Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: 5nPlut22ryc4NqsWuCaGyPbtZZ15G4zjPTzRjfC0K4E=
Subject key identifier: 12:F7:56:E0:05:BC:4A:64:58:BE:D2:17:B5:6D:41:B2:09:8E:77:27
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 019D3789C1382E70032196445E7636E92D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 11F6
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: 1gUVsb5eptHPfkWeIDJOnBtjCdM.roa (hash: 9UbrzakbahLSL538GmtoWSL/CzBIwVc0sR6kEFLy4PE=)
2: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: xQMm6E1vOvx/8Fsrq0W0/Jt7TRDVTH0gMrpUIBqP4J4=)
3: uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa (hash: zVkALHO/eizkLv+esnlztVcjRzvGtYoCejf9vSgdAPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:c1:38:2e:70:03:21:96:44:5e:76:36:e9:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=12f756e005bc4a6458bed217b56d41b2098e7727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:0f:6e:d5:bc:0e:94:33:b1:79:8e:46:7a:
1c:43:65:08:7d:b1:30:ea:5a:64:32:b0:84:3c:a9:
a3:cf:be:56:3b:30:26:11:fb:77:48:0b:41:2d:b1:
a8:e9:d0:1b:50:b1:46:5f:11:61:73:2b:95:8c:78:
bc:39:8a:39:c5:34:c3:50:53:ce:aa:50:fb:67:0f:
8f:79:18:02:dc:c5:38:cf:32:00:58:77:10:12:32:
18:36:ce:12:90:69:44:b0:be:59:a8:2c:9c:c2:89:
08:6c:8e:d7:51:65:90:76:6a:cf:68:70:86:52:2b:
e5:ee:b2:c3:3c:7d:b0:64:8f:34:62:c8:42:ca:69:
58:b1:13:d7:d9:69:c4:f4:f8:fe:49:7f:94:91:b4:
0b:85:c4:45:67:3c:25:42:60:3f:b3:d5:f9:3f:27:
b7:ed:ff:0e:5d:61:7f:27:4f:fa:fb:0e:78:f6:c7:
04:e4:f2:4e:7b:57:cb:93:b3:8d:67:8a:a9:14:45:
b8:6c:b7:da:37:0f:fa:36:bd:3c:22:49:1e:38:d8:
94:28:68:eb:4b:79:91:5a:85:45:19:5c:8c:f8:62:
37:94:64:db:58:6c:cd:60:45:98:e2:bb:78:f7:e2:
64:ce:52:1e:f5:9d:39:cc:38:45:54:dc:4f:bd:f5:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:56:E0:05:BC:4A:64:58:BE:D2:17:B5:6D:41:B2:09:8E:77:27
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:57:6a:e0:bb:5f:bc:76:e9:e0:15:f8:29:62:5d:57:fa:c3:
05:b1:32:ba:74:dc:1c:8e:2d:0c:87:cb:ab:e1:a0:fc:f3:8b:
65:98:21:bf:2d:fe:53:a4:db:c6:9b:38:4a:fe:6f:79:66:61:
f6:cb:9b:a0:c3:f4:f4:92:1f:97:b8:68:36:a9:fc:dc:39:f1:
75:81:5a:05:9d:63:c5:47:71:1f:fc:e4:20:61:1a:39:a4:06:
61:b7:18:07:a5:a9:20:b0:67:25:f2:1d:57:88:b5:e7:f6:80:
37:6b:2e:4a:cc:ba:9a:1a:25:40:4d:c3:4d:95:d5:71:71:79:
25:a3:98:e2:ef:74:76:f6:d9:f2:8a:0f:9c:5d:a0:a9:0b:ac:
63:76:59:c9:51:36:7b:69:b5:dc:7d:e5:6f:32:24:6d:5c:fa:
ac:bc:5d:9d:10:e9:3a:d0:0d:94:63:51:5e:97:7c:16:a8:e0:
33:54:5f:36:75:24:1a:07:64:90:33:d1:2b:97:0e:e7:4f:47:
11:ed:22:56:aa:8b:f1:2e:9e:6d:eb:7c:67:d7:c5:44:92:6f:
fd:9b:a8:e6:1a:35:72:b7:a7:fd:81:ff:31:a3:7f:4d:02:00:
3e:51:c4:11:32:cf:0e:17:9c:3c:bf:df:d3:ac:07:66:27:00:
82:3d:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:11 2026 by rpki-client