Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: Lo4AWeyVdMwEXBePSTXx8vZ65gBOcAVpWGlKqmCS2mQ=
Subject key identifier: 3F:AF:AD:1A:C4:60:1E:F1:08:33:1C:EF:0A:44:9D:10:8D:82:FE:85
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019DD954D8832EAEB05A35469E64EB95CFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 18E5
Signing time: Wed 29 Apr 2026 13:01:49 +0000
Manifest this update: Wed 29 Apr 2026 13:01:49 +0000
Manifest next update: Thu 30 Apr 2026 13:01:49 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: 6vCjBqjis2GnDmEGo2MgaqDqviLA4DvfD9ztEcGsUV8=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:54:d8:83:2e:ae:b0:5a:35:46:9e:64:eb:95:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Apr 29 13:01:49 2026 GMT
Not After : Apr 30 13:01:49 2026 GMT
Subject: CN=3fafad1ac4601ef108331cef0a449d108d82fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:11:64:66:95:96:a9:30:0e:05:70:bc:ce:
f0:a7:ca:0b:ba:ab:23:01:23:12:3a:fd:a2:32:07:
b0:19:43:31:31:22:27:1d:91:dc:9d:99:13:d5:f1:
1e:31:d1:13:28:ce:73:62:13:26:ba:34:df:dc:09:
39:4c:9f:34:f1:ab:1e:28:b2:fb:b3:4d:f8:6f:89:
32:53:da:19:f1:41:c7:79:86:a4:8b:f1:33:08:fc:
0d:3d:06:db:85:b5:fe:7f:54:a4:6e:f8:7a:d8:c9:
7a:49:58:ef:8c:cb:a4:7d:20:00:7d:2a:41:0c:c5:
41:79:cb:e1:1b:cf:9f:6a:6f:00:59:dc:c6:bd:d2:
b8:af:77:72:a6:96:d0:08:03:7d:d3:4f:48:c4:87:
86:54:e9:7d:a8:6a:44:4e:f8:3e:5a:f9:50:2c:b4:
cd:63:3e:1e:9b:ba:08:7d:92:6b:84:ba:2b:18:ba:
9a:41:81:1e:8c:a6:e7:8f:66:fc:88:e3:7c:0b:6a:
a6:01:5d:3e:4c:98:75:b2:77:01:b1:85:31:c6:89:
d3:8f:48:9f:65:0a:e1:57:40:a3:32:3b:29:a2:ab:
06:b3:e4:5b:d2:18:d0:74:ac:ff:f3:66:09:86:8b:
81:c3:a6:90:f3:fc:f9:db:f6:f7:91:99:ef:fb:f1:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:AD:1A:C4:60:1E:F1:08:33:1C:EF:0A:44:9D:10:8D:82:FE:85
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a5:0d:fc:b4:ab:55:aa:b3:42:71:04:f4:6f:13:72:cc:c6:
5c:37:2f:14:66:d8:b0:45:da:bf:8a:e0:bc:07:91:b0:1e:9e:
d6:2d:9b:28:94:24:45:07:51:95:b7:8e:e9:1a:6e:a8:b5:26:
ef:fd:50:16:c1:d1:51:6d:38:bb:f6:52:36:be:c3:a2:06:c4:
2d:5e:70:97:1e:41:28:b0:96:59:6b:ba:e5:e1:47:f9:42:b5:
c3:49:f1:a2:a0:25:c3:3c:7a:b0:19:87:1a:37:7c:11:31:23:
8c:57:db:26:1f:48:a7:db:ac:28:c2:9c:94:87:ae:2b:c9:96:
35:d6:10:2f:69:d1:e9:b9:e1:0d:74:72:d4:df:9f:ab:20:49:
01:d1:a3:cc:bb:fe:0e:3e:7d:8a:1e:bb:fa:05:c1:1f:35:27:
18:0e:ff:75:fa:f2:0b:24:7f:81:82:64:41:04:af:91:28:3a:
f2:8a:21:42:1c:af:e3:aa:b7:eb:ba:fe:f6:c6:a9:5e:bf:b4:
bd:8b:f3:47:66:e2:dd:1f:73:dd:e4:d1:c7:1c:49:56:66:48:
30:f8:9d:e9:b7:82:41:a6:04:72:79:b6:c2:72:19:19:d0:c6:
1c:85:bd:b2:d5:44:ff:3b:a6:7f:85:9b:83:c1:92:98:bf:bc:
70:21:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 19:47:45 2026 by rpki-client