Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: rpwmDTlAl7M2DUPdNXJoX8Idecch4AjmUEff0ogxfU0=
Subject key identifier: 3C:3A:FA:FD:75:80:35:01:AF:5F:69:47:F4:C5:38:69:BB:9C:12:7A
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019CC8997AD32D2F83091AEABA2F7D77554F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0B4A
Signing time: Sat 07 Mar 2026 14:00:27 +0000
Manifest this update: Sat 07 Mar 2026 14:00:27 +0000
Manifest next update: Sun 08 Mar 2026 14:00:27 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: UYOGrXlHfNymfFSFStEuxe4NbqB4nNfKExh2qW7tHGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:99:7a:d3:2d:2f:83:09:1a:ea:ba:2f:7d:77:55:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Mar 7 14:00:27 2026 GMT
Not After : Mar 8 14:00:27 2026 GMT
Subject: CN=3c3afafd75803501af5f6947f4c53869bb9c127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:64:b2:0b:f0:a8:4f:61:c6:06:0f:6b:a0:
4f:5a:f3:78:5c:ba:51:c8:c3:38:df:19:d8:1c:a8:
1e:15:db:56:1c:71:90:34:dc:2f:ff:bc:d4:a4:c0:
04:2c:8a:d9:31:e9:61:7d:08:35:82:6a:88:b2:6d:
a7:ad:25:f3:ee:a3:a0:5f:67:8b:16:5c:83:57:94:
82:dc:7a:e0:68:24:d0:cb:e4:75:9d:3b:a5:94:39:
44:fb:56:c8:dd:56:e0:eb:0d:4f:32:60:a7:e5:bf:
c6:d3:32:ab:81:58:e4:e7:87:de:98:d4:10:8f:95:
86:b3:35:48:1c:8b:eb:71:f2:94:fe:f4:21:8e:61:
47:30:bb:e3:63:b2:8a:c2:17:7e:27:47:68:ab:ea:
e6:99:38:8a:91:db:13:36:7b:11:12:08:5d:73:82:
0e:d4:a8:5f:c3:dc:19:af:a5:61:16:be:73:03:98:
03:a0:6b:bd:cd:e4:0e:9d:5b:ab:15:19:9e:70:85:
be:95:53:29:4f:44:10:7d:20:e1:fc:39:4e:0c:2d:
c9:9a:63:a6:7a:fe:9a:d9:fd:d5:7f:11:d0:01:52:
84:f8:93:20:3c:53:58:fa:49:f9:b1:fe:b9:6a:4f:
c8:69:56:78:1d:1e:a8:76:b5:59:2c:f9:76:2c:a3:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:FA:FD:75:80:35:01:AF:5F:69:47:F4:C5:38:69:BB:9C:12:7A
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5f:10:b1:74:ae:34:55:4c:98:6a:ed:fa:c4:73:66:e2:c4:
23:76:35:73:8e:53:6c:0c:1a:10:fe:34:25:ec:14:23:81:90:
93:a8:fa:42:48:46:fc:97:8f:66:e7:01:4e:9a:85:e5:1e:ca:
38:54:6a:05:99:5f:e9:cd:fa:12:c2:53:74:3b:f7:f4:ae:62:
88:bc:76:ed:81:c1:e8:e9:47:f5:fa:e0:41:75:73:98:25:1f:
52:a1:2c:81:71:7a:cc:a5:fc:85:14:24:97:2f:14:50:a6:62:
b5:00:2c:61:8a:58:cc:62:4c:81:f9:0f:61:28:10:a8:60:b6:
66:b6:74:56:63:78:84:0b:1e:cc:01:04:71:e0:27:c8:35:75:
45:c1:c2:45:81:2b:65:a6:d3:22:1e:94:92:5a:19:60:1d:8c:
fd:5a:28:49:5d:85:12:47:66:fb:66:2d:9d:83:d2:c1:79:58:
b1:f3:22:d1:00:54:20:d3:87:20:5a:be:e3:a6:dc:da:4c:79:
05:30:33:d9:c1:2b:38:d2:4b:7b:cd:6b:a2:6c:bd:ae:5d:b7:
be:9c:3d:56:82:67:28:a2:0a:2b:84:9b:2f:7c:cf:46:a4:78:
c2:a9:19:10:d9:7c:1c:71:b4:96:a0:a7:48:6d:6b:45:2f:63:
28:ac:e7:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzImXrTLS+DCRrqui99d1VPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjYwMzA3MTQwMDI3WhcNMjYwMzA4MTQwMDI3WjAzMTEwLwYDVQQD
EygzYzNhZmFmZDc1ODAzNTAxYWY1ZjY5NDdmNGM1Mzg2OWJiOWMxMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TZksgvwqE9hxgYPa6BPWvN4XLpR
yMM43xnYHKgeFdtWHHGQNNwv/7zUpMAELIrZMelhfQg1gmqIsm2nrSXz7qOgX2eL
FlyDV5SC3HrgaCTQy+R1nTullDlE+1bI3Vbg6w1PMmCn5b/G0zKrgVjk54femNQQ
j5WGszVIHIvrcfKU/vQhjmFHMLvjY7KKwhd+J0doq+rmmTiKkdsTNnsREghdc4IO
1Khfw9wZr6VhFr5zA5gDoGu9zeQOnVurFRmecIW+lVMpT0QQfSDh/DlODC3JmmOm
ev6a2f3VfxHQAVKE+JMgPFNY+kn5sf65ak/IaVZ4HR6odrVZLPl2LKNZJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw6+v11gDUBr19pR/TFOGm7nBJ6MB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF18QsXSu
NFVMmGrt+sRzZuLEI3Y1c45TbAwaEP40JewUI4GQk6j6QkhG/JePZucBTpqF5R7K
OFRqBZlf6c36EsJTdDv39K5iiLx27YHB6OlH9frgQXVzmCUfUqEsgXF6zKX8hRQk
ly8UUKZitQAsYYpYzGJMgfkPYSgQqGC2ZrZ0VmN4hAsezAEEceAnyDV1RcHCRYEr
ZabTIh6UkloZYB2M/VooSV2FEkdm+2YtnYPSwXlYsfMi0QBUINOHIFq+46bc2kx5
BTAz2cErONJLe81romy9rl23vpw9VoJnKKIKK4SbL3zPRqR4wqkZENl8HHG0lqCn
SG1rRS9jKKzn6w==
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:01:47 2026 by rpki-client