Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: uOJYGJRxHQtlYZtdGD0oU5Zgsa58I1DGL3HZPJbf5XU=
Subject key identifier: C8:49:29:30:94:35:14:28:0B:FD:B5:8B:3F:61:7E:51:D5:15:2F:73
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 019CE2C76B1A9E85F054691477EB785C24FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 15A3
Signing time: Thu 12 Mar 2026 16:00:45 +0000
Manifest this update: Thu 12 Mar 2026 16:00:45 +0000
Manifest next update: Fri 13 Mar 2026 16:00:45 +0000
Files and hashes: 1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 5nlmCCKcFY29tTNBFMnwk3OdmreNC+Que4F12ikF9kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:6b:1a:9e:85:f0:54:69:14:77:eb:78:5c:24:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Mar 12 16:00:45 2026 GMT
Not After : Mar 13 16:00:45 2026 GMT
Subject: CN=c8492930943514280bfdb58b3f617e51d5152f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:09:69:78:9e:81:ec:6d:81:93:6e:52:7b:
1b:28:40:89:64:aa:5c:b5:9f:8c:47:66:5a:ea:1a:
ad:68:d2:cc:60:12:33:d6:21:34:bf:13:87:c6:dc:
aa:f6:20:35:0e:cc:22:5c:2f:40:74:28:4a:42:2d:
72:eb:24:9f:fb:98:74:15:44:f7:47:e7:99:21:3d:
3f:0c:6b:81:2a:41:5a:43:44:ea:22:6d:d2:5d:4a:
5d:ae:e6:a4:f4:82:83:5c:00:fc:4f:a7:5a:9c:94:
75:b5:b3:2b:b7:64:eb:6c:b6:3c:e5:18:37:ad:ad:
f6:82:90:54:8f:56:17:95:6c:81:25:30:5d:e1:c9:
13:ef:69:e8:96:be:43:8e:3e:bd:be:f1:a2:49:65:
57:8a:a9:e2:71:b6:c2:f6:f5:1d:49:6b:d1:ba:04:
fc:02:c9:db:3a:05:ba:8f:98:a2:fc:96:83:46:1e:
d0:6e:6b:5a:6c:85:64:f0:01:57:cc:69:91:9d:eb:
21:38:cb:8b:1e:da:12:5a:c5:27:6a:f0:c2:dc:64:
04:8f:dc:f2:59:ea:8d:35:47:40:22:ee:1f:e9:15:
17:4b:d5:bb:c8:89:1f:1e:62:b0:b5:59:d4:25:3d:
d2:7f:6e:d9:0d:45:38:fd:84:0f:8f:bc:b9:a6:74:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:29:30:94:35:14:28:0B:FD:B5:8B:3F:61:7E:51:D5:15:2F:73
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:8c:d0:85:a2:66:ca:45:e3:67:69:d1:48:33:ae:8b:af:
50:6c:96:6d:03:c9:62:59:b4:a4:cb:81:1a:e6:95:f9:dd:a6:
ea:a7:97:ba:49:68:ac:78:db:ed:27:9a:47:d5:5e:7a:59:ee:
d5:01:d0:c0:00:a8:75:f4:53:41:c3:25:57:10:30:a2:3b:35:
43:82:1c:7f:41:91:80:36:f4:a6:96:eb:00:6d:44:36:e2:43:
37:f6:d0:5f:19:ad:15:2d:3b:55:e4:a6:cc:26:b2:03:12:3b:
58:15:ad:7e:fa:b3:03:5b:f5:2f:89:db:fb:04:09:a6:27:a8:
2f:54:46:c2:10:4e:43:92:37:23:46:32:9f:72:93:dd:79:7c:
ce:ad:1e:99:05:c9:28:54:03:74:c7:95:b5:64:3f:ec:80:78:
a3:b3:7b:48:48:99:df:72:a9:85:9c:22:d9:e3:d8:98:5e:4d:
92:fc:80:d7:ba:0e:ac:44:7d:da:42:09:2d:6c:6b:46:ff:69:
5d:2b:cd:7f:38:e5:50:46:1e:d8:2d:b1:2c:f4:1c:f3:74:df:
05:61:17:45:d9:58:cb:0e:db:8e:32:8a:60:10:76:18:b5:b3:
30:cd:1b:53:17:98:27:ed:86:9c:d7:5f:c6:cd:0e:49:2a:25:
6c:a1:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:10 2026 by rpki-client