Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: iaQGVQ5ZPj8h9Zgm591FKb0BM5OKZIleUnwmrTBekH8=
Subject key identifier: 14:21:1C:A6:BA:39:1A:6F:6E:9D:7B:14:1E:8D:E0:B3:2C:77:A6:BD
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01A08DFC063BCA725B4682D4A50C8013F014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 01:01:39 +0000
Manifest this update: Fri 11 Sep 2026 01:01:39 +0000
Manifest next update: Sat 12 Sep 2026 01:01:39 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: or5GQoD2iEyWB9sRaWEM7xDTC+Pwg3oJSNNZmI18GfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fc:06:3b:ca:72:5b:46:82:d4:a5:0c:80:13:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Sep 11 01:01:39 2026 GMT
Not After : Sep 12 01:01:39 2026 GMT
Subject: CN=14211ca6ba391a6f6e9d7b141e8de0b32c77a6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:51:d6:4a:f9:29:fa:e2:3e:a6:d5:31:89:
a7:d5:ba:7c:fc:ba:fe:00:7e:be:b6:da:8f:dd:ec:
66:2a:cc:bb:5a:2e:6d:25:81:2b:03:05:a1:05:d3:
cb:e5:43:7c:72:1d:f0:de:27:7a:2b:0c:7d:1e:b1:
70:d0:62:a9:4f:e8:85:32:6c:01:c0:64:73:9b:eb:
c1:e3:6a:14:18:1b:2c:14:e5:09:1c:87:1a:4b:36:
3a:e0:8d:50:6e:f5:d6:1b:43:ed:06:3d:8f:90:97:
b1:f8:49:ae:40:d9:fd:18:8d:56:8f:31:7a:f0:f6:
10:f8:10:7c:0b:22:59:11:38:12:ab:38:2e:fe:27:
85:d7:da:9c:55:5a:90:19:6a:05:dd:2a:3d:a1:90:
a9:ff:c5:90:23:c4:00:9b:38:d1:44:09:68:94:b6:
6c:02:51:5d:ea:dd:bc:87:bc:52:2e:4b:27:c7:99:
d5:65:77:2d:c7:e0:b7:15:06:59:e3:b6:3d:23:37:
ec:ad:ae:30:52:f6:53:87:dc:0a:9a:b6:1b:ef:41:
f1:20:67:7e:46:71:34:b5:36:a8:d9:f5:bc:f9:13:
f8:6c:6f:b7:c9:79:4e:1b:d1:07:9c:7b:5c:0c:b3:
59:0e:ae:e0:07:60:37:29:f8:55:98:2b:35:1b:c7:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:1C:A6:BA:39:1A:6F:6E:9D:7B:14:1E:8D:E0:B3:2C:77:A6:BD
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:58:07:fb:b1:fd:ec:27:21:83:b9:14:7e:7e:71:f5:58:96:
dd:8f:de:63:22:20:c6:35:3c:1b:e0:93:42:a1:ff:e7:2d:0f:
51:36:cf:c4:18:ac:27:77:9a:08:68:a3:10:b0:af:62:e8:8c:
97:20:7c:1c:ca:57:5a:ce:34:a1:6f:73:8f:b3:b6:5b:fc:a4:
90:05:77:44:a5:5c:56:17:41:86:f2:aa:9d:f2:fc:8b:14:3f:
14:7a:fc:a7:ba:fc:0f:5e:db:92:01:21:4e:22:86:9f:23:3e:
34:fa:6c:f4:f0:42:71:10:f1:3e:5b:e9:8f:74:00:1f:55:31:
91:ce:a8:35:02:7d:b6:3e:aa:d8:b4:63:af:86:77:9b:d3:0b:
f5:c5:03:bf:8e:62:b4:f5:f7:4d:1d:29:75:8a:d1:be:21:de:
62:9e:2d:f4:35:71:ee:5b:22:63:a4:94:95:d9:97:33:61:b8:
db:28:18:14:20:d1:eb:6b:41:b3:b4:27:bf:e5:87:c4:ec:c1:
15:1c:bf:06:63:e7:d0:c9:1b:d7:8b:9e:fe:73:3a:bc:56:99:
33:1c:3c:e0:f7:bd:a6:dc:a1:13:1f:c4:af:28:d7:93:37:d6:
cf:51:2b:bd:5a:45:90:52:d2:64:fe:31:b4:51:50:a1:8f:5f:
69:4d:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:11 2026 by rpki-client