Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: UUFTrlQYxlXeoGzju92+X5rVEjN9tuohfR/rXk1lu2U=
Subject key identifier: DD:1D:CE:BC:85:A5:DC:08:FF:62:A8:2A:A0:9B:33:49:F3:95:5A:AA
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019EBAA2EB099CF0A01BA69BC5D109C14FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 07:01:39 +0000
Manifest this update: Fri 12 Jun 2026 07:01:39 +0000
Manifest next update: Sat 13 Jun 2026 07:01:39 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: pKDtha4QV4HYuz9GbGD4QnMd6AaVm05rLcQERQ3TVI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:eb:09:9c:f0:a0:1b:a6:9b:c5:d1:09:c1:4f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jun 12 07:01:39 2026 GMT
Not After : Jun 13 07:01:39 2026 GMT
Subject: CN=dd1dcebc85a5dc08ff62a82aa09b3349f3955aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:1d:ba:b1:5a:3f:da:80:a8:56:5e:19:8d:
0e:1e:48:c4:21:1e:c2:22:79:84:1a:ec:7b:9e:15:
4b:8d:a6:a8:67:06:98:d7:2c:e4:a7:63:83:2e:96:
b9:00:2f:73:99:a2:f8:c6:bb:10:a9:ac:9a:f1:18:
c2:00:c8:52:8c:16:46:e2:43:14:27:11:e8:c9:94:
42:4b:9d:08:fb:3d:1f:6b:5e:8d:6d:e9:c7:2c:30:
ec:d3:d7:89:78:a3:18:d9:0b:14:75:96:b3:f6:cf:
03:b6:be:11:ee:2f:bd:bb:74:87:e2:54:7a:80:ae:
1b:4f:93:a1:6f:9b:2d:a3:8a:d3:f2:33:54:d9:d1:
a4:97:e7:2a:a8:a3:25:26:f0:8d:6d:e6:70:1d:b4:
95:b1:8b:14:18:4f:00:db:3b:1c:1b:79:b4:c6:fe:
b7:99:a2:2f:19:92:8b:26:b4:e1:62:40:cd:85:d9:
4e:0d:ad:db:7e:77:80:b8:05:87:74:4f:e3:97:0b:
5a:39:77:d7:23:ee:ba:a2:ba:45:fb:20:42:b7:be:
25:25:0f:5a:4b:fa:e8:02:f3:54:24:7c:9b:f4:a0:
3a:53:60:ae:79:af:7d:d3:12:ee:e1:17:09:72:9a:
c4:1a:93:7b:5d:0f:3b:b0:d4:0a:09:e0:fd:6a:68:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:CE:BC:85:A5:DC:08:FF:62:A8:2A:A0:9B:33:49:F3:95:5A:AA
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5b:ef:5f:1d:d3:24:b2:5a:c9:8a:c9:b1:57:8f:b4:97:eb:
77:b1:10:d4:66:80:1a:37:a2:62:60:4e:19:33:1b:02:72:a2:
8c:ab:52:a0:e5:85:18:76:4f:dd:b8:01:a0:d4:d4:fd:00:7f:
7e:66:87:8b:9f:cb:20:b4:89:59:b7:83:dc:5e:d6:6a:77:ed:
4d:58:82:cf:33:6f:7b:ef:f4:b7:23:44:2f:e0:be:3c:82:fd:
2a:04:9a:3c:dc:56:c1:90:a0:b1:8a:5d:1c:8e:58:9c:ee:72:
0b:da:e6:5f:27:46:af:51:d8:44:9c:61:4a:37:9a:5a:25:b1:
87:5c:4d:ad:0d:70:3b:8e:3f:83:7f:f8:92:3a:57:4d:09:f6:
73:29:52:4f:5d:51:6d:50:8e:6c:93:08:4e:f1:e9:0c:df:a6:
fe:2d:91:35:05:3c:02:f6:62:f7:df:18:e0:c1:ce:9d:34:ea:
82:9c:25:a5:29:3a:08:4e:8a:5a:1c:68:30:5d:66:05:e8:02:
6e:71:7c:98:15:38:e0:4b:73:9a:97:c5:d3:89:65:64:cb:b5:
48:45:4c:ae:e7:65:45:3e:06:5d:d4:74:0a:1a:94:33:f8:cc:
18:f3:ea:27:a2:c9:5b:e6:36:28:86:92:d5:27:4a:c6:f6:d5:
0f:cc:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:07:33 2026 by rpki-client