Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: FxvSL4MW1CngGiBpvDRPt99kaymT8wvtXMoIyu5C1YI=
Subject key identifier: 6B:8E:95:3D:77:86:C9:C6:D3:F4:EA:72:B2:A9:4C:A9:D5:1F:14:DC
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019D371BEE74070B4768EDD5EB54D186F657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 01:01:10 +0000
Manifest this update: Sun 29 Mar 2026 01:01:10 +0000
Manifest next update: Mon 30 Mar 2026 01:01:10 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: GZLs4p5E6GO+cETfyK8BcNcNHpn2kxiyunOBaqUFwb8=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ee:74:07:0b:47:68:ed:d5:eb:54:d1:86:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Mar 29 01:01:10 2026 GMT
Not After : Mar 30 01:01:10 2026 GMT
Subject: CN=6b8e953d7786c9c6d3f4ea72b2a94ca9d51f14dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:d7:88:99:ec:32:5b:e5:43:5f:d9:77:d2:
fa:e3:c7:cf:10:b9:83:e7:a3:c7:79:c6:42:99:09:
eb:b6:8f:0b:65:7a:f1:aa:05:dc:c5:3f:d0:ea:3f:
da:b6:e6:3c:43:52:9e:e8:ac:cf:24:43:55:3e:b9:
3d:2a:f0:2a:46:ae:c5:eb:7f:a3:70:81:45:f2:1d:
38:25:c5:14:be:c6:f3:3a:40:d2:af:c8:99:4b:a7:
c4:39:d5:9f:08:29:ff:b1:82:2c:2a:8b:69:3a:86:
07:24:36:3a:7c:10:84:2d:fe:f5:10:9a:cf:29:96:
75:af:b7:59:43:47:bf:dc:f4:4c:3c:0c:d2:5c:80:
7c:4f:d0:86:3a:fe:72:03:31:b8:63:0b:66:95:46:
b0:da:a0:a5:63:65:73:d6:51:b2:9c:7a:ea:94:6d:
4a:dc:56:3b:a9:88:fa:27:96:bd:75:d0:b7:39:79:
0d:ab:95:26:2b:29:5d:bd:b8:0b:a9:0c:36:db:f6:
24:ce:a6:62:88:89:06:3d:40:5c:c1:91:6e:01:e3:
6d:3e:11:d5:e8:c2:8d:b4:cb:44:55:cb:40:24:d7:
93:3c:29:6c:11:20:6f:cc:89:18:e6:0f:a0:b4:d0:
8d:48:4f:4e:a3:10:07:e2:e5:91:d5:0c:1e:9f:a1:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:95:3D:77:86:C9:C6:D3:F4:EA:72:B2:A9:4C:A9:D5:1F:14:DC
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d4:0f:1f:c6:d0:84:49:44:1c:53:66:37:51:ab:21:39:ae:
9c:04:93:5b:6a:37:2e:4c:40:84:05:02:04:0c:90:ee:69:fd:
fa:b8:61:30:39:b6:1d:80:9e:9b:c5:3c:f9:db:e5:ee:a8:e0:
0a:73:dc:ea:a8:5b:be:3e:6e:dc:61:77:48:df:41:2a:d0:1e:
f1:f1:65:98:cc:3b:a7:39:aa:7c:e6:18:2c:f5:03:8c:10:ef:
07:be:f0:07:63:0c:7b:4e:aa:48:ea:80:ae:98:0e:3b:89:60:
8e:34:f5:fa:88:70:d8:8f:2e:7b:8f:7f:4e:44:80:23:d1:56:
42:ae:67:e4:b1:27:59:e1:82:48:ec:3f:f7:be:4e:ba:90:ad:
f1:16:f3:98:98:0b:e4:66:86:0f:73:25:3b:23:fb:65:6e:38:
cb:32:47:0e:69:6f:10:4a:be:46:b1:a8:4a:d7:5e:80:ad:5a:
2c:69:b0:ea:08:c2:d9:9b:8b:56:ac:fe:01:49:d9:dd:1b:e5:
b6:98:d2:81:e7:89:a1:cf:1b:df:1b:95:0d:80:ea:15:f9:13:
db:aa:3f:18:a0:1f:8b:59:8e:3a:b2:18:c5:de:b2:18:35:6f:
6b:4d:94:de:4d:be:02:14:60:a8:53:ff:23:64:e7:a8:1c:29:
c8:2c:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 04:47:59 2026 by rpki-client