Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: +BVEOb2VU7BlXFBuAGmHoepEbADTKvwg7F1M7jxhk8Q=
Subject key identifier: 31:57:6E:2A:C1:17:F5:58:A4:72:98:BB:BA:A0:8E:60:25:6D:43:9A
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 019D389BD75F28260F49D1D0A75C81EDA92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: JTVjGF8a54iRByhdXG3iend60UpGRn/HNK1U9omL6Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d7:5f:28:26:0f:49:d1:d0:a7:5c:81:ed:a9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=31576e2ac117f558a47298bbbaa08e60256d439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:40:2e:3c:0a:24:49:71:45:82:cb:1e:d7:
61:bb:fb:5c:1d:79:cb:33:fc:1e:e0:67:8b:33:6a:
b5:71:5a:26:23:1f:37:f6:d9:66:4f:8e:f2:66:c0:
e1:48:a5:13:7a:6f:7e:87:60:6f:3c:31:17:fd:ff:
0c:10:ba:91:e2:60:f0:12:59:5b:a5:47:1e:3d:83:
bf:71:5d:c9:2d:ef:74:67:2e:f0:fa:6b:da:a4:eb:
55:f4:5e:6a:40:ae:ca:98:91:5e:d6:d8:3e:a9:50:
a8:2e:06:5b:2b:31:3a:50:5a:5f:a6:ab:2f:b7:77:
4b:90:bc:ac:21:ff:ee:d0:8b:e4:74:e7:8b:94:82:
1b:74:70:94:83:fa:ff:c4:b4:6a:72:71:13:bb:3c:
b2:cd:76:3b:6a:3f:68:70:4b:00:12:91:bb:2f:94:
76:75:6c:a8:aa:71:e0:2a:eb:08:8a:c9:9c:f3:94:
02:ef:f2:ba:9b:3c:5c:3f:55:2f:09:34:f9:32:3c:
2b:e0:ff:b9:db:2e:00:95:ab:78:fd:42:c0:85:49:
42:75:de:19:dd:f5:7d:d8:57:a4:9f:11:85:95:98:
24:1d:ec:17:15:ae:fb:0f:d8:b2:ed:a1:87:66:77:
27:bb:34:10:e1:2b:df:3b:71:bf:53:e5:52:9c:7a:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:6E:2A:C1:17:F5:58:A4:72:98:BB:BA:A0:8E:60:25:6D:43:9A
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:50:79:99:fb:c3:46:a0:26:77:2c:e9:50:c3:a4:5f:b0:21:
f4:d9:bd:62:01:97:27:cb:04:eb:af:e3:dd:af:bb:2c:ce:63:
a4:5e:af:15:4e:4c:a4:a6:e0:4b:bd:8c:90:79:df:f4:5c:85:
ec:08:60:5c:9c:b3:15:ae:6c:f3:f6:e0:eb:b5:1c:f1:7d:f9:
8f:d5:cf:fa:32:0a:79:d0:fc:4b:0d:46:ae:c2:b5:cb:d3:ba:
80:1f:d4:21:7a:b5:f5:f1:60:34:72:56:4f:15:d6:04:09:5b:
14:d9:ac:c1:35:06:4c:08:b8:69:42:53:5b:af:13:1f:6e:13:
b3:ac:05:f0:b4:95:bc:08:41:f9:dc:0f:09:bb:c1:dc:8a:57:
8f:29:1a:fb:8b:6e:f1:39:5e:1f:1b:dd:d4:da:b2:d3:81:c9:
bb:77:e6:7c:d7:58:c2:b0:1c:66:df:56:ce:72:c9:ce:ab:d8:
45:fe:ed:4c:1b:d5:66:96:e9:29:d8:6d:e3:85:d9:5d:7c:bd:
3d:b3:85:ca:a3:7a:28:e4:e8:ae:95:af:d1:1a:1f:fa:8d:26:
0f:4c:a7:27:2d:c3:85:5b:c6:79:f1:1d:a1:a4:76:d2:b3:ec:
04:8c:b6:cb:31:c3:22:bf:c6:30:c7:b1:da:17:eb:2c:e0:0f:
9a:63:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:49 2026 by rpki-client