Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier: dknPPnbht0MIb593s0kmfZ/QxetNgW67gz9Y89XKtaU=
Subject key identifier: 99:95:96:1A:E7:F1:18:CF:9F:F4:7F:B8:C0:11:86:10:C8:D9:47:D7
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial: 019D38D2D49848B9802BE1460316B014F63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number: 13D1
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: 07rXMz57aCvPfzZgqTtv0tfd--k.roa (hash: Zf7FLTeUlrTimYkYJqQH9p6Rab0OTFZZ2orzaq4XoQw=)
2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: ZiNIpc3n2nhW+vkcPCeaMHyWSZ7sjj9wO1kQeKgWfOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d4:98:48:b9:80:2b:e1:46:03:16:b0:14:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=9995961ae7f118cf9ff47fb8c0118610c8d947d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:cf:8d:c0:43:98:c1:fc:20:52:e4:f7:3b:
96:5c:2f:3c:93:de:3b:12:58:c0:59:c8:52:93:f1:
7b:a0:40:33:0f:e7:22:4e:5d:9b:ed:5a:fc:98:c8:
fc:9c:f1:dd:b1:f4:c3:21:85:da:70:b2:8a:ef:42:
e3:d6:11:a7:61:7c:c9:2f:cf:3d:bd:90:02:ed:cd:
dc:a6:40:0b:d6:38:6f:56:45:81:fd:ea:0c:f4:ab:
cc:60:d8:6a:93:5b:4a:8e:7d:1b:a0:f9:17:d9:ca:
89:12:6d:36:53:c0:e3:3d:85:9a:57:a2:59:76:b9:
ea:a2:34:65:91:a3:6d:3b:7a:1b:b2:99:7f:12:b3:
de:ee:72:08:af:9d:2c:f1:9a:ba:b2:bc:18:15:42:
1f:fd:71:3a:98:1b:6e:58:32:4c:06:87:14:fe:ad:
1f:0e:c8:4b:f0:26:65:2a:00:82:5a:5a:33:e5:6d:
9f:63:2b:e3:fc:10:36:0e:54:3b:1e:87:83:39:8b:
11:d9:dd:f9:f0:a6:18:f6:70:20:20:61:65:78:12:
53:bd:d9:8f:dc:f1:00:74:d1:19:8a:bc:6d:e4:46:
d1:39:13:51:0f:f1:07:a0:70:57:36:70:8a:52:2b:
98:ba:36:30:08:e0:e7:0c:22:51:65:3f:07:a4:e7:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:95:96:1A:E7:F1:18:CF:9F:F4:7F:B8:C0:11:86:10:C8:D9:47:D7
X509v3 Authority Key Identifier:
keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:b0:66:3d:6b:15:68:8a:52:6a:bf:13:33:d3:8f:a6:5e:
84:1f:63:79:88:fe:fd:d6:89:7a:74:17:04:c7:d2:a3:79:0d:
b5:4d:c4:bf:be:34:83:f0:86:7b:30:7e:a1:e8:73:af:dc:92:
dc:7d:a7:4c:52:7c:72:7e:a2:19:fb:b3:21:1f:52:76:75:f7:
2a:b2:38:ba:fe:c7:43:67:50:62:c8:a7:ab:d3:70:36:74:5f:
d3:cb:38:4e:f1:57:ea:70:df:42:e4:ec:3f:58:53:ed:3d:ef:
ed:46:04:dc:23:ea:b9:7d:b7:42:b2:22:8a:13:22:82:19:85:
52:bd:e9:b1:01:10:69:ce:20:31:cf:c3:62:a1:6c:67:91:62:
c8:d6:fc:43:07:e0:ac:a9:a5:ef:01:24:70:e1:2b:e6:e3:70:
59:c8:ce:c3:cf:3d:26:c7:39:72:18:32:29:8c:60:34:76:1d:
48:79:00:3c:1c:94:e5:1a:ac:0d:1d:50:76:66:84:c4:c2:fc:
0b:4e:37:0c:c7:2a:93:17:28:3e:df:38:31:24:a5:9c:44:92:
0b:40:6d:57:20:18:c8:f7:e8:cd:11:25:90:bc:bb:dc:56:6d:
7f:db:d0:98:ab:36:6e:b8:b0:0e:b2:66:db:a2:3e:24:1d:15:
12:43:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:19 2026 by rpki-client