Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: UKarCN7uTfjk8RDrFvAux0oSZ/roY+2zWgQ+bCJjxDc=
Subject key identifier: 30:1A:56:3F:B7:3B:95:C7:5C:3A:55:D2:63:95:BA:72:22:EA:58:F8
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019D390A533CC86514CDD7E6454F4234DDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 04E1
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: HBlI0MHtm4NpYQnNwYV+29NGcdkwJAWcPm6sLWVA3WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:53:3c:c8:65:14:cd:d7:e6:45:4f:42:34:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=301a563fb73b95c75c3a55d26395ba7222ea58f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:68:e5:40:af:eb:1a:04:af:7e:85:c6:51:
49:7f:24:1b:63:f2:27:6d:a8:c3:e3:76:66:6b:f9:
0d:e5:3e:b6:90:65:c9:db:af:20:47:ba:d6:fc:9f:
33:65:ce:a9:12:72:b5:ae:b9:f9:ff:18:cd:99:6c:
27:c3:9f:cc:19:20:30:6d:d0:47:52:44:b9:fa:ae:
ad:7a:fb:57:fc:b7:a3:61:05:cc:8b:cd:a0:34:f6:
e6:56:67:8c:65:18:39:ea:31:b2:97:6d:98:e6:29:
bf:90:fd:fb:bb:6e:0a:53:83:64:f2:0a:1d:52:50:
27:5a:e7:ed:06:ae:25:b2:47:45:61:dc:db:6a:25:
b5:4c:e5:e8:38:94:8d:b2:6a:14:6a:18:47:f0:2f:
94:bc:fa:22:e5:bb:06:3a:c6:49:2f:f7:54:2b:c1:
74:a0:50:77:b4:61:58:c3:5e:0d:7d:15:b6:2b:8b:
61:c7:c6:88:ff:ec:9b:8f:b0:34:5b:8f:3b:b7:1d:
2f:33:93:c1:7f:0c:2e:5f:42:76:53:05:00:ad:92:
8d:22:e2:0c:93:b0:a1:0f:ef:3d:4e:b6:5f:63:f7:
2c:18:e0:32:c6:da:8f:28:f6:3b:f0:0e:17:30:90:
ec:7b:b3:e5:81:1a:dc:44:f9:45:bc:6f:2a:07:4f:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:56:3F:B7:3B:95:C7:5C:3A:55:D2:63:95:BA:72:22:EA:58:F8
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:87:09:38:c3:7e:df:0e:42:a2:49:2d:3f:5b:05:2d:6f:5c:
20:b3:eb:00:f9:35:db:3c:1d:79:3e:74:6b:44:b0:ad:0e:9c:
a8:0f:11:7c:5d:a5:ea:95:ec:96:a2:49:d8:b9:94:31:5a:a0:
96:1e:8b:61:77:e7:5d:6a:97:55:26:8b:8f:6c:4e:04:88:2f:
5a:ac:1a:35:9c:24:79:34:57:37:94:5d:5c:77:42:8f:52:ca:
4c:82:10:e3:bd:78:c5:dd:bd:4c:f7:99:ca:18:23:27:53:88:
1e:d3:2c:68:5e:5c:09:55:ab:6d:04:36:7a:37:82:ae:65:92:
12:43:00:d3:ec:29:ad:a9:ec:29:a3:e1:c8:ee:d2:ff:9d:43:
16:fc:62:27:ce:20:d5:bd:e1:dc:e7:a3:fa:b8:89:06:34:24:
ae:c3:a8:a8:56:4c:ef:15:d5:7d:9c:ed:55:aa:c1:38:fd:4c:
8c:6b:76:85:7e:ce:48:c4:3a:dd:0d:54:ef:ab:75:6c:ae:2a:
df:4a:22:ae:cf:e5:8b:8d:a2:e8:97:79:fe:8a:cb:08:f3:2b:
0b:cb:40:9e:f0:16:e5:f4:88:91:80:90:fd:ed:dd:b9:dc:ab:
22:85:01:d7:c5:bd:97:57:f5:8f:95:9e:10:6f:dd:54:17:51:
08:63:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:48 2026 by rpki-client