Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: H75gBcVzbDGYInwtr+hJ7snBUcG9XQKpu7+UBPj9xto=
Subject key identifier: 48:29:E8:FA:F5:A7:99:87:04:F4:B9:36:86:C4:72:75:AB:48:86:79
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019D375284E45356127CEB98C03C44732514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 158F
Signing time: Sun 29 Mar 2026 02:00:47 +0000
Manifest this update: Sun 29 Mar 2026 02:00:47 +0000
Manifest next update: Mon 30 Mar 2026 02:00:47 +0000
Files and hashes: 1: VxWfHatZSPjNCGQb391xfXyxZ3U.roa (hash: k4qh49pNo2b+6Z7ZcEp1/eu5zGES0cIQ64LIQKZCaxU=)
2: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: GTtYpnus2nexzsTlt8enS5/bEmhuYRcIx818NvdgUeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:84:e4:53:56:12:7c:eb:98:c0:3c:44:73:25:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Mar 29 02:00:47 2026 GMT
Not After : Mar 30 02:00:47 2026 GMT
Subject: CN=4829e8faf5a7998704f4b93686c47275ab488679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:ba:02:e6:b4:04:bb:8d:70:5d:0d:27:5b:
db:72:51:81:08:2a:88:88:75:d8:ea:30:95:5e:0c:
cd:69:a2:f0:60:e7:9c:b2:c5:03:0b:58:4e:cc:bc:
0e:c7:e0:f1:f0:19:e8:40:06:c2:63:9c:12:62:1b:
1c:b9:bf:17:13:81:59:90:60:6e:b5:39:65:1b:09:
92:48:56:9e:88:6f:fb:5e:95:cc:b0:4f:88:69:ad:
e5:27:cf:02:b9:49:3d:32:ec:2f:ae:6e:ec:77:74:
77:c7:1b:c8:1c:2e:0d:cb:6a:f2:ff:e8:8a:c9:1e:
07:f6:79:71:b8:ee:22:87:4e:68:a8:07:c0:17:0d:
fa:fd:39:f1:c6:44:d2:fb:53:71:c9:c9:5e:c0:91:
72:1f:5a:8c:25:04:a1:8b:c4:41:f2:95:a9:6f:c7:
af:79:df:dc:aa:fa:32:5f:cf:79:cf:87:d5:4b:70:
4e:e8:1c:f5:f3:c5:67:73:0c:7e:22:c2:0f:09:a4:
e5:cd:54:6e:04:8b:57:7f:55:c6:b1:ce:39:5d:90:
30:b0:a5:5a:d4:0c:f0:b0:6a:11:bd:99:2a:74:e3:
87:ba:84:ca:71:1c:5c:45:7f:b0:95:8a:c6:67:49:
da:8b:56:16:e5:00:66:bc:16:db:18:07:f7:10:76:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:E8:FA:F5:A7:99:87:04:F4:B9:36:86:C4:72:75:AB:48:86:79
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3e:0b:c2:e0:cd:41:4c:f5:d3:cd:16:a6:8b:1d:d8:1d:1e:
e0:f4:64:a6:83:a4:3f:ca:8f:1e:26:08:50:94:ac:f5:fc:0b:
23:9c:ae:d7:ac:f4:78:35:3e:cf:c4:31:7e:b8:44:5c:a6:19:
18:b7:1b:b0:e8:0e:eb:b5:7e:65:c4:6a:fd:27:ff:a0:77:e4:
77:30:5b:5d:b4:03:00:93:ae:89:97:78:74:86:58:ce:2f:25:
4f:03:4f:36:a9:81:77:ed:70:42:8b:ae:59:19:0c:a6:ee:97:
4a:cf:5a:f8:63:05:70:8f:f9:06:42:ca:9d:ff:bd:f0:54:ce:
9b:e2:72:ca:e2:0a:3e:3e:ce:03:c1:db:d2:6d:24:6e:9a:70:
be:aa:74:2a:20:fb:27:b7:61:f7:2c:db:af:4e:05:db:99:5a:
3e:0a:f8:0f:0c:fb:3c:8d:b7:6d:9c:ad:9a:ea:f3:41:ff:64:
cf:9d:58:f7:5e:0c:60:3e:6d:75:78:7c:eb:4a:7c:6d:56:af:
3f:10:2c:e4:1f:12:d9:21:c7:54:8d:3f:06:95:f2:04:0e:82:
f6:ac:82:20:83:10:52:25:d8:97:44:c5:f7:42:0c:ea:01:37:
27:3f:43:ce:72:bf:c9:c3:ea:f1:8e:71:20:20:45:b4:80:56:
f5:84:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client