Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: XHLYhDFgsMAMXh2ns/dPBsG/Ycmvz6Oz7tpbhfM4lLU=
Subject key identifier: B9:CD:89:20:D4:D1:18:5F:0D:5D:13:92:EB:0D:35:CE:B6:80:D2:D4
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019D69525B0988D9EC034B647F2FC18ED226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 18AB
Signing time: Tue 07 Apr 2026 19:01:38 +0000
Manifest this update: Tue 07 Apr 2026 19:01:38 +0000
Manifest next update: Wed 08 Apr 2026 19:01:38 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: YFPl+DEPrYwCpuoJH8C2/hhYnNbrQODddMs7vmglMc8=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:52:5b:09:88:d9:ec:03:4b:64:7f:2f:c1:8e:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Apr 7 19:01:38 2026 GMT
Not After : Apr 8 19:01:38 2026 GMT
Subject: CN=b9cd8920d4d1185f0d5d1392eb0d35ceb680d2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:7f:e0:f9:a8:5e:40:05:4f:bd:5f:36:7d:
24:3a:a0:4b:04:46:1c:f7:4f:dc:d4:0f:55:d4:f1:
44:97:b5:de:6a:77:85:05:92:5e:3c:ce:17:04:d1:
93:39:6d:68:58:4b:c8:ea:c2:72:4c:28:dd:c9:13:
44:db:51:18:1f:83:f6:2a:65:b4:6a:d3:ca:2b:fe:
a3:1a:2d:ff:e8:04:97:80:98:ba:ca:dc:05:7c:7b:
c2:cb:47:df:8d:94:fa:33:db:94:70:29:81:88:9f:
f0:ce:ef:bc:06:b7:f1:66:a7:27:a7:3e:56:d5:c0:
8e:2d:3a:7b:1e:7d:97:9d:3e:44:1b:40:b6:9f:16:
3a:a1:2c:be:79:6f:3b:e4:fd:74:ca:75:0d:72:3d:
06:64:d3:48:9f:72:8a:a9:8e:92:4d:2b:74:f4:13:
0a:f3:71:91:18:eb:ca:a2:09:f7:37:97:68:63:15:
a1:49:83:34:b0:4b:25:e1:04:85:f4:95:da:9a:9c:
3b:2c:09:3f:85:e5:b8:c9:41:fa:88:e9:78:7a:c8:
fb:4a:25:5a:26:da:3c:84:d1:4d:52:f4:6f:d3:f8:
4c:40:b3:d2:05:ed:d5:98:b5:5a:e6:4c:bd:f3:79:
73:35:52:9c:66:23:ae:d0:b5:9a:94:46:e2:40:1f:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CD:89:20:D4:D1:18:5F:0D:5D:13:92:EB:0D:35:CE:B6:80:D2:D4
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ff:9a:98:16:5f:c9:eb:85:8b:c9:36:ad:a6:91:86:fb:90:
b6:56:b6:c6:1b:4a:7d:72:1b:32:68:3e:97:6a:8e:92:39:86:
a2:f1:a7:32:6d:50:d4:ea:87:64:cd:13:0b:e3:30:9c:f2:80:
d2:2a:a9:0d:43:85:e8:8b:96:09:40:5b:96:76:63:93:39:ec:
a7:e7:67:03:ac:ce:51:a5:3d:31:a6:3b:76:b8:ec:5b:13:ac:
97:42:73:0c:0c:52:37:e1:96:f7:f5:89:c8:4a:cd:85:84:36:
5f:b6:cc:73:8f:0f:c1:28:f5:6e:1c:0d:64:bc:38:4b:cf:31:
1a:4a:25:7f:27:d8:85:e2:f5:25:11:8e:ae:56:f5:74:bf:2a:
d1:3a:60:16:40:68:0e:fb:10:f6:91:4d:c0:74:c0:7c:52:6c:
b2:22:57:ef:19:31:5b:25:fa:cf:12:e1:bc:04:51:2f:b8:61:
be:59:80:6f:5d:68:94:4c:64:ec:71:eb:66:93:69:3b:6f:bb:
76:73:ad:69:b3:c1:38:53:9a:d3:b8:71:86:21:33:91:4f:c0:
32:fc:70:1d:c5:51:5a:eb:f0:7a:d5:d2:49:de:a0:8a:51:85:
4f:38:56:dd:53:fb:cb:ef:13:51:9b:ba:04:6b:59:74:b9:26:
db:1f:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:00:47 2026 by rpki-client