Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: DgMdwGPqklJNptePwMvr+I7FIoLWZY3541+Z8lWJqWs=
Subject key identifier: 44:49:AF:95:27:3F:4B:CB:BD:5D:05:4B:59:31:93:A2:36:ED:49:29
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 019D371B5CB2DF621047D60E6D9FECBC7227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 01:00:33 +0000
Manifest this update: Sun 29 Mar 2026 01:00:33 +0000
Manifest next update: Mon 30 Mar 2026 01:00:33 +0000
Files and hashes: 1: B5RT0XtewP8cK9bXYSGvr5I78ZE.roa (hash: BqZxPf+eE3tSK4x6XVJzraCKqqoFgKdx7BkdQiQzZ6M=)
2: E5bBysMKSA1fmFGTZ4YTELHyIyo.roa (hash: 9+nbl69b4mD21SV0cAnWG05018xchGUSGZ1kN6eC+5U=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: 0E4ZdUKkU32+/fdooIjzxyDVmape0wi5DM4IFqx0Nc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5c:b2:df:62:10:47:d6:0e:6d:9f:ec:bc:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Mar 29 01:00:33 2026 GMT
Not After : Mar 30 01:00:33 2026 GMT
Subject: CN=4449af95273f4bcbbd5d054b593193a236ed4929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:85:71:42:57:3d:4c:f0:f9:23:62:c8:3f:
5e:86:91:f4:7c:eb:00:fb:4a:dd:ff:06:69:5b:f5:
d6:68:76:27:ac:b6:24:cf:98:02:f9:62:02:04:b8:
dc:80:25:87:e1:47:f4:b7:4e:64:8a:97:f4:73:c7:
2e:4a:9c:ce:76:1f:46:a5:34:e0:ba:1b:b9:55:d0:
cc:fe:66:f2:0e:c6:a9:57:60:04:cd:22:8e:65:e4:
a7:4d:e9:d4:84:25:33:50:b6:55:62:2f:e7:e6:f0:
61:d2:e8:43:cb:f2:80:06:df:b8:0f:53:1e:29:a7:
89:23:a4:18:b9:57:c7:13:f5:df:be:67:36:ca:c0:
93:9d:54:8d:fd:ef:8d:67:31:12:01:ab:4d:5d:63:
1f:9a:97:a5:34:36:aa:3f:41:1a:0c:a3:a8:38:cf:
ab:2a:a4:99:31:ec:91:c4:52:03:c3:70:b1:f2:3d:
85:2e:56:80:31:eb:ee:47:a4:5c:ad:4d:0f:d7:ba:
16:d3:ca:d5:f9:6f:a0:89:48:45:75:76:cb:4f:c6:
d5:5e:ed:d7:e9:c8:90:f7:60:fc:bd:68:27:d5:c1:
6a:2f:a3:be:35:12:d5:41:56:f6:df:1b:16:cb:35:
ae:bc:9c:37:0a:dd:78:1c:9a:cb:bc:a4:13:a6:8e:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:AF:95:27:3F:4B:CB:BD:5D:05:4B:59:31:93:A2:36:ED:49:29
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bd:93:fa:36:76:30:f2:70:86:46:c3:43:3c:7b:27:8f:9d:
5b:33:6e:7c:05:67:d4:e0:11:52:15:33:75:eb:0c:9f:cc:47:
ff:c8:b7:f7:ab:26:92:07:cc:da:10:51:5e:90:6e:98:b9:56:
b5:f3:5d:d3:8d:f2:cb:04:c4:bb:f8:f9:23:dd:f4:f8:2d:8e:
c4:ad:1a:9d:ad:4c:0b:c2:14:14:b7:48:36:85:67:7d:34:fc:
3c:79:b5:10:7b:bb:00:28:c8:68:78:aa:47:d8:2e:f7:52:8c:
a0:c4:e2:a6:f1:2a:b2:87:10:fb:3e:6a:ab:87:e5:7f:98:d6:
13:0e:ef:ba:1a:e3:09:c0:6a:6d:d8:c0:f3:37:08:4e:2b:cb:
85:9d:99:9d:ad:37:a5:7a:80:49:f1:ec:52:1f:93:61:45:e6:
66:3e:12:be:96:80:84:ef:92:84:4e:f6:84:21:00:f6:0b:31:
8e:ef:8f:4b:2b:20:d9:1b:f6:4e:ce:54:69:e5:1a:01:e8:bf:
4b:4c:b1:e4:f8:0a:b2:9e:ff:ad:be:75:0b:6d:45:ba:b6:90:
8c:80:98:1b:b2:23:03:4e:7a:53:f5:da:0c:1c:2a:0d:b6:be:
b7:a8:8a:ba:dc:ad:18:40:a8:4f:0f:ed:86:5c:b9:c7:cb:35:
a9:8a:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client