Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: XkFkQvn57gaSIzNG7i3epuN1ZbIfQDIyuqfjxvbQLnw=
Subject key identifier: 12:7D:36:46:CE:0E:7A:47:26:8F:F1:5E:E4:85:26:D9:96:0F:91:16
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 019D26CD4EA1DBD28CD9360B5BF0F2DD6140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0D57
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: GyI44ywFgDL-tIZOk-8lHYup6C0.roa (hash: G6Has1owART2ONYwMGdXhGXjBMiqm1IjR539vTMUHLc=)
2: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: ENeaf5Zd0UvShmPjCb1O841J15eMdmZ6bEKPHlhNn10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4e:a1:db:d2:8c:d9:36:0b:5b:f0:f2:dd:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=127d3646ce0e7a47268ff15ee48526d9960f9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:85:35:7e:6f:ae:08:42:ab:67:64:64:c4:
77:0c:09:3a:ee:57:02:d3:09:4f:94:2e:25:a4:8d:
ed:63:35:b2:ad:f4:3d:a1:93:dd:26:37:90:0e:b2:
18:0e:1c:d7:d3:8c:65:a9:dc:4f:e1:91:df:bd:8c:
56:09:5a:11:9d:ea:24:99:99:71:58:49:ec:da:9f:
a3:f4:da:b4:ea:12:2a:5e:fe:69:30:1d:99:6e:f8:
f1:7e:8c:8c:b8:f7:fa:a2:97:d9:dd:f7:51:d1:ce:
0f:2d:10:20:1a:87:21:6a:7b:09:cd:09:9b:a3:89:
c3:ef:d5:b6:01:d5:38:0b:f6:70:e6:25:8e:84:a3:
48:c2:e2:cf:7e:c6:ee:dc:63:58:0f:8e:36:05:4a:
da:7b:1c:8a:10:70:9e:f0:c5:a3:06:fc:df:c2:f5:
6c:26:08:1f:bc:be:e0:91:3a:7d:c6:38:8f:ab:b4:
e5:1d:48:ac:bb:de:fa:b2:48:f0:32:04:68:bd:23:
1c:a8:8a:f2:c5:47:29:db:f4:a5:05:d2:dc:36:8b:
24:8e:ee:0a:8f:41:f8:b7:69:1a:33:d4:b4:73:a1:
99:b5:9b:68:62:39:c1:21:c4:aa:a3:85:5b:08:58:
d4:db:2a:b6:ee:99:a4:ee:97:b5:57:23:39:45:4e:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:36:46:CE:0E:7A:47:26:8F:F1:5E:E4:85:26:D9:96:0F:91:16
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7b:74:74:89:4b:84:c9:42:6d:51:83:2e:b2:f3:bc:4a:f7:
c5:c1:37:ee:fe:06:b8:c4:98:de:67:98:d5:fb:95:2e:13:2d:
8e:5b:a8:1a:4d:54:88:58:6c:d3:cc:67:69:b9:00:94:77:f6:
b9:f7:6b:de:df:ab:15:a4:04:f6:4a:20:14:a7:b9:25:d5:cf:
06:ec:bf:10:d4:9b:c7:10:28:ac:b6:52:f9:67:75:a3:5f:49:
d2:db:4e:1b:7c:84:77:ce:6b:55:8e:e5:bf:37:4e:bd:a6:ba:
4c:0d:f1:48:e1:b4:1c:84:84:b1:d1:31:ef:97:a0:c9:c9:6f:
b6:ae:a6:cb:b2:7c:90:d4:fe:94:3c:68:ce:ee:9c:0f:75:c5:
4b:4d:42:f6:3e:92:59:97:12:e1:1e:7e:46:92:4f:05:84:af:
9a:ae:12:c2:51:10:9b:65:67:77:bc:9a:f2:19:be:b2:ce:31:
c5:86:b3:16:e3:f5:89:d4:dc:c5:ee:8e:ce:c3:c3:7d:b5:e8:
1a:55:2c:60:9f:66:aa:42:b1:80:92:43:87:f4:2d:89:ed:a2:
32:ee:21:f1:15:d5:7a:c5:55:ce:ad:09:7f:78:3f:e7:83:0d:
8b:51:93:cb:3e:1a:72:0f:c1:21:6c:32:f2:02:b8:db:c5:34:
8f:94:8c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzU6h29KM2TYLW/Dy3WFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm
M2Y3ZGMwHhcNMjYwMzI1MjEwMTIyWhcNMjYwMzI2MjEwMTIyWjAzMTEwLwYDVQQD
EygxMjdkMzY0NmNlMGU3YTQ3MjY4ZmYxNWVlNDg1MjZkOTk2MGY5MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmaFNX5vrghCq2dkZMR3DAk67lcC
0wlPlC4lpI3tYzWyrfQ9oZPdJjeQDrIYDhzX04xlqdxP4ZHfvYxWCVoRneokmZlx
WEns2p+j9Nq06hIqXv5pMB2ZbvjxfoyMuPf6opfZ3fdR0c4PLRAgGochansJzQmb
o4nD79W2AdU4C/Zw5iWOhKNIwuLPfsbu3GNYD442BUraexyKEHCe8MWjBvzfwvVs
JggfvL7gkTp9xjiPq7TlHUisu976skjwMgRovSMcqIryxUcp2/SlBdLcNoskju4K
j0H4t2kaM9S0c6GZtZtoYjnBIcSqo4VbCFjU2yq27pmk7pe1VyM5RU5q6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ9NkbODnpHJo/xXuSFJtmWD5EWMB8GA1UdIwQY
MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt
NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3
LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXt0dIlL
hMlCbVGDLrLzvEr3xcE37v4GuMSY3meY1fuVLhMtjluoGk1UiFhs08xnabkAlHf2
ufdr3t+rFaQE9kogFKe5JdXPBuy/ENSbxxAorLZS+Wd1o19J0ttOG3yEd85rVY7l
vzdOvaa6TA3xSOG0HISEsdEx75egyclvtq6my7J8kNT+lDxozu6cD3XFS01C9j6S
WZcS4R5+RpJPBYSvmq4SwlEQm2Vnd7ya8hm+ss4xxYazFuP1idTcxe6OzsPDfbXo
GlUsYJ9mqkKxgJJDh/Qtie2iMu4h8RXVesVVzq0Jf3g/54MNi1GTyz4acg/BIWwy
8gK428U0j5SM6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:38 2026 by rpki-client