
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: OWn2t6tdDtzpNOGGiiMjcMpwxDNKvK7q1HzqRh4fxlg=
Subject key identifier: D8:F2:15:20:FF:08:29:8B:D2:C9:77:6E:3B:EC:5A:5D:3D:28:AE:0D
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019CE3A329150076599136A1F8772F383B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 08E1
Signing time: Thu 12 Mar 2026 20:00:46 +0000
Manifest this update: Thu 12 Mar 2026 20:00:46 +0000
Manifest next update: Fri 13 Mar 2026 20:00:46 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: TQEenTloNjiysm3aJ1ADt2RwmE9yRPOx9J2yQdZgz84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:29:15:00:76:59:91:36:a1:f8:77:2f:38:3b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Mar 12 20:00:46 2026 GMT
Not After : Mar 13 20:00:46 2026 GMT
Subject: CN=d8f21520ff08298bd2c9776e3bec5a5d3d28ae0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:8e:10:ff:4f:85:c5:f3:d1:b0:c4:43:58:
9d:dc:a5:ed:fa:8a:cd:08:ee:97:9a:9c:09:88:45:
7f:86:59:eb:c0:f0:ed:47:90:98:f5:d0:17:83:0d:
11:ae:0b:8b:94:19:ff:96:28:12:32:e2:25:9b:54:
8d:fa:ed:ef:dc:27:54:7f:9c:a5:98:e0:93:76:1f:
e5:e7:04:f4:69:ec:04:f0:08:c8:9a:48:55:99:18:
bb:59:70:25:db:9a:ab:40:e4:ba:81:cc:ca:f2:f9:
51:9e:7f:80:d6:d9:97:a7:bb:29:02:79:64:65:49:
74:dd:e9:3c:77:52:e8:ed:d7:b2:ea:36:7e:43:e6:
65:2a:48:56:00:11:28:c3:98:2c:c5:10:28:67:b6:
eb:4e:75:29:1f:4a:29:57:1a:a8:e8:ab:1f:ed:86:
9b:37:d4:bb:54:2e:7d:29:16:ad:3c:31:0d:9c:76:
6d:cb:bb:dc:1a:6a:e3:50:99:57:b8:91:56:00:32:
e6:97:c9:27:e6:5f:a7:71:6c:65:83:05:a4:13:05:
4b:bc:10:03:5a:ef:e6:f8:52:d4:a0:3e:70:34:a7:
a4:78:a1:ec:9f:ac:ac:9e:da:1d:d8:16:74:22:62:
53:7f:3c:3b:b5:45:3b:04:2a:08:39:94:50:2c:88:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:15:20:FF:08:29:8B:D2:C9:77:6E:3B:EC:5A:5D:3D:28:AE:0D
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:45:16:c8:30:fc:d9:51:0e:60:7a:0d:20:ec:d4:03:e1:
50:e2:1a:66:a8:0d:76:17:1b:74:8b:53:fc:5c:fd:87:d1:e1:
21:93:34:03:a3:7f:8f:4b:cd:e9:f5:89:ee:40:08:01:97:a6:
38:7b:72:78:e8:78:6a:fa:69:8b:b4:93:2b:0c:71:59:e9:05:
be:37:41:fb:3c:d3:8b:14:c7:46:51:7d:6a:8c:46:df:59:8e:
6c:89:67:05:22:97:ce:1d:af:29:04:36:7c:fd:72:3a:6f:0f:
0f:e7:d9:f9:c7:74:23:df:35:ce:4f:6c:10:91:29:03:54:3e:
79:13:19:a1:39:77:04:35:a2:84:e3:f4:6b:e3:b5:c4:73:2f:
0e:c4:c9:08:3e:2c:21:64:7d:2f:aa:21:4d:d5:80:e7:36:d8:
6b:41:9b:87:2b:6f:02:f2:dd:16:23:71:ce:26:25:d2:8e:29:
e6:bc:60:16:73:56:f9:42:13:a7:c5:4a:19:34:9e:23:6c:7e:
42:78:e1:43:32:f3:90:26:1c:ad:0a:a2:a1:d3:57:4d:6f:0d:
37:65:54:95:ab:86:67:e7:bb:fb:b7:5c:26:f3:59:9e:af:79:
6a:28:46:c9:6c:5f:f7:70:2a:50:37:75:2a:72:39:0d:30:7a:
cc:c9:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:49 2026 by rpki-client