Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: YNzBGvzGnAZXjLrVQllO0choFPl6FAVynVkNV25eDVo=
Subject key identifier: F9:53:8C:4C:51:30:41:08:36:84:11:4F:65:1E:72:25:EE:AE:E3:69
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 019D28BB9843CB380A8BFC760667A2173A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 1546
Signing time: Thu 26 Mar 2026 06:01:15 +0000
Manifest this update: Thu 26 Mar 2026 06:01:15 +0000
Manifest next update: Fri 27 Mar 2026 06:01:15 +0000
Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=)
2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: ZzxzsJZWEWdae1uBcw5SIZdSiI46nsKdO7cMcBnCXik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:98:43:cb:38:0a:8b:fc:76:06:67:a2:17:3a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Mar 26 06:01:15 2026 GMT
Not After : Mar 27 06:01:15 2026 GMT
Subject: CN=f9538c4c513041083684114f651e7225eeaee369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:2f:51:90:71:c3:80:f7:58:f2:bf:cd:33:
79:d2:7a:a5:fd:96:76:17:16:42:66:7f:24:f6:70:
8b:1e:b3:ea:82:6f:23:0f:12:32:0d:90:b4:4f:4c:
cc:93:80:74:4e:8e:35:16:bc:77:90:0c:2e:2f:36:
cc:8a:91:78:67:e5:67:96:97:cf:3e:60:3e:f2:b7:
6a:23:c4:29:00:3b:1f:04:54:2b:e0:26:3e:44:48:
ac:f9:4e:c7:eb:21:ef:ac:55:4f:22:39:91:8a:65:
f3:bc:30:31:88:24:dc:1c:54:d5:4b:fa:15:25:1c:
56:95:41:71:49:82:fb:25:54:9c:5e:49:89:c6:79:
74:e3:48:10:d7:f6:f9:94:d9:8a:7f:0d:7d:53:ba:
00:f5:95:c9:58:4c:b7:18:94:7c:ed:ee:bf:8e:a2:
97:d2:3f:38:ae:cc:08:65:26:2b:e2:93:02:c6:3b:
e8:b1:bd:01:ef:57:84:b0:2e:78:f2:58:f4:d4:62:
32:84:b9:ba:49:f9:fa:36:e5:18:db:fd:b6:76:97:
40:5e:88:2a:d0:11:c0:5d:58:df:3f:c4:f7:a1:46:
2c:70:c7:81:7b:ab:3a:dc:d8:bf:b2:d2:df:87:f0:
89:3d:57:bf:1f:5f:43:9e:80:8e:d9:9b:21:58:e1:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:8C:4C:51:30:41:08:36:84:11:4F:65:1E:72:25:EE:AE:E3:69
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8b:24:80:a8:90:4a:65:a2:84:bb:5c:8d:ec:03:a8:70:eb:
6a:4a:c3:b7:af:72:f5:8d:5b:0d:8e:65:24:32:e8:d5:41:eb:
af:fb:01:26:92:d8:91:9d:cd:99:47:8b:45:b0:e1:fe:81:a9:
cf:05:7f:be:4c:a0:53:17:fe:46:be:3c:bd:3d:bb:5e:74:21:
62:bd:49:e2:02:dd:95:16:4e:a5:78:98:e2:34:17:01:85:fc:
56:fc:c6:33:76:99:34:7a:94:1a:12:85:36:b4:7f:bc:9c:e5:
be:9b:4d:35:11:4e:d8:97:6c:97:41:7e:a9:e0:87:4c:0a:4d:
52:cb:43:5b:dd:b1:1c:37:e5:d3:79:f2:48:34:7a:c9:e0:b2:
93:28:38:cc:dc:d6:79:76:6e:b3:3e:a8:b3:84:03:2c:e8:e4:
91:58:0b:aa:56:d2:13:be:d4:ce:f2:71:96:b1:21:2e:f3:ed:
a5:67:4b:9b:dc:81:a8:91:96:b3:61:47:00:be:ae:60:3b:4b:
48:a8:d9:36:01:c6:21:0b:78:ee:ac:99:fb:fa:e4:58:31:ad:
dd:5c:b6:04:d8:6e:3b:0b:1c:69:a6:0b:20:56:69:36:54:ea:
c6:4f:e7:e6:e3:bf:f1:62:4e:14:ba:ae:b2:67:0d:62:f5:ba:
5e:fa:7e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5hDyzgKi/x2BmeiFzpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjYwMzI2MDYwMTE1WhcNMjYwMzI3MDYwMTE1WjAzMTEwLwYDVQQD
EyhmOTUzOGM0YzUxMzA0MTA4MzY4NDExNGY2NTFlNzIyNWVlYWVlMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gvUZBxw4D3WPK/zTN50nql/ZZ2
FxZCZn8k9nCLHrPqgm8jDxIyDZC0T0zMk4B0To41Frx3kAwuLzbMipF4Z+VnlpfP
PmA+8rdqI8QpADsfBFQr4CY+REis+U7H6yHvrFVPIjmRimXzvDAxiCTcHFTVS/oV
JRxWlUFxSYL7JVScXkmJxnl040gQ1/b5lNmKfw19U7oA9ZXJWEy3GJR87e6/jqKX
0j84rswIZSYr4pMCxjvosb0B71eEsC548lj01GIyhLm6Sfn6NuUY2/22dpdAXogq
0BHAXVjfP8T3oUYscMeBe6s63Ni/stLfh/CJPVe/H19DnoCO2ZshWOHqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlTjExRMEEINoQRT2UeciXuruNpMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIskgKiQ
SmWihLtcjewDqHDrakrDt69y9Y1bDY5lJDLo1UHrr/sBJpLYkZ3NmUeLRbDh/oGp
zwV/vkygUxf+Rr48vT27XnQhYr1J4gLdlRZOpXiY4jQXAYX8VvzGM3aZNHqUGhKF
NrR/vJzlvptNNRFO2Jdsl0F+qeCHTApNUstDW92xHDfl03nySDR6yeCykyg4zNzW
eXZusz6os4QDLOjkkVgLqlbSE77UzvJxlrEhLvPtpWdLm9yBqJGWs2FHAL6uYDtL
SKjZNgHGIQt47qyZ+/rkWDGt3Vy2BNhuOwscaaYLIFZpNlTqxk/n5uO/8WJOFLqu
smcNYvW6Xvp+Zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:40 2026 by rpki-client