Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: 9S/NgCRbbv80M3wOjpj5mYqc4fwLKJyk5oSw9nLKRHM=
Subject key identifier: 4F:B8:A8:45:C3:C5:9A:47:7D:DE:BD:33:ED:F2:37:5A:64:32:ED:EC
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019D59DE40E2C67A6890BBFD6B042DDE92DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 18A3
Signing time: Sat 04 Apr 2026 19:00:30 +0000
Manifest this update: Sat 04 Apr 2026 19:00:30 +0000
Manifest next update: Sun 05 Apr 2026 19:00:30 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: zdwV+8/ur8y5TbLnRyz2kKiTvubsU9RA3c7wRtkJz9Q=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:59:de:40:e2:c6:7a:68:90:bb:fd:6b:04:2d:de:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Apr 4 19:00:30 2026 GMT
Not After : Apr 5 19:00:30 2026 GMT
Subject: CN=4fb8a845c3c59a477ddebd33edf2375a6432edec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:8c:68:30:39:00:4b:a4:64:e5:f9:f2:9a:
cc:7e:ca:3b:85:fa:f1:12:68:09:6e:31:76:ed:f8:
90:2c:ab:48:92:37:83:8b:01:e8:28:ae:1c:c0:79:
b9:17:2c:45:cd:c0:f7:17:5c:d4:f9:82:d6:53:44:
d7:bf:37:73:5d:f7:3a:aa:aa:81:72:3a:41:81:74:
11:d4:e2:19:ac:a2:63:3b:79:fe:02:01:e0:4d:55:
91:32:16:e9:70:17:62:6c:e3:ed:16:88:8c:a3:dc:
7d:d3:30:89:49:86:b6:00:55:dc:76:ab:69:fa:4b:
d0:f8:13:b1:7f:6e:b2:bd:8b:f1:5c:82:d7:8a:c9:
3c:97:a8:b8:f4:77:f6:1c:50:6e:d2:0f:4a:27:d3:
1e:49:87:37:e3:40:71:89:2e:3c:49:fe:fe:49:f0:
ad:4e:2d:8c:d5:b5:5e:9f:34:e7:08:78:e0:c1:f3:
4f:cb:a3:b3:59:8d:f1:b1:ef:25:e8:fc:b4:4e:49:
ee:ca:cd:53:9f:7f:db:47:eb:be:e8:39:91:8a:fc:
34:36:c9:e6:dc:d0:31:64:fe:b8:d9:c8:18:ce:9e:
86:4a:b4:e3:d1:2f:35:0b:70:2a:0c:08:1d:40:83:
4f:2a:3a:35:1a:1f:69:19:92:e6:15:79:cd:db:25:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:A8:45:C3:C5:9A:47:7D:DE:BD:33:ED:F2:37:5A:64:32:ED:EC
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d4:fd:37:a9:62:b6:4c:e6:49:f4:d0:6d:6b:48:08:52:e1:
93:51:63:83:63:c6:5d:df:82:f4:83:91:28:c6:12:19:85:2d:
ef:f2:78:75:e5:6c:c8:24:e0:37:8f:b4:e7:6a:99:6e:f6:fe:
03:7e:a8:bb:5d:1d:66:11:00:36:58:ca:a8:65:7b:37:6f:7b:
39:6c:67:fc:29:20:8c:86:e4:0a:3a:f7:ca:f5:f4:b3:82:d2:
e4:81:77:07:33:42:9f:77:93:47:17:fe:8d:02:9a:d6:7c:c4:
62:26:79:b3:78:b4:f9:16:cf:9e:17:42:1f:8a:cf:e9:e5:6e:
df:66:0c:43:24:e8:a4:f4:76:56:e1:31:f0:4f:36:0c:36:cc:
69:84:6e:6c:91:a1:ad:3c:59:4d:cc:48:db:6f:ee:9f:9f:81:
9a:2f:cf:08:7c:fb:0c:70:7d:16:18:e7:38:1b:73:db:77:ea:
4d:c5:32:57:67:d6:6e:19:4f:eb:86:cd:bc:51:f6:85:14:a8:
be:84:6b:7e:c6:f4:7e:71:18:19:6c:c9:b7:3a:84:6f:04:a7:
33:32:42:89:a2:73:39:2a:f6:27:7f:b9:c0:47:f9:fd:26:bb:
2c:6a:6c:ea:11:3b:46:7c:84:e6:bd:ed:79:e2:57:33:45:42:
90:fd:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 21:54:01 2026 by rpki-client