Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: CA4/DjwQCfIdQ7PHWq/k3LDXSh4VTvB9kWkVX+E65oE=
Subject key identifier: 13:E0:1B:B2:02:BC:73:36:D7:7A:C9:F9:44:FB:91:93:64:AC:75:E1
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019D3909CD1C156189BD9FBE4C2FDF3A485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0812
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: bzCNzZZ6QMkzOttSjfd5TXnrmqK2/P4klThA+wrvVRQ=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cd:1c:15:61:89:bd:9f:be:4c:2f:df:3a:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=13e01bb202bc7336d77ac9f944fb919364ac75e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:4a:9e:90:8c:22:3c:cc:c9:53:ed:fc:a8:
3a:14:ec:cd:3e:41:16:e7:99:64:9b:74:22:ff:ed:
1b:a1:b5:13:c6:a1:3b:ed:17:25:4f:37:15:24:1e:
db:50:32:b3:32:09:5b:b9:a2:17:f2:24:d0:fc:63:
d6:0d:fc:81:41:84:d2:9e:4e:22:ef:fd:5e:23:2d:
37:03:55:26:93:9d:3a:28:76:c0:d2:f8:bd:7c:8e:
d1:52:ae:5e:b0:10:7f:f8:b0:ec:9f:b6:56:a8:1d:
37:61:2c:e1:de:88:7d:1e:2c:51:e6:da:71:83:30:
ec:46:c1:26:0d:d0:47:6e:ad:b0:d6:9b:7f:75:5f:
66:4a:4c:b5:a8:a6:b7:cc:75:a4:33:f9:39:14:e9:
f4:42:5a:7c:b2:56:fa:07:79:c1:8b:e9:79:3b:d1:
fa:2a:56:8c:1a:e8:b2:b2:b2:c7:ed:29:99:9a:75:
d9:32:48:01:7c:f0:cb:61:72:cc:35:a0:45:b2:7f:
60:2b:52:4f:18:d0:11:09:90:8b:04:b2:09:c8:91:
89:d5:ae:b6:dc:71:ec:48:80:72:1b:16:db:49:9e:
41:ad:85:7a:8f:dc:e9:1d:74:15:60:2a:e5:20:47:
75:0b:39:cb:12:2c:33:1c:a3:89:a3:69:71:e6:c1:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:1B:B2:02:BC:73:36:D7:7A:C9:F9:44:FB:91:93:64:AC:75:E1
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bb:ae:55:cf:18:7c:f7:e5:5a:18:cc:7e:d2:ca:2a:fe:93:
c0:61:1d:7c:a5:50:77:6c:60:a5:ba:c1:2f:af:19:77:51:70:
fc:45:9a:1a:9b:d9:a7:10:79:96:4d:84:af:c2:62:9e:97:29:
75:24:04:4c:d2:58:0c:a0:bb:5c:0c:5c:38:58:bd:d7:8f:0d:
1c:f0:72:9d:67:48:27:8c:e8:1c:79:f8:bb:25:74:ff:fd:aa:
5d:91:04:6f:4e:3f:54:64:85:f6:4b:1f:7a:fa:1e:13:2d:73:
01:0b:e5:cf:bf:29:e6:f8:37:c6:33:75:db:ee:f5:1e:a4:09:
ff:02:ab:c1:9b:ca:d2:df:0e:0c:ba:95:82:47:e1:fd:cc:e2:
71:18:34:cb:93:ef:6d:ac:e9:43:8d:ed:fa:99:87:0d:94:76:
ba:0a:32:ab:d7:35:3c:5e:75:21:16:5a:c1:f3:36:6f:7b:39:
01:d0:a7:6e:a6:cc:a4:a8:7e:b2:eb:40:11:27:90:aa:05:b2:
07:57:f7:8b:e7:9f:34:c2:66:e5:18:63:03:11:bf:d2:c5:53:
65:f1:2d:f4:be:0b:75:0f:0e:3e:10:f8:e0:29:4d:08:10:cb:
10:35:9f:e1:b1:64:cd:ec:6c:50:4a:5c:9d:9b:a9:37:9b:1d:
ea:85:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:39 2026 by rpki-client