Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: ZkI29aJWTQHaqP8hGfdS5PEW0Vkeu1rTn7XyZsJeFxc=
Subject key identifier: 06:37:77:62:EB:27:A2:83:6A:AB:30:64:F5:7F:77:92:EB:68:C9:AF
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 01A003CB20E2DEF7B3F9D19ECC4AB4A4EF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1994
Signing time: Sat 15 Aug 2026 05:00:38 +0000
Manifest this update: Sat 15 Aug 2026 05:00:38 +0000
Manifest next update: Sun 16 Aug 2026 05:00:38 +0000
Files and hashes: 1: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: 9xR1nyKfbnqOEJKJPTlp33NIZ5agc4G6pMZQ7fR9cYo=)
2: ezoJl0lo6SFxJ8FpRY4TWMPADso.roa (hash: cD7XM33EvM3euT16GARY/IJgPq96c1JjGDXWgdeNltc=)
3: tdM9a3Fj16C8DYivU329dA57WBk.roa (hash: Q27C5bR4yI1LsWJLJXdVxidjEUUsntcFj8QxNJysAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:20:e2:de:f7:b3:f9:d1:9e:cc:4a:b4:a4:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Aug 15 05:00:38 2026 GMT
Not After : Aug 16 05:00:38 2026 GMT
Subject: CN=06377762eb27a2836aab3064f57f7792eb68c9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:dd:82:28:35:af:4b:4e:8b:b0:a6:ba:6b:
4d:66:3a:e3:a2:3a:3c:87:1b:b5:94:3f:fc:1d:2b:
e2:29:b5:43:87:8d:ba:ec:9f:5c:e8:0d:c3:f6:22:
1d:f2:b5:02:0e:c3:4c:04:25:dc:da:99:3c:14:b3:
e1:37:de:b4:09:95:87:c5:b3:24:ff:9b:f4:70:f9:
aa:fc:9b:dd:aa:bd:ff:26:3d:1f:cf:84:dd:97:b9:
44:dc:ec:05:cb:d7:4d:8d:63:a8:c4:af:d4:da:27:
f2:94:db:d4:48:5a:76:4d:d8:77:57:69:f4:27:a6:
ab:9b:27:85:55:70:86:03:83:4b:dd:f5:b6:26:f6:
c3:d1:c2:6e:02:9b:de:2b:d5:25:c9:62:c3:9a:42:
fe:c8:d7:6b:80:71:1f:4a:0b:0b:f9:00:4b:41:d3:
a7:0a:69:ee:71:18:29:74:e6:b1:be:e2:cb:ef:3e:
31:eb:ee:ca:e4:76:e2:3c:2f:c2:3d:9d:e2:89:08:
26:04:6e:8c:15:7d:4e:53:95:50:8d:08:e0:36:68:
5f:4c:af:8a:bf:2c:2b:2f:ba:df:9b:46:cb:f0:20:
ef:b1:f9:35:19:26:02:94:d2:40:e7:29:6d:92:44:
20:21:14:71:c3:67:84:7e:02:30:5d:f5:78:f6:d2:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:77:62:EB:27:A2:83:6A:AB:30:64:F5:7F:77:92:EB:68:C9:AF
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:59:4e:7c:f3:01:f6:6c:a8:e3:fb:a5:aa:e8:9b:e8:d7:8e:
08:77:ca:14:cd:3e:25:d8:48:58:78:a9:af:cd:8d:dd:ed:53:
68:ca:41:b0:63:4e:70:75:0e:cb:29:0e:1b:25:d5:66:06:75:
ec:18:a9:a9:9d:4b:02:bb:e0:17:aa:b4:9b:67:95:38:00:f1:
7e:5a:3b:4e:61:6c:bb:97:19:c6:f0:a9:b6:f5:91:64:8c:88:
4b:ea:35:8c:f9:c6:11:c8:a4:1d:fc:31:66:45:0c:23:ce:06:
b5:e1:e5:e2:5f:cb:fc:c5:ec:ab:1d:6e:08:a3:00:26:b7:19:
6e:99:ee:e9:df:75:35:30:e0:24:db:34:56:ab:93:ba:80:1c:
7d:ce:b8:d5:0c:9a:d0:a0:32:d0:a9:0f:ee:40:04:71:95:d4:
89:d4:6e:d7:38:b9:8c:cb:23:55:18:ad:e3:eb:6b:74:38:c8:
02:01:8e:63:65:18:20:f0:1c:a3:40:45:fc:77:3f:a5:ee:b7:
2d:ce:05:1a:65:77:b3:45:43:66:db:28:f6:df:1e:3d:dc:02:
b3:12:23:66:97:b3:99:38:7e:bc:cc:b6:e7:b6:a7:6c:85:22:
2d:ae:f1:8a:6d:6f:b1:e5:13:a0:f1:0a:fd:fd:7a:9a:8f:69:
bd:79:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:49 2026 by rpki-client