Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: +zoYTqd7D45rv0C+xd8A5k+bDq5zMsWfVij0buhYgtA=
Subject key identifier: 44:D4:7F:FC:75:C3:96:8A:74:4F:6B:45:95:23:85:2D:5A:0E:79:39
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019D2139139A6C6F52A531D9F770439BF88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1884
Signing time: Tue 24 Mar 2026 19:01:21 +0000
Manifest this update: Tue 24 Mar 2026 19:01:21 +0000
Manifest next update: Wed 25 Mar 2026 19:01:21 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: 0SCngEN0Z3uHXpOBJ0/NP5z1CuzSFzcTX65hX7HS9xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:39:13:9a:6c:6f:52:a5:31:d9:f7:70:43:9b:f8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Mar 24 19:01:21 2026 GMT
Not After : Mar 25 19:01:21 2026 GMT
Subject: CN=44d47ffc75c3968a744f6b459523852d5a0e7939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:d7:0a:3e:e5:8b:16:77:36:09:ac:e4:98:
65:e8:82:46:59:c8:03:99:65:61:9b:03:24:f2:a4:
74:39:14:2e:48:62:a6:a0:9e:a6:65:37:62:3e:e1:
23:75:22:e7:6c:84:57:67:9b:4d:79:bf:9f:50:06:
42:77:48:74:f9:43:6e:52:50:86:51:62:c0:85:5c:
cd:60:af:30:a9:5e:31:83:ee:c4:67:a1:92:90:62:
ab:5a:f5:48:19:1b:5e:99:5c:72:d1:87:3f:3f:2b:
d2:c0:f3:cc:d1:b1:47:ed:2e:dd:93:3c:24:af:b7:
73:09:e6:0d:b0:6d:2c:b9:4e:cd:b9:3c:32:a2:26:
9f:83:79:5c:55:a1:15:1f:04:a2:64:51:51:8b:60:
b5:ae:18:a0:60:bf:aa:16:cd:21:4d:a7:9a:7c:d1:
78:af:b6:65:13:3b:73:02:c8:02:76:b9:4a:79:57:
b1:25:62:3a:b6:b1:eb:62:24:3f:a3:6a:90:07:e6:
2d:76:13:bd:28:5a:a1:d2:10:6e:2a:94:00:f9:9e:
a0:c0:b9:a7:7d:f9:c9:3c:87:33:f4:82:e7:00:b9:
eb:88:95:cf:d3:17:49:31:de:09:23:8e:3b:69:78:
f9:b4:27:96:5d:2a:80:1b:ad:0d:e6:ef:ea:8b:d2:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:7F:FC:75:C3:96:8A:74:4F:6B:45:95:23:85:2D:5A:0E:79:39
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:27:0f:12:50:b9:48:f1:77:00:08:1b:c7:d0:f0:ab:2f:
a7:e2:e0:4d:37:3d:5a:24:da:66:0b:17:44:4d:43:02:1f:ef:
29:b9:3e:de:64:f0:ed:99:23:3f:d8:15:2a:16:eb:30:bf:90:
da:2e:a2:5f:09:9f:8e:82:2b:40:1e:b7:c5:01:bc:8d:62:22:
e5:13:77:c7:86:3a:cc:3c:7b:c6:c1:43:63:d2:1f:b4:d6:8e:
b2:84:df:b1:97:b5:e3:2d:cb:f5:f0:fb:d3:24:be:f6:81:ff:
4c:3b:eb:2c:32:a3:cf:8b:c0:10:a4:39:2c:98:b2:b0:87:93:
86:cb:d1:4f:9f:9f:77:de:9b:a4:6b:7d:29:99:52:2f:02:c0:
a3:da:d8:92:2a:25:ce:ca:9d:42:c1:b7:d5:c4:09:91:0a:72:
24:b7:c0:48:14:da:36:37:24:75:92:46:73:26:ec:43:70:1e:
e2:9c:a2:04:fe:41:20:d1:5d:aa:0c:76:1c:39:90:d2:6e:08:
15:a2:14:5e:3c:62:8c:9d:38:42:0c:b1:b4:98:bb:55:ba:08:
48:a0:39:7b:0d:16:1d:30:89:bc:ee:1a:9c:32:ef:df:b5:c7:
59:0f:a7:27:3b:d6:d8:22:ad:93:95:89:32:bd:28:09:9d:dc:
b4:2c:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 23:51:40 2026 by rpki-client