Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: WQDFtFXnVmXr772Rl7IrVpPKKfwEBXtngmGy3CuGkXA=
Subject key identifier: 3B:A8:6B:11:11:FB:77:84:D6:D6:03:3A:02:52:83:C7:C0:60:BC:24
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019D02F6F8E8BA055F220EC9EAF848AF11A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1876
Signing time: Wed 18 Mar 2026 22:00:33 +0000
Manifest this update: Wed 18 Mar 2026 22:00:33 +0000
Manifest next update: Thu 19 Mar 2026 22:00:33 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: oB0LlUVcJqOyJhAHGgPJFTv/xox807S1TGbs1OHArOQ=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:f6:f8:e8:ba:05:5f:22:0e:c9:ea:f8:48:af:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Mar 18 22:00:33 2026 GMT
Not After : Mar 19 22:00:33 2026 GMT
Subject: CN=3ba86b1111fb7784d6d6033a025283c7c060bc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:c4:ea:a4:db:e5:1f:d0:cb:fe:3c:f5:0c:
af:e6:d4:56:c8:89:44:6c:ff:24:0c:c6:7c:7d:f4:
80:94:24:4f:1b:a0:32:66:cc:c5:a6:cf:47:67:6c:
b2:96:80:40:6d:4f:ea:df:93:9b:1c:f7:3c:84:d3:
4a:9b:ec:e6:54:d8:c3:68:82:7d:59:06:14:17:5e:
98:5a:78:14:20:e8:dd:ca:70:8e:d5:a3:7e:6c:d7:
cf:f4:f0:b4:99:52:f4:99:2c:8c:c8:eb:7d:6a:47:
b1:95:71:fc:4e:2e:ab:ad:f7:89:ec:3d:eb:de:19:
c0:49:f8:a5:04:3d:0f:1b:49:18:9a:56:3f:d0:93:
64:96:79:4f:e4:d0:b5:39:90:ce:9b:e3:ba:69:63:
9e:7c:c2:2e:90:f7:e4:32:23:56:cc:a7:8b:3f:de:
f5:67:1e:b7:f4:85:5f:82:dd:3b:0e:94:df:be:03:
44:b0:03:4b:4e:e1:e9:01:40:f3:1b:13:8a:b2:8c:
2d:65:06:6f:a4:bf:37:46:2a:cc:f2:03:6f:c9:d8:
53:a0:d1:2f:c2:f9:10:75:35:ee:a8:01:8e:ce:e5:
3f:a2:9f:52:74:21:7b:85:08:f6:a4:3f:72:37:a7:
8a:2a:ae:f4:bc:66:aa:f6:8b:1f:eb:ab:22:c6:b5:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:6B:11:11:FB:77:84:D6:D6:03:3A:02:52:83:C7:C0:60:BC:24
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d1:6d:79:14:a3:b0:25:c9:2d:34:21:5a:05:eb:ea:21:6b:
5d:c9:7a:4f:73:51:a1:f0:74:5e:72:87:39:0b:e3:fc:64:27:
b0:c4:01:3b:09:df:03:d9:54:12:14:26:36:6d:07:4e:24:c3:
ba:90:bc:0c:f8:79:70:7d:e4:e3:fc:88:6b:0a:83:4b:ee:ce:
5e:ee:4c:c7:94:72:9c:78:f6:ee:98:d1:cc:8a:ae:5c:9f:89:
76:f7:89:4f:ca:0a:45:ee:eb:73:0a:06:2b:87:08:74:be:2e:
b3:c1:b6:57:d3:59:f5:9a:0e:d6:8f:3c:76:10:78:cf:b9:d7:
ad:9c:52:64:61:27:d3:9b:0f:ef:c4:2b:c8:1c:15:dc:a8:cf:
b3:07:8f:3d:b1:93:ec:fb:00:91:23:eb:5c:0b:45:0d:b4:79:
53:1f:28:54:23:82:c3:ee:83:4b:13:78:78:21:f0:93:37:9d:
6e:d7:60:9b:52:b9:6b:24:a2:3a:8b:7b:96:72:3f:a7:55:5c:
a4:d4:fa:14:d1:66:21:85:52:8f:02:a9:e2:01:e9:83:87:9a:
7a:d4:96:47:78:cd:36:a0:e5:9b:14:23:a0:76:72:01:cc:ef:
be:69:1a:8e:17:4a:98:ac:56:b6:37:30:3b:d8:81:a3:79:df:
8c:db:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:24:23 2026 by rpki-client