
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File: ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier: yUjT6puMDmm9kJHX3kyCryfLi5BF6XZhtJXTiWAxlHE=
Subject key identifier: 9A:BE:B3:EC:3D:6A:B9:86:7D:4D:9E:CB:BC:8B:FF:81:4A:F1:6E:19
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 019D3753063B2B0E55D1D019D6ECDA93BFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number: 11EF
Signing time: Sun 29 Mar 2026 02:01:21 +0000
Manifest this update: Sun 29 Mar 2026 02:01:21 +0000
Manifest next update: Mon 30 Mar 2026 02:01:21 +0000
Files and hashes: 1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
2: NtjROQP4scj-bd3rAQIfTM_a3J0.roa (hash: 2Z01mIMovc7MNUUvtWcENZUi/UbUUYFottmL0jYMx2s=)
3: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
4: VsCifY8XLUBVZAJIXlh4tHs6Tys.roa (hash: yx2cdHQ3fO2iayrPEdicOAnB23aOaGWVWINVVkpgEOY=)
5: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: LTEmHzZTpRzY+mRy29/+0VeosGNJqcXFw5NuYEIcCKI=)
6: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:06:3b:2b:0e:55:d1:d0:19:d6:ec:da:93:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Mar 29 02:01:21 2026 GMT
Not After : Mar 30 02:01:21 2026 GMT
Subject: CN=9abeb3ec3d6ab9867d4d9ecbbc8bff814af16e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:60:c8:35:f9:df:14:27:2d:3d:33:d4:fe:
74:29:73:24:64:1c:5a:e3:db:93:20:26:5f:25:a2:
76:ce:33:89:ab:ec:d4:1d:e8:7d:88:0a:52:61:d0:
6b:e6:75:f0:28:59:c1:05:fb:a2:8d:d8:f6:c3:90:
fc:46:25:64:a7:ef:25:51:41:a9:31:89:30:8c:a8:
f4:29:25:51:8a:6e:2e:93:86:9a:53:1a:44:f7:17:
1f:36:96:36:6c:46:b3:3d:f2:38:3d:0c:b5:93:0a:
aa:5f:66:f2:ca:77:b3:fd:45:82:cd:63:a2:ea:89:
ad:a4:8b:0a:21:b5:c6:d8:a1:c1:6e:b4:80:f8:7b:
83:e5:ac:52:47:1f:95:0d:8d:4d:5a:95:03:18:10:
15:5f:9f:82:cc:cb:f5:da:e2:44:61:6f:45:ae:65:
91:d0:c6:26:24:ef:2c:0d:a0:89:93:67:20:0f:f7:
fa:91:6d:41:4f:cd:43:f4:4a:51:57:dc:07:b8:71:
b9:6a:8f:a1:dc:61:04:e0:86:75:79:ed:bd:75:00:
55:0c:29:d5:40:72:8c:56:81:5c:aa:6e:8c:2a:57:
21:aa:a3:40:1c:61:5d:df:0b:7c:82:2a:ce:1e:74:
a2:b8:bf:27:1a:34:fb:c1:79:43:f9:1c:eb:47:7a:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:B3:EC:3D:6A:B9:86:7D:4D:9E:CB:BC:8B:FF:81:4A:F1:6E:19
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cf:de:ef:84:0d:a4:ae:26:e7:48:18:6d:4d:ff:02:6d:2b:
1d:99:bc:30:04:61:c9:80:cf:b6:6f:fe:62:43:46:47:b2:c3:
c3:b9:ea:c0:7a:07:b6:43:40:c5:3f:1d:eb:9a:3a:81:bc:de:
b2:7d:76:ef:e8:49:92:85:06:1e:09:82:73:6e:f9:1b:b6:8b:
7d:96:91:89:59:9d:76:01:5a:6b:2d:14:5a:89:09:ec:d6:a2:
f8:6c:2c:c9:21:c5:e6:ce:17:e7:a7:72:1f:59:c8:9d:c1:6c:
5e:7b:8e:dd:0b:94:56:64:be:dd:9a:19:b2:5b:0c:aa:a2:53:
ac:5c:cf:83:55:57:fb:e1:80:32:7e:95:b9:ad:3d:54:c4:b2:
45:e1:6e:f1:f0:07:47:92:44:c1:50:67:0b:dc:d2:94:92:16:
bd:72:98:39:c5:04:d5:7f:8a:7e:19:db:fc:ad:5f:60:db:3c:
83:13:35:e9:6f:b6:4e:78:e4:bb:8d:2c:f3:6c:74:62:00:5e:
4f:85:22:cb:fe:a6:72:78:65:20:12:df:e9:46:2b:19:81:d7:
08:19:f1:a2:24:25:54:76:bc:5f:6a:d6:32:c5:95:ae:68:82:
2d:86:86:c6:a4:ce:cf:c2:e1:8c:4a:03:8d:be:e3:ce:ae:da:
f0:38:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client