Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: zc4RqCQkrhXPtxm3s8W1m+d8SX4WGbPxpZ3ZHx9XZV8=
Subject key identifier: C5:DF:67:10:E5:70:49:BF:81:EA:E1:10:AC:3C:D9:BB:D5:32:A3:FA
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 019D3977D442C3B80E4CF4BFA777DFC1DA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 1169
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: ZhJ5L5BrKwHCfAkrdgSHGKVEGLQ.roa (hash: LrOGWQlYoODl2o5Zz7qsJzTT29X+TmzrpsnPFdEc10c=)
2: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: OPOWPChVsSMFnlaFcMuQkKsHH1awpkr/QpTc41Z3Pw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d4:42:c3:b8:0e:4c:f4:bf:a7:77:df:c1:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=c5df6710e57049bf81eae110ac3cd9bbd532a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:a1:1c:70:fe:b7:6a:b2:fe:69:cd:17:bb:
aa:89:67:1e:11:71:e2:6a:fa:cb:b3:cc:20:bb:de:
91:0b:63:d8:34:0c:5d:66:ca:59:b8:b3:dc:96:ed:
3e:63:84:c5:3c:5d:3e:08:bf:59:93:bd:89:8e:93:
c3:b2:09:74:54:8b:ec:35:02:04:8a:e3:49:12:8c:
8a:38:aa:53:2f:57:3c:d6:b1:09:12:10:bc:51:b3:
fe:e9:e1:2e:e7:e4:21:36:ad:81:9b:a4:04:93:89:
e2:f7:c7:9d:bb:30:22:64:12:ad:35:f1:4a:9c:ce:
22:ca:cf:7e:d0:0f:bf:3a:17:7d:2a:9e:73:8c:78:
c8:7f:d6:1c:00:3d:88:b7:59:1d:77:bd:66:4a:90:
dd:fb:c4:f1:4f:ad:80:58:14:41:f8:d0:bc:cc:ac:
e7:ce:aa:34:1b:88:43:d4:e2:c9:b6:07:cf:56:09:
40:7b:1f:c6:7a:9b:37:c4:5d:a8:22:5c:f3:fc:c0:
77:38:46:04:db:af:d8:6e:40:73:c8:60:d0:04:d4:
72:4f:81:10:f5:98:5f:e2:aa:fa:eb:67:26:ea:eb:
38:d3:fc:24:cc:9d:6c:a3:ec:f2:1c:bb:af:72:da:
23:72:22:e8:fc:8b:eb:fb:fa:23:fb:06:98:6e:18:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:67:10:E5:70:49:BF:81:EA:E1:10:AC:3C:D9:BB:D5:32:A3:FA
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:13:64:c2:d6:1a:e0:9f:5b:44:5b:39:75:92:fe:a0:40:3d:
aa:2b:b3:93:d3:e3:13:3f:6d:93:ac:ef:d3:d1:94:59:25:dc:
4d:5c:ac:1b:c5:9d:8d:33:64:b3:d4:ed:64:37:27:6f:25:17:
3c:a9:71:3e:54:bf:49:e5:c4:8a:ea:e4:23:12:d7:2f:02:84:
25:cd:d6:d0:12:29:5d:dd:6c:6f:4e:12:b6:07:50:bc:83:69:
93:2b:37:f6:54:8c:03:95:ac:72:ca:99:95:a6:33:e0:3e:ff:
94:09:e4:1b:62:43:92:47:fa:1b:ae:d0:63:1c:1e:4c:4d:5a:
a1:db:35:07:d1:34:cd:cb:25:9d:80:59:cc:f1:6b:d0:55:d1:
12:2a:77:57:54:2c:ef:dc:a6:d2:3c:96:fb:01:b2:89:fd:61:
8b:f9:cc:fd:79:f6:8a:ec:01:9f:9c:ff:03:b2:69:a7:f8:7b:
5c:81:64:4c:12:81:bd:8f:c0:68:b8:6d:18:84:e2:97:36:c1:
6f:51:9d:d1:9e:2a:e2:9b:cd:e1:7f:c8:35:82:32:15:90:74:
7f:e4:35:a9:f1:ea:0d:9c:32:ef:53:5f:d0:10:26:59:0a:f9:
e5:b5:1d:ca:81:b1:c9:f2:38:29:43:3e:01:75:8a:68:cf:eb:
89:ce:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:04 2026 by rpki-client