Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: Klo8FB58qX9AGJwebrQvDF4VGYzML6UDuFesD0PRjr0=
Subject key identifier: DC:53:2C:A2:CF:48:59:CA:96:F4:5D:47:49:DD:D3:83:59:C4:9B:A5
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019CE44862A633E86C3E84B36CE3141C1811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 07B2
Signing time: Thu 12 Mar 2026 23:01:14 +0000
Manifest this update: Thu 12 Mar 2026 23:01:14 +0000
Manifest next update: Fri 13 Mar 2026 23:01:14 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: V0NKYKghxV8/vs5vDwaNtHSAXWQDZeTHijdRO3wceqY=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:62:a6:33:e8:6c:3e:84:b3:6c:e3:14:1c:18:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Mar 12 23:01:14 2026 GMT
Not After : Mar 13 23:01:14 2026 GMT
Subject: CN=dc532ca2cf4859ca96f45d4749ddd38359c49ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:09:13:96:81:44:09:6a:d2:51:8f:96:2f:
fe:91:8b:b6:e7:a9:33:79:fd:a1:d3:41:7e:7e:87:
a3:51:06:c3:cc:33:81:4f:c0:a5:ce:38:2f:3d:bf:
47:01:2d:5b:b9:a2:34:56:56:d1:e9:5e:ca:f6:4c:
8a:0f:bf:31:16:fa:81:f1:74:fe:42:6c:89:43:d7:
26:46:90:81:c1:52:cf:62:46:7a:b2:a6:52:43:ae:
f9:8f:ee:38:b9:0d:c8:ee:08:40:ec:dc:39:3f:31:
5b:6e:df:c5:96:f3:9e:a1:3f:2c:5c:4a:b7:b8:88:
01:3c:cd:0d:cc:e3:48:a2:5d:02:34:24:55:fe:9b:
a7:1a:82:88:e0:4c:d1:f1:b4:92:a7:c7:7a:81:73:
48:32:79:2c:1f:63:00:14:f3:43:ec:c8:1f:88:a9:
ad:6d:4b:f0:58:71:7a:26:be:0f:d4:cd:c8:21:d5:
a5:59:be:8b:d9:33:1c:ad:76:d9:91:1c:19:27:89:
04:38:e3:52:6e:15:08:46:27:6c:cf:f3:77:37:00:
23:73:58:93:55:c8:50:b6:d2:2e:55:a4:b7:2d:a2:
da:5a:a5:ed:1a:ea:62:aa:be:9a:eb:4f:3e:d6:1b:
41:cc:07:bd:52:52:dd:59:6e:40:80:f5:8c:58:6a:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:2C:A2:CF:48:59:CA:96:F4:5D:47:49:DD:D3:83:59:C4:9B:A5
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a8:2b:b0:4f:df:8d:4f:54:04:ae:1b:7a:76:e4:5e:1d:54:
32:04:f1:0e:3c:03:6d:e4:e7:ed:8f:57:11:04:7b:87:1f:ea:
46:a9:14:17:c3:83:fa:a2:ad:5a:16:f0:f3:c4:69:17:72:30:
59:a5:c1:0b:44:90:91:b0:c5:19:a8:a3:54:d2:17:2c:c8:9e:
7e:b3:8a:6a:93:8d:bf:da:73:e9:64:54:96:aa:f2:84:2a:38:
f2:b2:ca:ea:d0:cb:f3:f2:ca:c6:38:62:d9:05:da:3a:06:5e:
7d:fa:fa:16:a0:38:95:ae:d9:59:35:96:ee:91:a9:32:91:30:
db:14:96:24:21:07:ce:d9:40:a6:23:9a:d3:95:bb:cf:37:6e:
d8:a7:83:a3:53:6e:a5:dc:43:a9:d5:3e:98:bf:4d:c4:ac:e0:
bc:0b:e3:58:2c:20:fe:66:e4:fd:ea:e7:51:42:06:ad:e6:92:
18:15:10:bb:52:00:4b:6c:21:53:cb:4c:e8:14:75:23:3a:e4:
55:c6:6d:a0:0e:7b:af:18:f6:31:31:e5:cc:9e:88:fa:24:f8:
60:95:a4:02:e7:da:72:f5:81:cd:0b:3e:01:06:6e:ef:25:6e:
44:56:40:4a:b3:cd:5e:f5:c8:7b:58:cb:d8:85:05:4a:78:73:
89:ce:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:57 2026 by rpki-client