Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: 5MZK3ajTeXQxs/xP3HWH7KGrHoH0ouOFQ+MjKk6uYO0=
Subject key identifier: 41:EB:E8:81:ED:AF:4A:94:E5:29:0F:05:A9:5D:4C:93:D1:36:BB:DC
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019FA1F2602CE60ECA1B8E9ECE05C9E3FC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 091E
Signing time: Mon 27 Jul 2026 05:00:43 +0000
Manifest this update: Mon 27 Jul 2026 05:00:43 +0000
Manifest next update: Tue 28 Jul 2026 05:00:43 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: IsPejzf2Dnr4aOLR_OzJuZaLXsQ.asa (hash: GStHzech3OT9Y5reas02hEXtnmFliA7XicAmtAnOHEE=)
5: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
6: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: a8zmfrd/5k5xP1j5TdPEawn1Np66mxOIaya3AETvkZ0=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:60:2c:e6:0e:ca:1b:8e:9e:ce:05:c9:e3:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Jul 27 05:00:43 2026 GMT
Not After : Jul 28 05:00:43 2026 GMT
Subject: CN=41ebe881edaf4a94e5290f05a95d4c93d136bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:37:ec:e6:22:48:70:4b:87:42:c3:be:8b:
6b:1a:63:1a:cd:d1:49:d6:da:07:a7:26:88:55:75:
24:87:f3:d8:99:6c:0e:7c:c0:b2:ca:e2:bb:1d:60:
b7:86:de:4b:d5:ca:ed:03:d2:99:bc:3b:2e:96:9d:
07:7a:e5:79:db:95:57:a0:7a:ea:57:b4:8a:a6:aa:
35:b8:cc:92:30:8a:bd:63:e0:19:f0:6a:94:da:25:
a8:27:d2:f5:d2:7d:13:88:13:ed:ad:7c:26:58:90:
78:15:c4:43:b7:d0:2e:d8:73:ff:ab:b5:8a:c9:df:
ed:c2:09:22:cd:c6:01:8c:de:7f:7e:79:c8:cb:c2:
60:7a:03:cc:f1:bd:0e:8f:8c:26:78:c2:e7:fd:49:
aa:59:43:88:93:65:0d:d1:2e:f7:90:40:b3:85:34:
8d:1a:b2:a1:21:58:f1:c9:46:65:3c:da:c6:75:62:
18:15:fa:21:d0:eb:6b:4f:2f:db:f9:2b:74:ad:29:
d0:42:84:60:0b:d8:68:d9:0c:58:b7:da:fa:01:d4:
73:9f:a7:8f:6c:bb:55:0c:e3:75:78:16:a7:7d:ce:
2e:03:6d:21:1a:89:80:f3:73:ff:d3:13:62:f3:3c:
6b:48:5a:55:7e:d2:b0:25:46:f0:a9:5a:7a:21:b3:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EB:E8:81:ED:AF:4A:94:E5:29:0F:05:A9:5D:4C:93:D1:36:BB:DC
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:93:a8:37:60:34:94:b3:54:53:41:81:63:85:c9:e2:5f:
de:a4:db:84:72:74:9b:96:0e:2a:3f:34:ae:93:10:be:ef:f4:
4f:f9:7f:68:48:87:38:f2:b2:83:1f:21:8b:82:56:b9:85:16:
78:40:e1:da:ae:72:3e:73:a7:06:7f:c0:0b:df:7e:03:34:38:
03:e9:c5:6e:0f:3e:6c:14:db:30:61:3d:01:8a:a1:dd:5d:e1:
00:38:3b:40:a4:6e:09:8f:8c:1c:d2:7d:d3:00:e6:92:ee:24:
fb:c7:71:67:b0:2a:27:cb:49:21:27:65:73:89:ea:24:a6:b6:
5a:90:0e:44:7f:23:89:7a:89:cf:6a:cc:28:6a:d1:06:3b:c4:
34:fc:98:df:97:8d:43:57:53:b4:65:5c:e8:5e:6d:32:e4:ab:
17:e2:c7:03:96:f5:d0:2e:6d:0d:8a:b1:9c:bb:77:00:e7:84:
97:e2:e4:d8:96:da:f8:6e:7f:33:5b:19:96:6d:4f:8a:49:33:
ac:f9:bf:7d:53:ef:45:3c:a6:3d:2e:63:a8:29:03:ff:dd:2e:
4b:0c:67:7b:67:76:cc:18:56:15:87:21:1a:ca:46:2b:46:d2:
a8:fd:a2:a7:db:ba:95:45:1f:32:04:d7:08:64:24:8e:f2:c6:
13:e1:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:27 2026 by rpki-client