Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: jsRARaD0C8EcCcoZWPxLiXQpF9oGG1kTvuycKhpmwEA=
Subject key identifier: 30:6F:86:69:1E:A4:A7:1A:B2:17:1B:45:00:E1:7E:6C:CB:25:20:F4
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019D2B85549A845F14BBFFF8DFA578C29125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 05D3
Signing time: Thu 26 Mar 2026 19:00:51 +0000
Manifest this update: Thu 26 Mar 2026 19:00:51 +0000
Manifest next update: Fri 27 Mar 2026 19:00:51 +0000
Files and hashes: 1: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: izIXDG/ayMlBPVGUYGzpCOgPOEszT87fghxoWYSCttM=)
2: ctX13MCDTFxSJqqj4g1CgV7ikV0.roa (hash: dKz1YONEo4g6uW+Dn8oWhaxf6UY6myYCgidhSeWQwoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:54:9a:84:5f:14:bb:ff:f8:df:a5:78:c2:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Mar 26 19:00:51 2026 GMT
Not After : Mar 27 19:00:51 2026 GMT
Subject: CN=306f86691ea4a71ab2171b4500e17e6ccb2520f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:be:83:02:4f:02:2a:83:00:73:2d:b5:21:
e7:34:33:dd:5a:52:0f:57:e3:43:29:d7:c5:c0:50:
b3:b3:e6:cf:b0:fc:f3:14:02:6b:14:bb:e8:09:fa:
db:71:c8:ae:cb:94:45:82:5f:31:85:04:02:f2:f6:
58:4e:85:a5:c9:42:71:ee:48:c2:e8:35:76:29:1f:
cd:28:e2:8a:1f:23:9c:47:1c:a1:c2:06:25:06:6c:
15:b9:41:25:de:02:67:ea:5c:f0:f1:a9:50:85:d4:
f4:ef:7b:21:fb:6a:24:c2:04:43:40:cf:7d:cb:ea:
dd:6d:8f:23:81:ee:ba:57:65:20:6d:2a:76:4d:fb:
fd:5e:5b:2e:1b:de:a6:29:87:e1:a2:af:c6:a7:ce:
56:9c:1c:b9:5b:ad:67:79:66:f6:73:33:e7:1f:7e:
d2:91:10:20:47:97:49:82:58:f2:f4:da:dc:ed:cc:
c8:fe:b2:e9:7a:16:de:06:65:8a:7a:bc:04:25:e7:
f0:1e:a2:48:85:a0:4f:01:2d:ba:a6:35:6b:33:ea:
bb:f9:28:5b:34:e1:ea:3b:de:e8:85:d3:19:f1:18:
3f:93:e9:d1:79:f7:ff:34:2e:ea:f0:15:44:c4:c4:
09:98:b2:5f:02:d3:94:18:ba:7f:3e:44:1b:34:88:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:86:69:1E:A4:A7:1A:B2:17:1B:45:00:E1:7E:6C:CB:25:20:F4
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:74:91:c9:03:c1:4c:89:ff:ce:84:1e:3e:a8:19:5f:1d:01:
3a:13:fb:73:ea:26:10:9d:b1:0f:5c:57:ee:87:8b:b1:a1:57:
9d:29:00:0a:e3:54:eb:ac:42:1e:65:b8:2d:46:4c:16:bb:3e:
be:23:c6:c2:af:44:ec:b8:0a:83:e1:39:ca:5c:cc:e4:99:6b:
37:83:6b:b4:28:cc:79:59:54:97:99:d4:8d:7a:74:f5:5e:f4:
e1:67:3d:50:26:f1:93:2a:40:a3:9c:7c:7b:80:02:2e:f0:f3:
ee:3e:29:8d:15:64:30:e7:ef:d8:08:21:33:d2:dd:d3:eb:5a:
2d:d1:91:7f:10:2e:97:30:90:8e:87:45:eb:29:c2:8a:4c:ef:
ea:c8:6e:a0:30:9a:26:4e:84:c5:8a:68:ba:6e:c6:df:9e:e2:
9b:c8:64:25:6b:c4:b2:97:29:43:66:cc:ea:18:af:af:61:8b:
8f:71:12:48:df:21:b0:44:98:18:b8:b0:0e:e1:37:f9:6d:24:
9b:b9:75:d2:d3:16:c1:0b:6a:34:2d:a7:5f:9f:3b:0a:a2:dd:
32:13:b7:4f:66:07:a4:b4:14:33:c4:25:71:8b:c3:ab:59:82:
fd:a0:5d:d2:d8:04:2e:e5:ab:5f:85:95:28:9c:22:c6:3a:50:
05:5a:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:28 2026 by rpki-client