Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: eBmgNsxEEQRMp585nJVk0SVLEEIVBVk8icUC3NyLS1Q=
Subject key identifier: C2:0F:EF:8E:6C:9E:67:5E:67:EF:E0:EC:F8:DF:4A:0F:10:FF:94:D1
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019FA260DCA1776C6CC6ABF66290E1E7BA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 07:01:24 +0000
Manifest this update: Mon 27 Jul 2026 07:01:24 +0000
Manifest next update: Tue 28 Jul 2026 07:01:24 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: 42IijD97X2AihN5wp9eqFL/Eg+gEAPikM/qRpBosHOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:dc:a1:77:6c:6c:c6:ab:f6:62:90:e1:e7:ba:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jul 27 07:01:24 2026 GMT
Not After : Jul 28 07:01:24 2026 GMT
Subject: CN=c20fef8e6c9e675e67efe0ecf8df4a0f10ff94d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:c0:64:1d:72:35:38:74:3a:47:32:b2:09:
2c:bf:82:20:6b:ef:aa:6d:2e:82:b2:0a:58:e8:37:
21:f3:ca:2c:f1:93:44:b0:0a:50:cd:57:88:7b:2a:
7a:a1:b4:bf:65:dd:ae:1a:2e:a1:99:82:5b:7a:40:
67:5b:f1:d9:bd:b0:31:d5:58:c2:f3:f5:d4:7d:e3:
b3:32:e6:cb:09:9e:60:21:65:1d:f0:1f:c3:12:e5:
04:14:2f:ec:40:6f:73:8a:e3:4d:21:be:01:6b:c3:
2c:c5:a6:28:e0:9e:12:d9:a1:47:9a:7f:86:28:9a:
53:59:13:ef:a9:70:6c:4c:e0:21:ab:c5:47:72:01:
96:cc:9f:70:60:4c:5b:77:89:15:c3:dc:b4:7b:26:
3f:c1:35:c7:b7:bf:c2:fe:e8:2d:6a:9e:6b:dc:9f:
ec:ba:27:f3:e4:e9:91:77:2c:78:fe:50:f5:1e:73:
e6:69:14:9c:a1:20:96:53:d9:14:40:6b:db:a6:0f:
86:bc:2c:cd:0c:71:df:8e:81:5e:fe:ce:45:1d:88:
ee:00:53:6b:ba:ca:9b:d1:75:f4:c4:e4:b5:c2:67:
a7:d2:d4:5c:d6:58:80:68:d6:a5:ce:87:a5:71:6c:
22:76:ed:1d:d4:ed:0c:b7:e2:9e:8b:8a:21:09:f6:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0F:EF:8E:6C:9E:67:5E:67:EF:E0:EC:F8:DF:4A:0F:10:FF:94:D1
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:ab:58:92:7e:61:b6:3b:fd:41:ad:74:37:61:18:a8:93:
23:62:b1:96:d3:1a:c8:fe:e1:f5:f7:d4:62:84:5d:89:9f:19:
1b:ff:2c:04:3c:fb:6d:40:7f:47:84:15:7c:4e:b7:e6:78:4c:
82:39:e7:d0:7f:be:0b:c3:d5:22:90:b8:f6:a4:22:41:96:12:
fa:bc:86:57:0c:c3:cc:5a:ab:ca:3b:4e:e8:52:2d:9e:f8:33:
7b:42:63:c3:c3:a2:99:d6:c9:0a:6c:6e:de:53:17:01:35:a1:
d2:a9:58:c7:c9:51:da:75:b3:72:4a:27:eb:9a:da:ef:51:22:
19:7b:65:d0:a2:1a:c5:0b:56:d0:4e:fc:0e:a3:59:56:fd:c4:
88:fb:66:1b:f7:20:2d:fc:bf:1a:e2:bb:c4:6d:d2:c8:3d:c3:
fc:e4:db:60:a9:3a:2b:00:a4:f6:8a:50:93:84:1d:47:d6:41:
1a:5e:e4:56:bf:52:9b:a5:8a:b0:bf:32:5a:20:63:7c:2b:26:
0f:db:82:14:c5:36:66:ba:21:e2:47:df:c8:6b:34:6b:b8:78:
6f:a6:f1:e5:4b:42:bf:30:03:cb:e7:c5:eb:92:aa:fd:d2:27:
22:65:a9:c1:16:55:2e:9b:8e:68:0a:b6:f1:cb:d0:65:78:9e:
53:81:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:30:44 2026 by rpki-client