Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: Saih+3MiZN/DGVM3YHO6dZb0Ow8isd5mSo/WOUARt0Q=
Subject key identifier: FA:72:B1:07:55:CA:27:FB:AD:86:45:B3:43:14:E5:A2:E6:B6:24:17
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019DCBCF549B5130A5ED0ECBA5565BCFF274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 18DE
Signing time: Sun 26 Apr 2026 22:00:55 +0000
Manifest this update: Sun 26 Apr 2026 22:00:55 +0000
Manifest next update: Mon 27 Apr 2026 22:00:55 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: rHX10HuuA5LRvf6bxJO1cDx299sZkY/lSFqoo1UxTdE=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:cf:54:9b:51:30:a5:ed:0e:cb:a5:56:5b:cf:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Apr 26 22:00:55 2026 GMT
Not After : Apr 27 22:00:55 2026 GMT
Subject: CN=fa72b10755ca27fbad8645b34314e5a2e6b62417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:ac:db:ca:ea:5d:dc:fc:f0:d3:92:39:b4:
17:87:21:9b:5e:31:e1:d9:90:3a:fd:17:dc:70:3f:
ec:e4:61:a6:2d:56:8e:a2:d0:76:e9:92:be:22:4b:
32:02:6d:f8:b8:b0:d8:1f:68:37:8e:3b:2b:89:8c:
35:25:03:5b:8e:16:32:31:f5:65:74:ec:74:62:84:
c3:e4:0a:fb:eb:f2:05:68:9d:52:5f:cf:d5:82:d5:
8d:4d:74:db:13:37:cc:57:2d:3f:ed:23:3b:14:55:
52:8c:c8:8c:00:7e:7a:a5:38:ae:55:f6:ea:1f:88:
5d:34:a6:16:ab:3f:2b:d2:77:9d:a8:df:f3:ab:f9:
6f:e5:b7:b6:29:e5:85:be:7c:c3:ea:fc:2f:30:b7:
9a:09:46:e7:ae:9d:18:3f:a6:e3:16:d3:e0:20:38:
93:63:3b:58:3e:98:fe:bd:21:f0:58:53:2c:fd:06:
8d:7c:3d:63:2c:bd:bd:68:df:45:be:31:c1:2d:be:
86:e3:14:1e:69:ee:61:ce:1b:49:76:ec:96:9d:b7:
a4:47:7f:2e:c5:8b:98:79:af:d4:a4:ec:e7:8f:bd:
71:e1:70:ee:64:46:84:1d:aa:66:30:66:73:5c:2f:
ae:96:c1:85:a8:40:5a:7b:7c:83:b8:f3:bd:0d:44:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:B1:07:55:CA:27:FB:AD:86:45:B3:43:14:E5:A2:E6:B6:24:17
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:b5:2e:97:a4:6b:18:1a:d1:f8:84:4d:44:5f:5f:5f:06:
ee:fb:06:3d:7c:3b:76:c1:c7:d5:ca:4c:2e:7a:98:57:88:29:
97:bf:3a:57:ee:32:0f:8a:cd:93:4d:05:15:6a:fd:5e:13:79:
d6:ec:e2:ab:94:b1:10:92:8b:ea:d3:80:9e:c2:a9:4d:cd:52:
7b:f7:54:00:6d:c7:5a:b0:8f:c3:99:cc:7d:35:11:8b:ab:95:
dc:3e:1d:65:1d:4d:1d:ec:38:dd:9c:a8:7c:aa:a5:66:2a:ed:
bd:20:b6:ab:77:af:58:fc:24:2c:7d:89:5b:6a:b3:91:29:7d:
78:af:e6:aa:66:1a:cd:85:8a:2c:9d:ac:12:f3:b0:3a:fe:4f:
86:70:1d:72:1e:d6:a5:65:ef:83:04:d0:e5:fe:d5:9f:f8:24:
40:b1:e9:43:7d:85:fd:e8:ff:93:96:ef:f2:fb:f7:bd:bf:ed:
4f:54:18:3b:f8:99:98:a9:2f:d1:df:d4:93:56:60:fb:79:12:
77:bc:8a:fd:49:79:de:69:50:68:20:8f:a3:47:e3:f7:4c:9e:
d0:d9:ed:0f:a2:b8:30:a9:89:8a:41:11:d9:01:1f:0c:6f:23:
1f:e9:87:bd:e9:8d:32:c5:6b:83:de:72:3b:18:fc:e6:dd:f2:
94:41:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 06:15:52 2026 by rpki-client