Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: f/wWCxVypeBBemeb8yk+ZtLU63vsPVV7TIxd4DNc3vg=
Subject key identifier: 2F:58:1A:3D:FA:30:19:CF:95:E3:A5:9C:10:56:27:23:6E:7F:B7:62
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019DD19AB1A45959FF450271AC870BB0F5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 18E1
Signing time: Tue 28 Apr 2026 01:01:09 +0000
Manifest this update: Tue 28 Apr 2026 01:01:09 +0000
Manifest next update: Wed 29 Apr 2026 01:01:09 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: 2+2JImBrkZ4UTzRK9ezW5zLsuLJzQpzQai5sxxrcDKg=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:b1:a4:59:59:ff:45:02:71:ac:87:0b:b0:f5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Apr 28 01:01:09 2026 GMT
Not After : Apr 29 01:01:09 2026 GMT
Subject: CN=2f581a3dfa3019cf95e3a59c105627236e7fb762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:2b:a2:b6:99:5b:70:5c:6a:bb:74:e2:f7:
fa:09:c7:69:29:89:7c:2d:64:aa:ad:d0:ed:a5:04:
1d:39:ff:77:7b:35:c6:55:7b:40:e9:b9:f0:74:48:
6e:1a:85:92:ca:05:63:a3:6e:3c:36:a5:2e:f8:5f:
db:3d:91:5b:95:d6:e3:d5:2d:5a:93:e4:8b:bc:a3:
75:65:fb:cd:52:5c:e2:57:1b:34:1e:5d:4a:f9:18:
d3:11:87:89:fb:01:99:0b:d5:27:19:bf:dc:13:10:
3e:e2:26:c1:25:e0:82:94:83:41:61:b4:0d:6c:d5:
64:89:c8:d2:c6:4f:07:40:18:dc:37:c2:e3:4c:4c:
75:71:7a:dc:34:5c:21:ea:fe:6a:89:a7:a4:5e:4e:
7d:f0:17:c5:46:83:df:9d:d2:0f:88:21:59:cf:9a:
62:40:a6:9d:ca:0d:05:7d:b0:bc:29:c5:3c:55:15:
5a:d3:13:ed:49:03:ae:6d:ad:56:9d:95:57:6a:85:
0b:02:69:3c:2d:c1:4f:f9:62:59:e1:b3:8e:bc:22:
6f:77:00:bf:16:ca:1a:ee:7c:a8:3e:e5:6f:44:4c:
da:6c:a5:02:bd:20:61:c3:2f:fb:7f:ba:d3:9f:68:
6c:0b:63:0c:0c:df:02:65:94:0d:17:8a:b2:5d:8e:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:1A:3D:FA:30:19:CF:95:E3:A5:9C:10:56:27:23:6E:7F:B7:62
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ec:eb:63:1a:30:eb:22:71:d6:59:cd:55:fa:75:2d:b9:75:
a6:f6:be:20:e9:90:eb:02:2d:36:28:c3:2f:14:45:bf:3c:10:
0e:2a:de:6d:a9:40:98:49:2c:2a:56:a9:8b:4e:21:15:e8:42:
0b:65:f1:aa:8b:6e:83:9e:a7:97:be:d7:50:65:d6:9d:2b:44:
52:a7:a2:2c:1e:31:37:e4:ed:f3:1f:fb:ef:20:b5:8a:84:e6:
53:de:07:34:bf:50:04:33:8f:5d:a1:5e:65:56:9f:5c:5a:2c:
cc:e4:91:c4:e7:43:17:03:cd:e7:ec:a0:84:f7:44:7a:40:ad:
72:59:c6:c0:1c:1b:ac:6f:9a:93:6b:f7:6d:be:0b:0c:59:1d:
c3:49:2c:c6:2e:43:50:9e:5c:3c:47:30:d4:5c:e6:b8:8a:2a:
d0:18:9d:fa:db:3f:bf:96:49:0a:2d:87:9b:36:92:af:74:c6:
01:91:68:9a:41:78:ab:d9:2c:95:47:b9:7a:f7:36:97:e7:25:
82:61:19:92:61:2c:b9:cf:72:f7:1b:ad:86:cd:8a:ee:5f:c5:
97:6a:0d:39:76:a7:be:05:71:2d:c7:1c:61:a7:eb:81:ea:aa:
4a:96:53:73:81:77:54:20:c7:73:1c:88:2a:10:13:43:c7:d2:
88:c5:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:44:52 2026 by rpki-client