Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: jvBnrOXQKpM9iky+khpC21nBdieq70dl9dIRxjovaSk=
Subject key identifier: BE:9C:42:2E:19:4B:78:A1:7D:2B:42:3C:8A:D3:06:A5:3D:F5:C6:92
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019DA867A80597CA3D05BEBE8F1F14E72750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 1938
Signing time: Mon 20 Apr 2026 01:00:58 +0000
Manifest this update: Mon 20 Apr 2026 01:00:58 +0000
Manifest next update: Tue 21 Apr 2026 01:00:58 +0000
Files and hashes: 1: 5P1wGtB85HxirMIBYnTtfNp_BtI.roa (hash: t+c+B7cr2MGabIHzLXA82hUcSDP2mV2mZWJBmkVbzNA=)
2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: SJPO9ojtF5o/7w9VWxW5j23Qy9Agz5DGUvnCA+n4sSk=)
6: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
7: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:a8:05:97:ca:3d:05:be:be:8f:1f:14:e7:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Apr 20 01:00:58 2026 GMT
Not After : Apr 21 01:00:58 2026 GMT
Subject: CN=be9c422e194b78a17d2b423c8ad306a53df5c692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:af:17:37:8c:17:04:01:80:93:44:17:45:
71:7e:42:e5:da:90:1a:b7:9d:61:db:6e:84:af:e1:
dd:77:82:7b:a9:5b:0c:bf:e0:18:e7:fe:73:84:af:
d9:40:4a:8c:1d:e3:ac:d3:16:36:cd:71:fa:07:21:
ed:71:70:9a:88:7f:a7:bc:cc:2d:51:21:c5:dd:ac:
90:5f:2d:f5:02:93:69:53:12:fe:23:90:50:5e:aa:
67:8a:a6:a4:a3:3b:01:ab:94:5c:18:0f:85:2c:83:
e3:ef:00:83:d8:2c:4a:44:2a:c9:57:04:3f:38:96:
53:a5:20:4c:a3:aa:19:61:73:ee:6d:f5:50:a4:d6:
7d:bf:60:4b:1c:71:3b:81:e3:6d:09:21:52:aa:98:
2e:70:be:02:15:cf:e1:5f:e3:4d:92:56:5a:ec:a8:
14:0c:95:4d:3c:19:d8:32:83:69:ee:48:0a:31:07:
b4:42:c4:4c:52:60:e9:cd:c4:a9:62:d4:93:38:1a:
ee:96:5f:de:b5:3a:5a:d5:61:4b:6b:89:90:6c:29:
ed:97:16:a7:75:e9:b6:a3:1c:cf:2c:7f:72:21:d1:
8d:39:99:75:60:14:54:13:22:df:e9:bf:88:54:c7:
a1:6b:71:fc:83:92:1b:90:cc:bf:2b:c1:bd:aa:22:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:42:2E:19:4B:78:A1:7D:2B:42:3C:8A:D3:06:A5:3D:F5:C6:92
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2a:7f:dd:9b:05:21:42:2b:29:68:05:a9:55:37:15:b6:a4:
bd:47:17:7f:b7:ac:6c:f9:f4:be:38:d2:0a:e3:ee:bc:b2:57:
c8:ad:c7:db:61:ea:89:f8:b9:4a:59:79:1c:17:1a:09:44:5b:
e5:94:bc:9a:b3:d1:93:f9:77:3d:36:47:7e:94:e4:02:09:a4:
84:07:de:fb:80:11:13:2d:3c:60:55:d3:3c:1e:8a:8d:de:84:
bd:44:83:23:30:08:be:d0:db:4b:99:be:d7:1f:b2:f6:4d:4a:
83:df:fb:c3:b2:77:f9:71:a8:45:e6:f6:fa:1a:e8:b8:35:73:
ad:12:0f:d3:45:a8:c7:4c:8d:ef:31:e7:ad:d1:e5:03:b3:64:
29:6a:f8:2e:78:9d:db:b2:c3:92:91:72:d9:4e:5e:fe:95:b7:
a7:d5:22:af:4f:2e:48:ef:46:2d:35:1d:73:16:4b:9e:a8:e1:
99:61:cf:5b:aa:d4:42:24:36:60:0e:d4:08:fa:eb:c4:bd:72:
66:24:6c:d0:0a:ff:19:59:91:7c:d5:9f:07:74:10:76:6d:1a:
34:1b:6a:3c:14:92:8f:ac:46:15:2f:43:26:97:00:95:c5:07:
b3:e4:80:44:4a:ba:3e:d2:ad:08:68:60:bc:04:b7:60:4c:6f:
d8:ca:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:49:38 2026 by rpki-client