Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: nVHSR+ADGeez1ugyS19SrUcTy5Aw8N9YNui3SehJYqs=
Subject key identifier: 7E:B8:D1:2D:6E:20:27:79:F8:E4:70:E8:9B:0D:58:EE:59:F5:A6:E0
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 019DD0BE63CC62F20EBB55B42AF9B921E51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 02D3
Signing time: Mon 27 Apr 2026 21:00:31 +0000
Manifest this update: Mon 27 Apr 2026 21:00:31 +0000
Manifest next update: Tue 28 Apr 2026 21:00:31 +0000
Files and hashes: 1: Hv6nIX8HVFeyFg4uQleXqqT5MWI.roa (hash: HIwiJMcqVUyXLS/mAM0+jLz/PX0Vv8ko69oawzAsSDQ=)
2: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: KvIgJQf5naWlKJ0+ZQva8iJllyYlMkYHWNzCeM1r4kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:63:cc:62:f2:0e:bb:55:b4:2a:f9:b9:21:e5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Apr 27 21:00:31 2026 GMT
Not After : Apr 28 21:00:31 2026 GMT
Subject: CN=7eb8d12d6e202779f8e470e89b0d58ee59f5a6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:41:39:e2:59:c2:c1:de:74:3b:11:ab:80:
c8:04:21:0a:e8:35:5c:65:1a:1a:27:c0:ab:ed:b8:
c6:96:5a:ce:6e:fc:34:b2:82:bd:7d:a3:bf:eb:89:
66:c6:14:b8:77:cd:ea:46:38:76:04:c1:20:f4:6d:
39:70:97:5e:5a:42:ba:05:ff:d6:21:08:f6:31:10:
9c:22:0a:d1:2b:ad:23:0b:cc:06:e4:6c:af:4d:a7:
19:a7:b3:15:db:10:9f:80:82:5f:f7:a0:b7:61:8e:
4a:d5:94:20:58:bd:9c:08:9b:5f:6a:12:19:ce:a8:
ee:50:47:6a:f7:e2:df:fa:0d:af:a2:a8:8e:a8:a4:
a0:90:3e:d2:aa:26:c1:0b:a6:5c:06:1d:62:7d:cd:
cd:10:e1:83:d7:3c:03:45:06:9a:87:eb:92:f8:c5:
ff:7a:2f:5f:00:70:ae:11:0f:2f:b3:3a:1a:f4:0a:
cf:10:ad:75:84:09:8e:0e:2e:e4:6a:22:84:03:d3:
36:9d:6b:b9:23:3e:1d:0a:8f:bb:5f:f2:2b:26:26:
24:af:68:20:3f:ea:94:09:66:f7:30:78:2d:65:2a:
f1:b9:6d:85:aa:7f:ef:d0:ec:f9:dc:12:24:70:35:
08:9f:f5:73:98:af:a1:7f:4f:c8:a1:8d:9a:02:87:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B8:D1:2D:6E:20:27:79:F8:E4:70:E8:9B:0D:58:EE:59:F5:A6:E0
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:8a:81:10:0b:fa:ec:8e:d4:31:0f:77:a5:5c:c2:82:fb:
4b:0f:b1:eb:5f:2b:ae:a5:57:53:01:0e:eb:8b:ee:33:f5:5e:
c6:ac:51:a1:b4:c8:ed:12:c1:62:95:70:56:a2:e1:fb:42:8b:
3e:e7:9f:2a:82:08:39:25:90:b5:6a:d5:ee:ef:83:dc:4f:81:
57:23:eb:2c:45:70:21:ac:2c:b7:37:51:4d:94:b4:5d:57:11:
b2:80:4f:d8:f2:d3:0b:7e:7d:79:c6:af:0c:ff:82:97:4e:f3:
6c:36:25:b9:ef:75:30:4f:54:3f:83:cb:8f:6d:fd:90:d4:4b:
f2:e9:79:7a:0b:9b:e1:5c:a5:03:c8:4b:21:01:8a:ba:a1:50:
b0:76:cf:4d:dd:b6:e9:22:1e:df:55:85:97:a7:f9:8b:a9:8f:
80:c9:fa:9e:0e:64:da:21:66:5e:3b:19:2d:65:ad:39:db:30:
70:59:64:65:80:40:9b:4d:f5:1e:f1:0d:de:4f:2b:27:68:74:
da:9c:07:5b:9a:97:76:46:45:f9:35:2f:6a:18:85:59:ce:c8:
08:ff:22:20:72:c3:e2:a6:88:e3:8d:5f:52:d1:03:a7:31:5c:
bf:ab:a1:60:ff:37:2b:ba:8a:ec:de:a5:d2:cc:01:da:05:22:
23:ad:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:33:05 2026 by rpki-client