Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: aqUdZpim8tdIZPgzyP8BrHkdwEFl3ZYyNMBdPwODBGc=
Subject key identifier: 18:01:38:26:87:06:3B:9F:C7:D9:B1:89:47:BF:CF:8D:DB:71:5E:70
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019D27DF6C9049CFBC6719B8757AEF995C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 1587
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: VxWfHatZSPjNCGQb391xfXyxZ3U.roa (hash: k4qh49pNo2b+6Z7ZcEp1/eu5zGES0cIQ64LIQKZCaxU=)
2: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: VuNOXieK2BMt1a0g+ukTe3jbG2Ox+eyOVWQt3ghse4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6c:90:49:cf:bc:67:19:b8:75:7a:ef:99:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=1801382687063b9fc7d9b18947bfcf8ddb715e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:22:10:68:51:72:56:e9:10:27:81:1c:f3:
d5:4e:ea:54:0f:c0:a3:ff:05:4f:1b:89:ba:9e:d5:
cb:96:fe:32:b0:c5:e6:f6:3c:a6:5a:a4:8d:d7:db:
e4:44:3e:e5:46:18:6c:55:af:d6:16:93:5f:7c:21:
9a:95:f5:49:ee:37:a6:13:02:14:f9:32:03:b2:18:
b4:a8:4d:39:bf:b6:18:e0:fc:90:2f:32:e9:5f:9c:
0d:83:fd:9e:2b:d2:d8:68:e5:35:d0:e0:f5:2b:82:
ca:bf:83:45:3f:04:0a:ec:77:2b:3a:d0:22:a2:bf:
e8:b9:41:e6:d3:1f:a7:0c:22:1a:3f:9c:5b:e2:ef:
ce:c9:fd:24:cb:95:fc:36:ee:7e:ae:20:39:2e:99:
53:aa:5e:0c:a0:3f:38:fd:d8:86:7b:a7:7f:aa:77:
3d:a2:c0:90:fd:eb:e4:bf:25:e9:4f:c8:2d:99:c5:
91:61:93:77:99:f3:12:1a:22:b1:e0:8b:31:91:d6:
dc:d2:f7:ba:bd:c0:0f:6f:aa:cf:02:b5:80:01:ff:
18:6c:f2:1d:51:ef:c3:26:88:dc:af:bd:3f:2d:25:
91:f6:27:da:bf:81:5f:cf:df:fd:3d:63:39:92:e9:
98:42:f5:b9:ff:40:fa:8e:ef:cf:52:60:32:fe:e7:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:01:38:26:87:06:3B:9F:C7:D9:B1:89:47:BF:CF:8D:DB:71:5E:70
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:51:94:0c:dc:b2:59:cd:de:23:04:91:ab:84:33:96:c5:ae:
b1:60:9c:89:84:14:3e:da:80:4d:a8:00:59:24:92:4e:b8:10:
f8:3c:1f:c1:78:d1:84:09:66:41:63:67:f9:d5:50:2e:30:25:
d7:2f:c0:56:89:ce:15:5c:c4:fd:6a:15:a2:36:a3:c7:5c:55:
d7:e9:76:31:f4:8b:87:65:c1:e8:f2:2a:61:a0:1d:c6:ef:2b:
48:bb:1e:83:ef:54:f3:f7:36:cc:55:66:cb:1c:c6:88:b5:56:
35:a2:09:49:22:de:34:8b:a8:b1:21:8f:6b:90:49:25:77:12:
b5:1f:c8:31:0b:91:9d:35:73:a3:de:8d:df:ae:68:84:12:5a:
42:fa:79:74:24:6b:d7:32:fb:ad:70:d8:d7:8a:cb:bd:c0:f5:
53:32:ce:25:d1:f0:be:fc:ab:9a:b8:fb:44:70:87:fe:15:f1:
17:31:d6:56:df:24:aa:3d:5e:d8:58:48:26:be:17:02:72:96:
e4:6d:39:87:70:df:b5:b1:3c:14:a6:ea:55:54:54:b1:24:4d:
17:d0:f0:22:a7:e0:64:22:eb:5d:b6:1d:96:4b:7b:8a:32:72:
7b:e4:fe:6f:8c:10:59:67:97:2f:22:e7:83:cb:d4:6c:a6:fd:
66:82:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:28 2026 by rpki-client