Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: +MLf3ZKg/hm2CzgwqTQcNUdnNxzCd8m9a+UV8xvTgUI=
Subject key identifier: 8B:58:15:51:AB:4C:37:C1:AD:ED:69:0F:0D:94:5E:B6:FD:17:5C:9D
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01A06D5DA759DB4DF1D4A695382F20FA2843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0D2D
Signing time: Fri 04 Sep 2026 17:00:49 +0000
Manifest this update: Fri 04 Sep 2026 17:00:49 +0000
Manifest next update: Sat 05 Sep 2026 17:00:49 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: SaNbtPinHf4mCvrmeQGJBInLf3U5At1C6RhRR5Fn5jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:a7:59:db:4d:f1:d4:a6:95:38:2f:20:fa:28:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Sep 4 17:00:49 2026 GMT
Not After : Sep 5 17:00:49 2026 GMT
Subject: CN=8b581551ab4c37c1aded690f0d945eb6fd175c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:14:2d:93:5a:5f:93:89:0e:ae:32:4e:20:
5b:ee:a3:38:f2:ce:34:2d:35:fe:6b:da:b9:14:da:
73:12:20:c6:bd:4a:be:e7:26:84:aa:87:b8:82:cc:
66:c9:a8:0b:f2:23:ba:41:94:28:a5:03:74:e9:cc:
cd:85:fb:70:c5:58:cd:3e:6e:33:68:0d:b1:cf:1a:
cc:92:78:c3:7c:2e:d5:07:a7:80:bf:7c:0e:c2:b0:
b6:42:fa:a2:fa:e4:d6:0f:33:ab:05:1d:0e:86:17:
ce:de:b5:e1:8d:35:98:83:7a:1f:30:e6:44:83:ce:
85:29:20:af:ff:d9:b1:e7:99:98:76:26:72:6e:89:
f3:e6:dc:10:35:5d:9a:04:18:40:60:fa:35:f3:bc:
d5:3d:5a:1e:eb:a6:78:75:f9:56:fb:6d:26:f8:7f:
d1:7c:90:1e:7f:54:3b:79:5d:18:12:1c:d2:41:80:
f2:93:52:d1:d8:6e:46:61:e8:57:87:27:e7:d8:5b:
e7:bd:e0:fc:85:40:04:c5:4e:0a:ff:65:c5:2d:e5:
26:9c:d5:2c:fe:7d:25:36:81:c1:c5:76:e4:1d:78:
27:8c:11:f4:63:b1:fc:85:f4:66:96:05:cd:e4:8f:
be:ec:e5:6d:91:42:24:48:83:ab:1e:2a:33:b5:a9:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:15:51:AB:4C:37:C1:AD:ED:69:0F:0D:94:5E:B6:FD:17:5C:9D
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:29:fc:cf:a0:24:32:2f:c7:94:eb:94:bf:f8:45:4c:0d:ab:
a3:2a:d6:61:9d:68:a6:64:7f:72:72:eb:7e:42:35:25:dc:06:
ca:d9:a3:ec:1b:d7:5f:c0:f7:90:a9:6e:7e:9c:7c:a1:8b:f2:
fb:8f:78:45:81:4f:c3:b6:ed:69:9c:ac:02:c6:0a:9c:be:55:
d4:2b:0c:b4:52:6e:61:1d:2a:45:ed:50:dd:51:71:86:53:1f:
72:77:28:18:40:f8:a1:de:11:49:c0:ed:cc:ba:e9:c1:67:06:
fa:8a:aa:6e:38:ef:d6:11:be:8d:8c:48:c1:d1:e4:77:d1:0f:
90:eb:f1:ad:9c:f7:0b:62:20:dc:68:36:95:d7:80:98:3b:51:
4c:ef:93:b4:19:cd:55:06:8f:bd:0b:68:1e:d1:5d:59:1b:7a:
33:b5:d9:2b:6f:2f:cc:bd:39:a8:e5:83:0d:b8:de:d9:11:da:
19:0e:d7:9a:62:f9:6d:35:86:78:d0:ed:90:89:16:ca:f0:52:
bb:fb:0d:f8:88:4c:c1:9e:4f:cc:62:20:2b:17:0b:ec:b6:0f:
3a:12:f2:f7:97:00:51:1e:ac:b2:01:14:f2:36:b9:49:a2:a4:
2e:c9:fb:41:5e:ac:00:25:66:5c:88:4c:2c:81:e0:2a:2e:a2:
23:53:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:03 2026 by rpki-client