:53 2026 GMT
Not After : Mar 26 17:00:53 2026 GMT
Subject: CN=34e3144e564fff8cfb4e79e128525656d639747f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:62:2d:32:87:f6:76:94:15:a4:f7:83:6e:
a6:dd:ce:1d:d2:19:67:10:76:90:bb:8b:ac:61:fb:
b1:06:ce:06:d1:74:18:17:a6:d8:6b:2b:a6:85:87:
ad:24:8f:4f:b2:97:27:b0:d0:43:22:69:cd:3b:d9:
38:92:50:41:eb:d2:fa:cf:b2:3d:55:0d:f4:bf:60:
f9:46:73:43:2f:f3:b2:f0:bf:fc:53:46:bd:99:2a:
c0:3c:cb:41:0e:dd:b7:8c:97:9c:28:52:18:67:6c:
05:f1:fc:1e:7e:3c:08:00:a2:90:15:84:16:8b:49:
2a:37:df:44:a6:2e:29:91:d6:5b:70:4d:3f:6c:39:
24:f9:e8:ff:4f:5e:15:8f:47:20:0f:0d:a6:e8:43:
59:69:3a:7d:88:2d:67:06:99:6d:f8:65:da:ec:a4:
ed:4d:da:4c:74:a7:f6:80:6f:8b:6b:b1:af:f1:60:
f0:2f:94:6c:c0:e0:27:57:36:47:87:4b:1c:70:91:
39:b4:98:b6:cd:ee:83:03:e5:d4:e0:fd:ca:c8:c2:
67:0c:1d:83:45:49:9a:61:36:b2:41:2b:cf:32:38:
ed:0e:75:01:99:72:99:fc:75:b1:f9:0a:4e:1a:80:
f6:dc:b5:08:0c:89:75:5a:63:c6:1d:d9:5a:87:54:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E3:14:4E:56:4F:FF:8C:FB:4E:79:E1:28:52:56:56:D6:39:74:7F
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:82:45:a0:73:5f:38:73:26:d0:3a:fd:73:8e:d1:d4:6a:
a8:91:29:55:f4:90:cd:6f:eb:ad:36:a7:ba:95:e5:ec:d4:ac:
28:84:f2:3c:f1:0f:dd:a3:fe:d5:11:40:ce:7e:33:c9:c1:a6:
11:e4:53:96:e5:fd:97:7a:4c:cf:e6:5c:00:fa:5c:ca:61:e4:
fa:64:ef:ba:1a:c9:0e:ff:a1:71:61:c0:74:51:b0:be:b2:e2:
2e:73:de:ec:ab:ca:9d:4d:94:2d:d0:d6:84:8d:97:61:6a:fe:
bc:de:de:f7:77:90:bf:dd:2c:c1:80:ef:94:3e:ec:8c:15:5a:
b0:76:ee:88:d5:ea:b7:64:50:51:27:c5:5f:b3:8a:9d:be:a7:
6b:e4:79:6b:57:6b:9b:52:3b:59:40:a7:45:83:1d:b8:91:e1:
5f:90:2b:75:06:dc:8b:41:db:c3:6f:5c:ec:81:b0:a8:27:07:
af:4f:cc:89:a3:02:99:c0:e1:3e:6f:3e:b3:ed:a3:82:a8:68:
10:6e:27:a5:b1:03:c8:a3:ed:04:fb:a4:e5:42:3a:9c:b0:ce:
31:87:5b:01:bc:f8:47:14:17:07:8c:bb:7c:45:71:2b:0a:53:
2c:66:d6:4f:0b:ad:ec:85:17:44:d6:fc:aa:5f:ac:cf:67:a5:
65:14:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:12 2026 by rpki-client