Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: +c9Y/UBy3UjHf73XJ+Ln0O2ZkXfcd/x12YBoIE3v9wc=
Subject key identifier: DF:3C:62:F5:23:D2:FB:29:0B:7F:60:B1:01:29:FC:4E:E5:BD:17:B6
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019CE2595A9009C400E398452AB300E3F313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0DAD
Signing time: Thu 12 Mar 2026 14:00:32 +0000
Manifest this update: Thu 12 Mar 2026 14:00:32 +0000
Manifest next update: Fri 13 Mar 2026 14:00:32 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: x/OE1gWxjQGzLFJQkYX4fTeRO0pqKk9sG7nb52a68X0=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:5a:90:09:c4:00:e3:98:45:2a:b3:00:e3:f3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Mar 12 14:00:32 2026 GMT
Not After : Mar 13 14:00:32 2026 GMT
Subject: CN=df3c62f523d2fb290b7f60b10129fc4ee5bd17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:ee:0e:52:29:48:93:d2:c9:ef:3b:19:0d:
a5:1c:63:78:42:aa:11:ab:81:f5:bc:eb:89:10:31:
0c:3a:fc:62:a7:55:cc:db:e3:36:ca:1f:86:28:ff:
c1:ac:91:78:06:9b:ec:0b:ba:10:50:8e:23:4a:25:
51:46:44:ee:40:c0:cc:96:fb:47:0d:f8:20:87:12:
6a:50:54:11:45:b1:4c:64:26:10:fe:45:76:78:73:
5a:91:05:b1:ec:80:35:22:34:a5:13:8b:13:79:d8:
77:ca:47:7c:3a:95:fb:23:09:ec:de:11:84:ce:7b:
70:39:ed:0b:fe:8f:8b:c0:2e:38:78:ee:56:30:ac:
bc:38:db:62:9d:3b:59:6e:c8:8f:13:1f:3e:e3:8f:
19:f7:0d:18:99:8d:bc:6c:8a:37:93:b9:39:20:07:
9c:09:12:b4:50:4c:79:b9:05:3d:db:e7:95:f4:48:
f6:05:da:ea:3d:df:a5:f1:3e:2e:6e:13:72:b7:dc:
6f:20:cd:c5:3f:13:ca:c3:09:8d:34:a2:f5:10:64:
77:0f:04:b5:2e:0f:75:85:33:77:1d:da:20:8f:2f:
47:19:26:f2:18:a5:6c:36:d3:a0:24:fe:4a:c5:7a:
7a:b2:26:7f:87:5d:21:89:31:fb:4a:af:78:73:26:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:62:F5:23:D2:FB:29:0B:7F:60:B1:01:29:FC:4E:E5:BD:17:B6
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1e:9e:f5:a4:b9:3a:3b:67:43:02:6c:00:da:cd:e9:f8:41:
0d:eb:23:a6:36:4e:65:c2:02:8a:a8:de:63:94:2e:c0:90:c8:
48:68:31:eb:90:9f:11:63:4c:3d:42:99:dd:a0:d2:8b:8c:06:
e7:8f:d1:95:5f:a7:3e:50:38:87:5e:02:a1:52:91:be:ef:af:
34:ed:fa:d9:e4:ae:2c:fc:83:dc:82:5e:e8:00:13:3a:fc:8b:
14:11:18:68:b4:eb:76:83:50:74:d5:34:98:6d:f3:0b:6b:c7:
a2:c3:43:82:66:f9:c3:91:68:b6:64:31:93:1a:b4:62:e7:a7:
86:fd:ea:2d:0f:a1:4c:7f:04:3c:b5:cf:68:0b:47:4e:af:d7:
90:cd:7c:f2:fc:b5:4e:9f:00:a8:32:35:29:be:4c:d5:27:f6:
f4:48:4d:45:75:e9:0c:14:d2:9f:11:3b:69:62:d6:55:31:94:
9e:c4:69:7b:0d:ba:1a:b7:f2:a3:d5:fc:07:28:92:9f:a3:e7:
91:c1:b4:c5:7e:fb:ec:dd:8e:c6:c0:87:71:5e:80:cf:9f:16:
1d:2f:b5:34:49:f2:f1:15:89:64:74:a4:f8:4a:3c:b5:be:84:
98:c0:e4:3e:fc:9b:57:d0:7f:eb:ae:7c:19:b5:e7:af:49:e9:
4e:ea:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:40 2026 by rpki-client