Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: 54mFMXSetaNNe/naUEnq3jA/kjBRaSVEwqg+B7nNvHw=
Subject key identifier: D3:CA:50:B7:0B:68:E3:59:FA:72:36:41:6A:A2:0E:D2:67:3F:75:D2
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019E1ED9C1F5845A6F8138D8D391BAF1787B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0651
Signing time: Wed 13 May 2026 01:00:47 +0000
Manifest this update: Wed 13 May 2026 01:00:47 +0000
Manifest next update: Thu 14 May 2026 01:00:47 +0000
Files and hashes: 1: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: JK2tGrftC0+O0rRCVtm1uAQ0w3sIYy6PUxgS+YF6P5I=)
2: ctX13MCDTFxSJqqj4g1CgV7ikV0.roa (hash: dKz1YONEo4g6uW+Dn8oWhaxf6UY6myYCgidhSeWQwoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c1:f5:84:5a:6f:81:38:d8:d3:91:ba:f1:78:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: May 13 01:00:47 2026 GMT
Not After : May 14 01:00:47 2026 GMT
Subject: CN=d3ca50b70b68e359fa7236416aa20ed2673f75d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:fa:13:fa:56:d2:f6:e6:63:8c:b9:c7:93:
81:74:d3:bc:55:6b:7f:5d:4a:52:11:03:50:3c:fc:
55:52:75:aa:60:7e:78:61:61:8a:b5:d3:26:dd:ae:
62:17:a9:7f:93:27:4b:e8:39:61:ea:45:08:5b:67:
d6:c9:6a:93:a5:72:ed:07:96:2f:07:c3:27:e1:62:
3e:89:80:d0:fc:fa:00:39:38:64:4c:41:16:46:97:
68:e1:f3:ff:cd:60:92:8b:6b:99:c0:a2:3c:ca:a9:
ad:0c:f9:eb:20:4c:9a:1f:db:1f:30:96:86:25:48:
5e:20:aa:57:6b:15:2d:fa:72:69:6f:04:7b:ab:67:
01:db:54:f0:f0:db:d0:fd:0a:e2:ef:c6:a9:be:56:
38:e3:cc:1e:a8:b7:a0:b4:5f:35:10:53:91:bf:1c:
a2:d8:25:47:18:38:58:d5:a6:f6:cc:e0:40:47:7d:
7f:b8:01:66:96:75:a5:53:fa:c7:9c:f3:5a:ac:1f:
61:11:2c:40:c6:bf:1b:de:55:c9:0d:98:dd:f4:48:
5b:c4:73:e2:ae:cf:e5:b7:fa:46:43:46:f3:e6:5f:
8d:5d:ce:03:52:bc:c2:a4:0d:22:14:90:49:f4:55:
e9:fc:ed:9d:dc:57:49:4a:65:1e:af:7b:4b:b0:ee:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:50:B7:0B:68:E3:59:FA:72:36:41:6A:A2:0E:D2:67:3F:75:D2
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:05:ce:dc:b2:1c:c3:b8:86:84:c2:f7:58:5d:64:de:4e:
04:5d:20:df:3f:9e:e7:d9:60:df:d8:77:cc:a0:f2:11:76:ea:
ec:c0:d1:1d:aa:aa:24:68:35:d3:79:5a:3c:1f:7e:d4:b5:f6:
56:7b:99:2d:ee:c3:b4:40:c0:20:5e:6b:fe:9a:70:44:13:a5:
d7:1f:94:a0:a2:d6:b5:d4:ac:81:9d:4c:43:56:ab:c5:38:52:
30:44:15:ea:10:03:3d:ef:7a:64:67:56:08:26:66:75:e9:88:
ce:79:7c:01:d7:94:5c:10:bb:74:2b:d6:3b:0c:ab:5b:90:5b:
c4:b6:cd:c8:74:5b:e4:e6:ff:6b:64:0f:7e:10:71:0a:cd:b1:
44:64:8b:df:a9:10:81:73:3b:56:5a:f7:32:b4:1f:f1:27:38:
88:95:7d:2c:cf:24:fc:f1:20:95:76:f8:03:5a:8f:6a:25:40:
71:f8:be:c4:0f:f9:db:84:b7:7c:49:48:d6:5a:89:3a:b8:ae:
76:03:90:d0:d2:67:c2:5a:c8:b5:32:b4:be:91:93:b2:95:eb:
39:66:cd:34:88:f5:c0:67:3c:35:6b:af:38:f4:5e:b4:cc:3c:
e6:ab:ff:c6:b8:01:f6:65:1e:da:4c:45:15:73:e3:66:7b:01:
e4:bd:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:53 2026 by rpki-client