Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: eDbOoh11EYvAOR0Zb0ieUB8Xczy9FtZ4uisLRfIeWXE=
Subject key identifier: 25:DA:45:CB:28:6A:73:1E:4F:84:BA:68:35:03:D4:3D:46:5A:DC:89
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 019D389C1CE755F26CEB90C9A9F3B726BF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: 0548
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: 0q89mS6gseI0D55M872evmBEmUU.roa (hash: 22eo/4LzLP0tiO+wKFngnAq1euAw4BlN9YUGvUFUe5Y=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: kXbYWAyKoZtgjCq1ozbZeHCk4v06U3GdPBqOh8aB2ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1c:e7:55:f2:6c:eb:90:c9:a9:f3:b7:26:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=25da45cb286a731e4f84ba683503d43d465adc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:56:52:77:f5:d6:79:65:ea:a7:eb:9b:b0:
f9:6d:f2:eb:0f:63:14:4a:0e:9b:05:ad:63:ad:20:
ef:cd:cd:2d:35:a9:29:f5:29:ee:b9:f7:3e:c6:68:
41:58:1b:ea:9a:7e:fe:83:c7:5a:7d:fc:ec:b2:f4:
67:d7:6e:0d:16:05:28:be:5d:27:84:c4:32:21:5e:
34:14:3e:26:2a:71:5e:d0:f0:8c:2b:49:fe:af:2b:
0e:75:da:bd:27:7f:3a:58:cc:fc:09:9b:25:87:f9:
26:8e:02:94:1b:66:ee:3d:fc:de:71:32:0d:f5:af:
8f:ac:f9:0c:bb:a9:3a:f6:e6:11:cf:11:5c:e7:b3:
ef:44:d1:45:8f:df:9f:b1:8f:85:cc:81:b8:71:b2:
05:48:b6:dd:1f:ba:80:04:6c:7c:95:9b:b8:2a:43:
84:08:5e:8a:7a:9c:ee:0f:18:98:02:bf:fe:c7:08:
09:d9:a6:d1:b3:a3:7d:40:dc:7f:b3:29:76:2f:d3:
e3:be:31:18:98:12:73:0d:cf:3a:16:c3:26:5d:9e:
17:e2:71:d5:71:a4:62:8b:11:73:d1:20:04:21:b2:
7b:f6:c7:83:e1:99:03:99:6a:2a:92:65:3a:fe:b2:
b1:c3:27:5f:0c:4f:dc:49:ff:0e:6c:1a:f6:c5:ea:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DA:45:CB:28:6A:73:1E:4F:84:BA:68:35:03:D4:3D:46:5A:DC:89
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9b:0a:04:04:d8:a8:45:70:88:27:f4:35:2f:70:eb:7a:22:
8c:bf:4f:2d:b3:6d:d1:5c:88:d8:ab:be:05:0f:3c:3d:e1:ca:
b0:3e:a7:82:06:05:1a:11:93:57:28:b8:01:55:df:fa:57:6f:
bc:86:21:f4:c9:1b:3d:dd:a7:fd:23:5a:42:5b:c1:a7:84:8f:
83:b6:42:bf:56:cc:4f:06:02:5b:45:df:d8:0f:54:7d:66:b1:
34:74:2d:27:9c:f1:63:8e:aa:56:31:70:25:64:c6:6a:40:c2:
f2:1b:da:1b:9c:99:13:64:87:9a:de:9b:de:30:12:d4:d4:c8:
25:22:ec:ec:70:c1:a2:88:ca:54:dc:9c:52:80:63:dc:b5:88:
94:50:3a:5c:54:d6:7c:c6:fb:d7:79:da:ff:bb:91:24:1d:50:
1d:0b:f9:5e:8c:11:21:0a:a7:f4:a4:26:62:07:86:95:8f:af:
04:98:c8:64:d2:72:cd:f1:f4:e5:ef:15:58:76:b2:27:0d:b2:
4b:b5:f4:d3:0e:26:01:d6:54:41:65:de:06:02:26:01:e3:c1:
bd:98:84:cc:8f:e5:8a:e8:db:db:c9:06:84:c1:5f:84:70:75:
be:ef:d0:07:11:0a:58:96:f0:7f:ae:db:18:99:d3:4e:82:11:
ba:a6:c3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBznVfJs65DJqfO3Jr+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YmIyMmY4MjJkYjc0NTFmZTFlMjE5NmNhYzYzYzU2NDdm
YjFhZDUwHhcNMjYwMzI5MDgwMDQ4WhcNMjYwMzMwMDgwMDQ4WjAzMTEwLwYDVQQD
EygyNWRhNDVjYjI4NmE3MzFlNGY4NGJhNjgzNTAzZDQzZDQ2NWFkYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OFWUnf11nll6qfrm7D5bfLrD2MU
Sg6bBa1jrSDvzc0tNakp9Snuufc+xmhBWBvqmn7+g8daffzssvRn124NFgUovl0n
hMQyIV40FD4mKnFe0PCMK0n+rysOddq9J386WMz8CZslh/kmjgKUG2buPfzecTIN
9a+PrPkMu6k69uYRzxFc57PvRNFFj9+fsY+FzIG4cbIFSLbdH7qABGx8lZu4KkOE
CF6KepzuDxiYAr/+xwgJ2abRs6N9QNx/syl2L9PjvjEYmBJzDc86FsMmXZ4X4nHV
caRiixFz0SAEIbJ79seD4ZkDmWoqkmU6/rKxwydfDE/cSf8ObBr2xeqEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXaRcsoanMeT4S6aDUD1D1GWtyJMB8GA1UdIwQY
MBaAFGS7Ivgi23RR/h4hlsrGPFZH+xrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYt
NDVkMDVhNGIxZDk5LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYtNDVkMDVhNGIxZDk5
LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpsKBATY
qEVwiCf0NS9w63oijL9PLbNt0VyI2Ku+BQ88PeHKsD6nggYFGhGTVyi4AVXf+ldv
vIYh9MkbPd2n/SNaQlvBp4SPg7ZCv1bMTwYCW0Xf2A9UfWaxNHQtJ5zxY46qVjFw
JWTGakDC8hvaG5yZE2SHmt6b3jAS1NTIJSLs7HDBoojKVNycUoBj3LWIlFA6XFTW
fMb713na/7uRJB1QHQv5XowRIQqn9KQmYgeGlY+vBJjIZNJyzfH05e8VWHayJw2y
S7X00w4mAdZUQWXeBgImAePBvZiEzI/liujb28kGhMFfhHB1vu/QBxEKWJbwf67b
GJnTToIRuqbDVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:05 2026 by rpki-client