
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: fwt0a3gwiUHYbs9JhmxAzLvF1LeDiy+ArrwNdtiqzs4=
Subject key identifier: 65:43:EE:66:80:BC:FF:A5:31:E2:1F:70:C8:8A:62:61:C8:0A:A0:DB
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019E2C5E6C7AF5CF2F1892FCC9A110214472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0658
Signing time: Fri 15 May 2026 16:00:46 +0000
Manifest this update: Fri 15 May 2026 16:00:46 +0000
Manifest next update: Sat 16 May 2026 16:00:46 +0000
Files and hashes: 1: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: 50b1ouQ77BTuY8m2OI48aLbP2fiKWJAAy973WXgsBt4=)
2: ctX13MCDTFxSJqqj4g1CgV7ikV0.roa (hash: dKz1YONEo4g6uW+Dn8oWhaxf6UY6myYCgidhSeWQwoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:5e:6c:7a:f5:cf:2f:18:92:fc:c9:a1:10:21:44:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: May 15 16:00:46 2026 GMT
Not After : May 16 16:00:46 2026 GMT
Subject: CN=6543ee6680bcffa531e21f70c88a6261c80aa0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:26:ec:14:62:8b:ae:ab:a1:98:fe:ff:09:
67:55:95:81:a9:d2:9a:33:76:37:24:6b:88:ef:94:
ce:44:1b:ee:39:c6:69:b0:4b:c5:d8:60:82:46:e1:
40:1d:76:0d:8a:ff:73:e9:92:3f:5b:4c:1c:f2:ef:
ed:0f:51:5f:3d:a0:33:e7:98:df:f8:1c:a2:d2:d0:
7a:fd:e6:85:58:c6:4d:99:e5:1e:b7:ea:a1:fc:79:
ea:09:67:fb:2d:76:f8:cd:34:d0:f4:a2:09:22:06:
a2:d5:df:a3:f2:da:9d:fb:65:aa:98:c7:cf:67:40:
99:00:0f:c5:04:bd:45:22:5c:9b:6d:11:06:d1:c1:
18:3e:eb:54:37:c7:7c:cc:2b:e6:0f:b5:67:8c:64:
a4:93:3d:ff:5a:30:d5:36:bf:d0:f6:3a:31:6c:ba:
77:db:a1:07:ff:76:4b:d3:0c:2d:1d:e9:92:80:f2:
09:71:eb:94:94:0a:0f:a0:11:63:ed:72:ea:22:ba:
5a:e5:85:11:b9:a4:18:ca:7c:bb:40:10:34:04:1e:
85:64:50:fb:c6:2f:52:7a:cc:4c:fb:e0:96:26:01:
cc:4a:34:fb:0e:5a:df:57:c0:18:7e:36:f9:fb:47:
00:9f:62:ec:44:3b:14:79:da:81:09:cb:30:f5:22:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:EE:66:80:BC:FF:A5:31:E2:1F:70:C8:8A:62:61:C8:0A:A0:DB
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4e:a4:65:93:fc:1f:14:79:42:35:8c:d6:8d:20:ab:6d:50:
ac:e1:ec:89:61:2a:dd:49:24:ee:96:54:f1:bc:3c:2a:13:d0:
54:35:f4:0f:5f:b5:3e:ae:3d:df:af:57:14:2c:5f:46:71:a2:
f2:e2:a3:81:c6:cc:e5:74:11:6d:e6:9d:e9:c6:a7:4a:d1:10:
08:57:0f:ed:92:36:e5:94:ad:a2:b6:86:3c:35:f6:4a:bb:97:
b1:25:ea:07:fc:ff:d4:02:7f:eb:50:43:3e:4b:34:9b:71:05:
1f:95:bf:35:bb:2d:a6:35:fa:13:71:64:ed:7b:32:25:8f:35:
47:75:c5:40:79:26:79:4c:0c:af:01:ac:df:b4:16:61:40:8e:
96:2e:77:ad:a3:e9:00:00:40:bd:a1:84:de:57:1b:20:ae:fd:
ba:8f:1a:8a:15:f0:23:ca:9f:94:d2:bc:6d:ec:34:b6:e1:b4:
d6:b1:ed:bb:3e:5f:34:22:99:cc:69:4f:11:4d:ce:0d:f1:49:
4c:1a:09:09:00:7e:61:c6:31:99:ec:6c:0c:4b:80:73:24:cb:
0f:ce:c1:fa:a4:ea:69:1a:3e:65:12:5e:52:95:6c:79:5e:fe:
6a:10:c0:44:5b:73:e1:d4:02:be:a6:da:59:90:9f:43:2c:36:
ae:2d:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:16 2026 by rpki-client