Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: F+KJvQOpoU/qwAheQhW83cvNCj4sWMk67l7K3atSLM4=
Subject key identifier: 42:87:E1:43:73:7C:CB:1A:F4:82:5B:74:1E:48:37:DE:29:B6:7D:23
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019ECCA8A7937575F69DD9ADDA4F5C367485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1963
Signing time: Mon 15 Jun 2026 19:01:05 +0000
Manifest this update: Mon 15 Jun 2026 19:01:05 +0000
Manifest next update: Tue 16 Jun 2026 19:01:05 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: 3aGsWJEm1LVr0K9z6OZqzLJoWlzQ9PtKcdL7sWySQFM=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 13:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cc:a8:a7:93:75:75:f6:9d:d9:ad:da:4f:5c:36:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Jun 15 19:01:05 2026 GMT
Not After : Jun 16 19:01:05 2026 GMT
Subject: CN=4287e143737ccb1af4825b741e4837de29b67d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:ac:db:00:55:f0:aa:66:f2:7d:b0:7d:4b:
e6:27:0c:27:a8:46:67:ce:ce:c0:8f:66:57:fd:d0:
f6:4f:f8:0a:12:a4:88:ef:02:92:74:de:ff:19:77:
55:ea:3d:18:21:0b:1a:0e:25:e1:30:31:52:dd:7e:
c9:bb:fa:ed:a9:1b:15:b9:02:ff:bc:eb:6e:be:22:
49:0c:d7:49:ff:cd:a1:77:e2:75:54:5c:20:06:ec:
53:53:18:bb:89:85:80:61:71:db:86:9f:b0:6e:4e:
95:a0:12:3b:c2:4e:68:e7:c6:81:c8:aa:0b:d4:a8:
aa:6d:bd:11:30:6c:7d:1b:99:0c:b8:e0:e4:c4:64:
8e:87:2d:fa:8d:fc:6d:b8:97:97:d6:71:d6:8d:1f:
d5:f5:e8:ec:bc:f4:e4:ea:2a:ff:0d:aa:2b:e5:a6:
15:e0:44:bf:fd:47:42:f2:71:cd:76:f4:40:1b:8c:
df:db:a9:13:f7:17:03:b5:73:eb:e7:54:bf:a0:05:
5e:17:b0:0c:7e:2c:bc:49:92:75:75:7b:a5:ca:5b:
77:74:11:0a:46:e8:4e:a6:01:70:ec:7a:91:f2:48:
23:81:15:38:04:51:59:ff:8c:7d:1d:a1:da:eb:a0:
39:08:37:df:50:44:b9:cb:fa:3f:22:f1:45:74:01:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:E1:43:73:7C:CB:1A:F4:82:5B:74:1E:48:37:DE:29:B6:7D:23
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1b:ff:97:49:28:1f:50:64:75:ef:7c:63:35:d4:68:0e:1f:
ee:92:33:10:17:48:a6:2f:20:0f:4d:a3:8a:17:e2:70:9e:77:
92:2c:8a:8f:5c:b1:05:2a:0f:ae:c3:25:5b:41:14:bc:1f:2d:
cd:31:40:df:d3:ce:ac:12:78:0f:81:ee:3f:2d:a6:bc:75:c1:
01:01:64:e1:fc:91:f3:99:cd:1e:3e:f8:98:bd:b1:c3:ab:e2:
f9:fc:1a:07:8e:3a:b8:35:61:45:fa:10:7e:1f:e9:a2:c6:49:
61:c5:79:f1:cf:be:b5:6e:7c:b5:5b:0b:73:bf:5f:3f:bc:b6:
68:fb:da:75:fd:d2:7b:39:78:88:cb:2d:95:99:10:d0:20:d2:
e9:6c:1e:56:cb:c5:46:e6:c1:72:07:32:7d:23:f2:7e:33:00:
dc:0e:5d:5e:e1:14:d0:b0:af:3a:37:33:e1:4c:30:f8:2c:0d:
ef:70:bc:79:32:15:ae:41:60:0b:17:8f:1e:67:32:c1:0b:65:
eb:49:0b:74:cf:a9:5f:4c:9f:f1:ef:68:10:52:80:18:ac:73:
99:3e:bd:97:cf:e9:e9:62:fc:0e:17:95:6f:de:77:1c:80:83:
25:b0:37:e2:9a:33:16:5c:c5:dd:2c:75:29:c7:35:18:ea:ed:
26:e4:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 22:03:02 2026 by rpki-client