Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: D2/zG4Sxk0eyeIWv8BZ63Tp3TfsAjr+9VA1PuHFsVQg=
Subject key identifier: D8:58:CE:55:76:E9:F7:58:20:C9:BF:F5:AE:CD:85:02:7C:14:60:A7
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019FC9A5997F08B584A079394E69D62A3BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 19E6
Signing time: Mon 03 Aug 2026 22:01:40 +0000
Manifest this update: Mon 03 Aug 2026 22:01:40 +0000
Manifest next update: Tue 04 Aug 2026 22:01:40 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: p0NpiDuQ//k3cCIB8akZuKdjvHl0z71xf79DW1+fK84=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:a5:99:7f:08:b5:84:a0:79:39:4e:69:d6:2a:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Aug 3 22:01:40 2026 GMT
Not After : Aug 4 22:01:40 2026 GMT
Subject: CN=d858ce5576e9f75820c9bff5aecd85027c1460a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:d5:13:43:7b:44:46:cb:69:e2:6c:bd:a6:
fd:1d:87:2c:d2:ec:4b:3e:e4:ba:76:dd:8d:9b:aa:
29:db:0b:a8:43:ab:56:6c:06:43:13:21:94:f7:c0:
f9:a1:5d:c9:cc:00:d8:99:73:59:2f:6d:de:52:e2:
95:33:a2:0f:5f:d3:8f:c0:af:f8:8f:d1:96:5d:1d:
06:29:f0:e1:80:b5:67:be:a4:0c:92:96:77:3c:57:
32:da:22:cd:0f:c2:2c:48:41:0d:74:cb:ce:5b:79:
ac:af:63:59:8a:7e:10:ed:a4:6b:6a:76:0c:f8:11:
e9:64:46:f9:a5:6c:cc:86:a0:09:f9:5c:6d:0a:10:
4d:e2:64:ee:9a:cc:dd:26:6b:38:fa:db:30:8f:d7:
1d:0a:19:cb:5e:a5:e8:b0:cc:10:0b:71:70:9f:ff:
37:27:30:b2:7a:09:67:b6:bc:1b:7c:2e:be:68:00:
ef:23:7d:36:ef:e4:74:f6:ca:77:70:c7:64:c3:11:
8a:a1:d2:64:3d:b1:53:08:04:d1:8c:cc:a4:d0:df:
dd:71:14:c9:4d:c9:03:76:cc:1e:6e:e2:9f:c4:46:
72:f5:05:ce:69:89:be:c8:88:16:c8:32:83:50:43:
5e:11:f0:28:c4:f4:54:45:ed:ec:1d:93:d9:30:08:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:CE:55:76:E9:F7:58:20:C9:BF:F5:AE:CD:85:02:7C:14:60:A7
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:82:38:db:16:6d:94:fc:9e:f2:46:96:9c:44:15:cb:32:22:
a6:21:07:c3:39:65:6a:f3:f6:72:fe:c7:72:02:66:18:9c:9e:
49:04:68:07:44:a3:09:4b:37:20:64:87:a0:c7:1c:e2:85:96:
8c:27:40:29:49:ec:4e:b5:ec:ac:1c:ee:a1:dc:0b:67:a1:02:
a6:55:54:8e:bc:53:46:1d:9f:cf:a1:c4:c2:81:f3:59:96:55:
fe:91:1c:d3:56:0a:ed:b6:92:84:74:f3:b2:49:78:80:1e:2e:
ba:cb:ee:5d:98:9f:a9:97:c4:03:f0:9d:97:07:dc:c5:da:b8:
70:90:bb:dd:77:54:8a:bd:94:61:43:22:9d:9e:60:d2:dd:1c:
79:7b:b0:2d:15:63:dd:7f:1b:ad:6c:0c:10:65:dd:da:f5:79:
c5:23:8c:b5:01:29:ec:0f:f4:12:5d:d9:ab:aa:1e:70:ca:0e:
49:9a:00:31:49:bf:79:4a:e0:87:17:dd:3c:5e:c0:46:99:c2:
73:52:7d:b9:e2:2b:b4:c0:b6:e9:0d:bd:0d:24:a8:85:5b:db:
85:74:f6:2b:76:4c:f0:12:f5:af:5c:10:56:29:f9:99:ed:9c:
ce:9a:db:53:f7:a9:b4:2c:43:51:86:2a:b7:ea:ae:e3:43:5d:
6e:d7:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 05:00:32 2026 by rpki-client