Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: ok8WUHJig//kWL6sa+HyBiDdbhvqdJYqOXhBCppX8eE=
Subject key identifier: 15:2F:EF:AA:E0:A8:1D:D6:83:48:17:CF:D6:D6:44:52:E5:42:6E:20
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019F9EBA8E2131D762B426B3AA28909CFE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0A4B
Signing time: Sun 26 Jul 2026 14:00:53 +0000
Manifest this update: Sun 26 Jul 2026 14:00:53 +0000
Manifest next update: Mon 27 Jul 2026 14:00:53 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: rtIJDObTjtPQ8LWlHL5fK3U7Vi7xFZV3k2GVW9z00Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:8e:21:31:d7:62:b4:26:b3:aa:28:90:9c:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Jul 26 14:00:53 2026 GMT
Not After : Jul 27 14:00:53 2026 GMT
Subject: CN=152fefaae0a81dd6834817cfd6d64452e5426e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:68:e1:9f:64:e9:4e:b6:d6:b1:54:f3:08:bf:
8d:3d:6e:fe:9b:d2:02:da:fa:43:ae:c2:56:40:96:
72:44:80:02:3e:ee:6c:91:7a:8d:92:a2:0f:04:42:
d8:87:6e:a3:a6:db:8f:53:54:3f:49:11:af:20:6c:
81:e5:17:c1:39:3c:9a:99:3e:c4:7a:dd:22:fc:86:
60:49:f5:c4:0e:42:89:8b:c0:71:ee:19:f8:25:fe:
6a:5e:90:83:b4:dc:f5:52:3a:66:6a:7f:05:b2:22:
bd:07:3a:c2:0e:e1:67:14:00:59:90:3e:4c:82:33:
b4:00:0c:92:5b:6a:5e:02:ac:ad:5a:56:ad:d7:ab:
2a:3e:54:39:44:0b:f3:12:d5:5f:1d:6f:6d:c5:ca:
fc:ea:e8:7e:df:5f:bf:ab:3f:64:b1:b5:4f:80:03:
10:ca:ec:7e:aa:61:c8:24:0b:27:5a:1a:29:32:f0:
3e:3b:c4:18:26:54:af:32:a9:ac:7c:ea:aa:48:bc:
cc:96:80:25:fa:b9:3c:4a:7a:f5:81:87:b4:af:2e:
49:11:a5:71:7a:3c:de:a4:98:a3:27:0f:2f:be:5f:
d6:f5:9d:dd:c0:49:aa:5b:2f:35:fc:82:67:9a:cb:
75:56:b8:77:13:4f:e0:7b:46:d2:f6:1b:e5:63:26:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:EF:AA:E0:A8:1D:D6:83:48:17:CF:D6:D6:44:52:E5:42:6E:20
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:a2:48:5f:da:41:44:f9:d6:13:d5:ec:58:1c:be:19:cc:
70:ae:b4:f5:8e:b0:2f:91:05:ab:2d:86:73:23:a3:e7:f9:5d:
9d:50:85:e8:bb:1e:cf:e5:8e:65:ec:9f:af:4e:5a:95:de:57:
5f:ae:c3:22:f3:eb:f0:a8:73:f0:c5:cd:d1:58:95:32:d8:8c:
3a:5d:9a:10:12:7b:a1:da:06:5f:98:fa:9b:71:28:6b:88:77:
0a:47:b0:6a:df:6d:c5:bc:84:78:d7:6b:ea:75:6d:1d:66:57:
fb:49:8a:33:98:bb:6d:c2:f0:a0:8a:f7:da:98:bc:f8:b6:20:
cb:cd:4f:14:57:ac:47:2e:1d:58:b4:29:55:7a:7e:4b:46:ce:
3e:c4:db:92:d8:fb:bf:17:a5:d9:78:39:64:d3:6e:ac:04:e0:
36:e0:39:f8:cf:b7:f4:eb:94:0a:c8:5f:30:16:99:60:c5:6f:
30:b1:ab:c1:ab:b8:8f:52:8d:30:3b:db:95:a3:2f:b2:22:e9:
05:f9:5b:59:8c:13:a5:f2:90:49:a3:88:cb:83:e2:0d:3d:8b:
75:00:28:7f:25:5e:9b:fd:6a:9f:bc:40:92:5a:9d:ad:51:d2:
0a:d7:9b:3d:2a:9c:66:74:88:10:3b:b2:5d:b9:e4:32:aa:77:
0c:b9:c9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:38:10 2026 by rpki-client