Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json)
Hash identifier: j7DEoqZwnOS7n8AWq0ANXhu6nyezdNBHyvdjIZnQ4EE=
Subject key identifier: 7E:83:EC:B0:C2:DD:31:E8:72:99:5E:DB:3B:92:04:50:73:E1:1E:DF
Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Certificate serial: 019D3940AEFD643A80079D20D05A6D797C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
Manifest number: 11FC
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: vMfnrpAebos3eaIEsMS2VFk8-QI.roa (hash: 4/jYsNoEYkp6fGrbtUoi3W/2IDsabtf81IB97bt4re0=)
2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: VCwrwBjyy3j5+bhMjWsa9/PwXt9GvL3Q/l1bfdtDvUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ae:fd:64:3a:80:07:9d:20:d0:5a:6d:79:7c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=7e83ecb0c2dd31e872995edb3b92045073e11edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:97:30:65:19:e1:52:dd:67:ee:c0:82:70:
39:89:1a:c8:cc:e9:0c:5a:1d:ca:d5:29:3f:3a:16:
29:94:ef:c5:18:dc:c5:63:0e:b7:d9:81:12:be:61:
a9:97:c4:8e:9d:c1:a5:0d:5f:bc:ca:ff:a0:93:f3:
80:62:31:c3:a5:0a:c5:b2:39:d7:fb:e2:65:c8:27:
1c:6c:fe:34:80:94:87:90:e8:cb:58:76:1c:ad:0b:
51:c0:e1:ec:b6:4a:76:ca:85:e1:f2:4e:0c:11:f5:
05:b8:88:5f:7a:4e:a5:70:f6:92:81:aa:af:8d:8a:
f9:e4:d4:89:e8:43:80:9d:b3:f8:f1:de:0e:94:1f:
8b:ed:af:06:7a:59:83:69:41:47:e3:ae:a5:58:ca:
54:98:62:f3:55:43:05:91:e0:2c:3a:b9:16:78:2e:
5e:4b:b3:fa:3e:71:ea:e9:e4:aa:a6:19:3c:df:6a:
cf:f0:4b:0d:5d:6f:69:09:ed:9d:ce:59:27:aa:8e:
0c:37:21:ef:4f:7b:de:14:d9:cc:04:95:d2:9f:6c:
10:0a:16:d9:c3:35:d4:75:f0:c9:34:31:3c:6e:6c:
41:5b:4b:7c:91:79:6d:87:aa:3a:7c:54:6e:d4:8a:
39:96:68:38:ae:c3:b1:02:8b:59:a7:d0:47:41:c5:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:EC:B0:C2:DD:31:E8:72:99:5E:DB:3B:92:04:50:73:E1:1E:DF
X509v3 Authority Key Identifier:
keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4a:00:15:ff:7e:cf:24:0a:40:fc:01:dd:c0:2f:b5:3f:60:
0a:16:69:08:26:f5:8a:1a:d8:7d:b4:8b:ee:3f:89:ea:13:a3:
5f:85:6b:08:0d:ef:41:6c:ca:8e:40:0a:ae:c9:2f:71:44:18:
d0:96:fe:07:71:86:f4:4a:b9:de:4a:9d:37:c6:96:85:90:15:
a1:c7:ed:56:41:0e:1c:3f:f3:3a:6a:1f:ff:a0:e8:fc:33:6a:
99:8b:7e:a1:dc:b3:64:a5:c0:85:e7:7e:3c:5f:0a:7c:12:7a:
a8:42:d7:8c:14:ea:e9:a5:ac:91:39:b0:81:3f:14:27:d1:9c:
f7:c9:88:1f:95:23:b3:92:76:0d:5a:c9:aa:36:23:4c:ba:6d:
86:ac:0b:d6:18:5b:60:45:67:29:a1:b5:31:73:dc:b8:9e:81:
75:bb:d8:fc:43:30:d2:93:10:f9:78:c5:2b:72:05:d0:27:ef:
19:a7:1f:d9:6e:b7:35:46:ab:89:e1:73:25:06:3c:5a:6c:63:
33:d1:ba:e0:62:64:25:0f:c2:22:e4:f6:1d:ca:c7:61:65:00:
f9:cc:e8:a8:7c:24:4d:9f:ff:15:15:35:46:34:84:c7:57:1c:
88:31:5c:4c:25:5b:2c:16:02:fc:cb:ab:7e:b6:4d:b2:1c:ae:
4f:c5:86:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:14 2026 by rpki-client