Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: gS6Q2SIYALzUVKLGuw16pGijLBVUJlcETlsoC9ZtML8=
Subject key identifier: B6:1A:11:C9:89:01:94:72:C7:50:61:82:F6:5E:47:4C:33:AF:F1:B0
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 01A0A3DE0C9B4427462C24FD53C2F11C3F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1A57
Signing time: Tue 15 Sep 2026 07:00:33 +0000
Manifest this update: Tue 15 Sep 2026 07:00:33 +0000
Manifest next update: Wed 16 Sep 2026 07:00:33 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: DdiXmly/tPJBuglcBi7tAL2YaxCXdX0oHWfwJG6Vlm4=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:de:0c:9b:44:27:46:2c:24:fd:53:c2:f1:1c:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Sep 15 07:00:33 2026 GMT
Not After : Sep 16 07:00:33 2026 GMT
Subject: CN=b61a11c989019472c7506182f65e474c33aff1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:3e:d5:49:73:5f:b2:c3:67:75:9f:75:de:
61:93:1f:51:f2:0e:ef:69:21:f1:b4:e1:6d:4d:25:
4c:b7:fc:fe:70:bc:fb:d4:83:8d:09:93:b1:e3:dc:
cd:c3:b5:a5:75:c0:42:6e:4e:12:bd:47:6f:82:d8:
b7:9f:fa:3e:ec:b4:29:ed:6c:dd:95:56:62:c6:55:
57:b7:b5:e9:cb:f9:67:1f:4e:77:e0:b4:e0:92:28:
10:19:7e:59:0f:09:ed:73:f4:c3:5f:cd:f4:ea:eb:
d9:6a:27:60:4f:97:b8:af:12:85:7a:07:99:a7:92:
b3:5c:fc:b9:2a:b7:1b:b6:da:5e:14:46:41:a2:c5:
64:d9:6e:aa:3a:4d:d6:f3:32:4e:a7:f7:7a:36:2f:
c6:df:d2:a2:00:99:6e:17:10:31:e9:6e:e1:0d:e3:
65:dd:a2:f2:44:f6:e2:ee:40:19:55:d1:8f:91:26:
a5:a0:69:0c:74:20:f3:59:3f:d3:ef:3c:b6:f6:0b:
5f:37:fa:a0:66:73:f5:2d:ea:50:7b:f9:0b:ea:1b:
53:b2:b9:a6:0b:5c:8d:aa:cd:4b:07:2c:f2:5a:6a:
11:86:34:26:31:1f:0c:3e:0b:88:fe:1c:20:f6:c1:
8f:40:c8:f1:f0:ec:ec:53:d1:2f:52:bb:47:f9:fc:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:11:C9:89:01:94:72:C7:50:61:82:F6:5E:47:4C:33:AF:F1:B0
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a9:ca:45:58:b6:5d:e7:c2:84:47:04:72:07:3d:80:1f:25:
48:0b:8e:c9:1b:29:fe:75:ca:df:41:6f:4b:85:5a:fe:58:fe:
8e:51:fe:37:44:c0:84:40:5c:2a:e1:ca:36:79:a9:e4:34:b8:
ed:1d:57:cd:ec:fc:75:0a:3d:3f:3f:79:80:3c:87:95:1c:af:
d8:66:9d:96:cd:e7:f4:30:cc:6c:e4:54:05:66:a0:38:ca:0f:
b9:fc:17:55:c7:a1:1c:16:34:53:66:ef:37:d0:9c:a2:ff:26:
40:df:74:b8:9a:61:5d:09:1f:88:1b:b3:a3:82:eb:01:1c:35:
05:3e:db:15:91:da:0d:57:53:c2:cd:a1:13:04:78:97:65:80:
6d:25:09:6a:96:1a:53:13:3f:1e:72:1e:d3:11:c3:09:29:81:
73:58:85:42:c3:b1:11:72:4d:bb:ed:d7:85:e1:fd:b6:8d:93:
41:06:94:fe:0a:5a:c5:0b:39:15:3c:11:1a:6c:35:5c:e6:e9:
1a:27:93:bb:df:0d:19:55:df:89:3e:cf:73:96:0d:06:28:d6:
a1:5e:65:42:0b:1f:9c:24:67:24:d7:50:47:dc:b0:cb:c7:a8:
68:17:8c:57:70:3b:1a:2f:57:fb:c7:55:48:3b:00:ad:8f:07:
5f:5d:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:22:10 2026 by rpki-client