Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: V/GWpTZUtYjjr21v9Sp9O1LaFQG6J4k09xBCuzwYb5c=
Subject key identifier: DD:B4:5A:A4:DE:8D:8E:D4:1A:76:78:BE:B7:DC:69:A0:4A:80:17:F5
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019FA1F20417EAEA3FF70E39816793CC9CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0DE3
Signing time: Mon 27 Jul 2026 05:00:20 +0000
Manifest this update: Mon 27 Jul 2026 05:00:20 +0000
Manifest next update: Tue 28 Jul 2026 05:00:20 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: WY7lM6FD6B4n9fhgDK7qrpdrXODMsqckgHptieUfRKs=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:04:17:ea:ea:3f:f7:0e:39:81:67:93:cc:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jul 27 05:00:20 2026 GMT
Not After : Jul 28 05:00:20 2026 GMT
Subject: CN=ddb45aa4de8d8ed41a7678beb7dc69a04a8017f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:1c:36:c2:52:77:a8:4b:d3:a9:61:1e:4f:
6a:66:64:2f:03:37:c3:bf:de:75:31:e1:b7:f8:63:
f4:e5:0a:94:ed:8d:93:a2:4c:2e:04:71:fb:e8:56:
2b:e6:f2:27:eb:27:81:5e:16:46:c0:c9:9c:e1:31:
82:0f:62:ae:f8:4a:9f:7f:d5:4f:ab:cb:5c:cf:3b:
64:58:38:0c:6a:d8:2b:a7:31:c1:26:b8:58:f0:0e:
d3:38:eb:f0:27:67:01:2d:96:1d:fe:c6:71:13:71:
cf:20:3f:50:59:84:c7:9b:6e:ed:19:a8:b2:db:d7:
b1:43:b8:10:f4:b8:1f:4d:db:8f:a2:51:e9:71:a1:
82:51:eb:85:2a:a8:ec:2f:a0:8b:44:bd:3b:48:1d:
4e:cc:1c:9e:a8:5e:ba:88:46:52:f3:be:86:ff:a5:
e9:b4:55:32:54:1d:90:90:e2:e8:40:cd:49:85:f8:
5c:02:a2:b9:42:de:3f:04:56:d0:43:10:3d:5f:b8:
fe:24:85:59:8c:0a:d8:12:49:0a:a6:48:49:6a:04:
e5:7e:b4:37:d8:99:19:28:6a:3b:2b:b2:c8:e3:5e:
1b:48:c3:16:53:79:99:a9:77:9d:f8:3e:a0:16:f2:
77:eb:0f:f2:c9:ec:bf:e3:87:5d:35:33:3a:1f:6c:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:5A:A4:DE:8D:8E:D4:1A:76:78:BE:B7:DC:69:A0:4A:80:17:F5
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:42:b4:8c:e3:f0:73:3a:01:d3:26:f2:cf:7f:23:b4:33:9b:
02:5e:15:9e:e6:8c:1b:dd:3e:65:33:c4:bf:01:98:02:a0:73:
9f:05:30:78:11:c5:79:30:8b:91:24:fc:72:a4:5d:fd:37:22:
e6:55:da:14:0f:a4:c0:ac:2d:b8:78:f8:53:35:16:79:0d:30:
02:d6:33:16:a7:d5:4d:63:53:62:16:5f:81:c1:1b:01:68:4b:
58:66:7d:79:54:47:f9:ac:bf:75:6a:da:9b:43:46:d8:93:20:
66:3a:97:15:6b:1a:96:93:ca:09:cf:af:c3:f2:89:af:4e:82:
f8:f7:6e:74:0f:a4:75:90:17:a4:6a:28:7a:40:b6:2c:a4:18:
e5:99:76:79:bb:1c:9b:2d:22:36:0b:a3:4a:c5:57:73:47:1c:
16:b3:35:a6:22:26:05:bd:50:02:55:89:0a:53:1d:28:01:50:
ae:f4:20:25:5e:64:25:6b:33:d8:ab:ea:6b:b8:bc:16:45:77:
c0:15:3b:d4:08:1c:70:22:13:95:69:82:0a:70:76:c1:72:cd:
f3:3b:4d:c8:c2:16:16:a2:b5:ff:83:df:6e:4e:7a:bb:15:55:
62:8c:f2:44:0e:13:a9:01:e1:d6:e1:12:c2:c2:16:d4:ff:5f:
4a:46:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:02:01 2026 by rpki-client