Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: UUZSIeCnhl1zPOClO8l3v2cYXjVyxLYBOw9wuVRj23Y=
Subject key identifier: 16:EB:ED:8B:65:07:EB:3C:81:EF:E2:69:37:82:4E:C3:74:1F:F6:7D
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019D38D326BED200F2984CC321D456914301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: qb_7krEk2T7S9jRpJ5MSFDtkffo.roa (hash: lIEMjy8AMkagBEJxT4ffs+QK3qsE1qpnuVxbq8dmbpY=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: vwouj+80AVzxcxaFZg18Wf0E4StUx00t6Y0anTP21Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:26:be:d2:00:f2:98:4c:c3:21:d4:56:91:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=16ebed8b6507eb3c81efe26937824ec3741ff67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:da:57:e1:b3:d9:61:44:21:ab:6d:6d:7f:
79:81:48:72:cc:30:1a:af:6c:1c:7f:d2:89:6b:b9:
12:2b:99:b0:ca:c6:8f:4e:a0:73:6c:66:02:5f:0e:
0e:39:1d:a6:08:82:da:65:81:3b:31:59:e7:27:20:
c9:65:34:ee:60:bf:8f:69:a2:ca:7c:e9:5e:63:d4:
28:a7:fa:6b:40:df:a5:95:41:5e:bd:81:84:c3:36:
3b:c1:42:a1:f3:33:ca:96:dd:a8:82:fc:25:3b:db:
57:13:50:1c:91:ec:0f:cc:24:66:6d:70:71:4e:ea:
70:e8:1d:45:1d:87:aa:b0:69:d9:cc:be:21:a4:f0:
7a:84:73:4e:09:af:cb:b3:59:ce:b2:e4:24:65:ed:
b3:d0:94:a3:82:f1:b4:a8:cb:85:07:53:98:11:c9:
e0:45:66:39:e4:8a:b9:8b:e0:ad:d3:f6:94:77:d9:
42:2a:58:1c:98:bd:e8:b3:4f:45:16:7f:58:d0:ea:
46:57:56:a4:fc:01:71:5e:8b:df:74:33:b9:64:ea:
92:d6:b5:e0:24:df:b3:ad:0f:4b:ad:4c:ec:33:dd:
92:6c:a7:c5:5d:be:40:fe:8a:e2:0f:c7:d7:f4:4e:
ca:c9:13:21:e8:f2:5d:06:85:67:bd:c7:fd:dc:7a:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:ED:8B:65:07:EB:3C:81:EF:E2:69:37:82:4E:C3:74:1F:F6:7D
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0f:96:3a:f0:2b:36:c4:00:8d:bb:f7:d6:36:d4:62:5c:d5:
b1:ac:96:3b:ae:ea:d3:34:89:83:75:86:e2:3d:9f:ad:a7:97:
47:eb:39:fb:b5:40:34:aa:fb:eb:c5:98:c1:7d:03:4a:3a:e0:
13:53:dc:2e:c4:28:83:44:90:af:5f:b0:61:11:84:d8:ea:38:
2f:a8:45:8e:41:3b:23:86:2f:3f:88:d6:96:ee:3e:df:f3:a6:
c0:88:aa:4a:ac:a9:20:6c:cf:a1:ae:01:92:ae:96:d3:a2:57:
49:ea:ad:7f:a9:c8:62:e7:6c:db:6b:27:8e:2f:6a:29:27:0e:
5d:59:b5:4e:ee:79:72:13:81:c3:88:55:75:60:18:d8:e9:ef:
97:5e:9d:8b:27:1b:9a:e9:d3:47:59:bc:2e:58:77:9a:80:4a:
9f:32:c0:28:c9:5c:dd:68:80:af:07:6e:8b:fd:50:89:9f:6d:
d2:fc:d9:53:af:d8:0b:29:a4:b6:76:eb:8e:40:36:e3:f2:37:
25:d6:95:28:d0:e1:f1:96:a8:62:ec:f7:91:5d:36:29:89:bd:
ec:ef:db:3c:da:b1:40:09:ab:6f:45:e9:03:1d:00:31:fa:19:
02:95:91:62:b1:4d:8d:0b:31:8e:6c:09:57:84:69:5b:23:c5:
f1:0d:3a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ya+0gDymEzDIdRWkUMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy
ZGI0NTUwHhcNMjYwMzI5MDkwMDU1WhcNMjYwMzMwMDkwMDU1WjAzMTEwLwYDVQQD
EygxNmViZWQ4YjY1MDdlYjNjODFlZmUyNjkzNzgyNGVjMzc0MWZmNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbnaV+Gz2WFEIattbX95gUhyzDAa
r2wcf9KJa7kSK5mwysaPTqBzbGYCXw4OOR2mCILaZYE7MVnnJyDJZTTuYL+PaaLK
fOleY9Qop/prQN+llUFevYGEwzY7wUKh8zPKlt2ogvwlO9tXE1AckewPzCRmbXBx
Tupw6B1FHYeqsGnZzL4hpPB6hHNOCa/Ls1nOsuQkZe2z0JSjgvG0qMuFB1OYEcng
RWY55Iq5i+Ct0/aUd9lCKlgcmL3os09FFn9Y0OpGV1ak/AFxXovfdDO5ZOqS1rXg
JN+zrQ9LrUzsM92SbKfFXb5A/oriD8fX9E7KyRMh6PJdBoVnvcf93Hr1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbr7YtlB+s8ge/iaTeCTsN0H/Z9MB8GA1UdIwQY
MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt
YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0
LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg+WOvAr
NsQAjbv31jbUYlzVsayWO67q0zSJg3WG4j2fraeXR+s5+7VANKr768WYwX0DSjrg
E1PcLsQog0SQr1+wYRGE2Oo4L6hFjkE7I4YvP4jWlu4+3/OmwIiqSqypIGzPoa4B
kq6W06JXSeqtf6nIYuds22snji9qKScOXVm1Tu55chOBw4hVdWAY2Onvl16diycb
munTR1m8Llh3moBKnzLAKMlc3WiArwdui/1QiZ9t0vzZU6/YCymktnbrjkA24/I3
JdaVKNDh8ZaoYuz3kV02KYm97O/bPNqxQAmrb0XpAx0AMfoZApWRYrFNjQsxjmwJ
V4RpWyPF8Q06Lw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:06 2026 by rpki-client