Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: 6GR7RIAsFAW2qDrgkh0kgHNmuTEuEG8oDaddPbq+Pyw=
Subject key identifier: 08:8A:CB:17:41:E8:17:75:DA:0B:18:1E:EF:A6:69:1B:B5:ED:2E:9C
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 019CE4B63468850F0CF71BB05EF02B676E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 0258
Signing time: Fri 13 Mar 2026 01:01:11 +0000
Manifest this update: Fri 13 Mar 2026 01:01:11 +0000
Manifest next update: Sat 14 Mar 2026 01:01:11 +0000
Files and hashes: 1: 2tLIG-0F4pyXslqiRGqTKTBHrYg.roa (hash: eYNKy82bS91MfRi14r5WCRNJpu5XJvmqn53/5LunFO0=)
2: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: ogNAgc/1IUA1SzElEsxvjMIVTC1LnMsvziui/7xWRdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:34:68:85:0f:0c:f7:1b:b0:5e:f0:2b:67:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Mar 13 01:01:11 2026 GMT
Not After : Mar 14 01:01:11 2026 GMT
Subject: CN=088acb1741e81775da0b181eefa6691bb5ed2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:67:31:4f:76:d7:e5:0f:df:6b:33:03:ce:
db:36:f8:5e:6b:62:cd:5e:a8:87:4f:9d:7e:4b:62:
ec:b0:73:1a:21:d8:e8:6d:17:74:06:e2:e4:7a:cc:
aa:06:95:bc:ef:98:d0:01:27:aa:93:66:12:04:37:
59:b5:e2:fd:e2:3c:e4:0d:8c:1d:a3:08:41:aa:8c:
fc:11:70:cc:61:2e:76:eb:e9:48:58:74:fa:dd:c0:
67:a5:6a:ef:d2:43:67:f1:5e:b1:a1:96:6b:1a:db:
f1:02:50:2c:e4:b1:41:c6:00:1e:a0:14:db:94:14:
57:1d:60:73:af:78:1e:10:c2:ea:49:a5:2b:dd:d7:
d0:79:47:86:20:1d:b0:c1:10:fd:a8:b4:8f:18:69:
65:a8:34:7a:77:fd:25:b8:ae:7b:c5:3f:8e:97:1d:
0b:ae:6f:b1:c3:f2:45:72:30:b6:68:22:79:38:c0:
35:7f:50:b1:67:6c:17:cc:4d:6b:5d:bb:07:36:6e:
85:67:68:3f:50:d2:4d:4d:6e:f1:aa:69:e1:66:f1:
be:47:5e:10:c5:8d:65:e9:c1:52:43:21:7a:06:c4:
7b:3f:0d:ab:98:9f:09:c8:37:bd:f5:3b:a3:f7:4c:
68:c7:02:4c:31:61:fc:48:40:99:74:5b:fa:66:b3:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:CB:17:41:E8:17:75:DA:0B:18:1E:EF:A6:69:1B:B5:ED:2E:9C
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:57:e7:0f:7f:f7:6b:7b:33:35:ba:b8:0b:c2:30:6b:8c:69:
a0:5a:b7:25:0f:c8:5b:be:00:8c:9b:55:e9:11:d3:ed:ce:1e:
0c:c8:e8:1f:de:b6:52:a5:f3:67:09:f1:f5:b6:1a:1f:c0:fb:
5f:a0:37:55:37:ed:7a:b6:4e:1c:8e:4d:55:f1:2c:66:71:d8:
1f:3b:8a:c3:a6:16:53:98:bc:32:d3:0a:f7:9b:99:59:71:7f:
7c:43:28:e2:6f:8a:7f:74:7c:31:3e:8d:32:88:ae:76:ee:0a:
c3:e5:8b:dc:ef:8f:b3:75:b5:8e:82:1a:32:7e:45:a5:11:c2:
a3:a4:d8:66:51:a3:4b:9b:f7:1a:a2:b6:b7:59:5c:4c:c7:56:
80:f7:d5:14:5a:a7:be:4f:b8:fa:70:4e:c1:47:79:11:0a:bd:
4d:71:6b:1a:c8:4e:74:2d:4f:9c:86:0a:25:8f:16:4e:24:67:
e2:0a:29:31:a4:b3:27:b6:34:29:f7:69:a0:d8:c1:65:95:93:
1d:19:d2:6b:90:c2:0b:27:69:d0:d7:42:16:eb:ef:81:bd:9f:
0b:e1:c3:0d:f8:9a:01:5e:35:f6:ff:5a:c8:a2:fc:06:8b:3d:
4c:46:11:30:f0:2f:68:6f:cf:30:e7:bb:86:9f:db:f6:23:ad:
a9:c6:77:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktjRohQ8M9xuwXvArZ26aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjQ0NmZlNDQ3MmJhNjk0ZmMyMjk4Mjk4YTRmOGQxNTU5
OTVlMTYwHhcNMjYwMzEzMDEwMTExWhcNMjYwMzE0MDEwMTExWjAzMTEwLwYDVQQD
EygwODhhY2IxNzQxZTgxNzc1ZGEwYjE4MWVlZmE2NjkxYmI1ZWQyZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGFnMU921+UP32szA87bNvhea2LN
XqiHT51+S2LssHMaIdjobRd0BuLkesyqBpW875jQASeqk2YSBDdZteL94jzkDYwd
owhBqoz8EXDMYS526+lIWHT63cBnpWrv0kNn8V6xoZZrGtvxAlAs5LFBxgAeoBTb
lBRXHWBzr3geEMLqSaUr3dfQeUeGIB2wwRD9qLSPGGllqDR6d/0luK57xT+Olx0L
rm+xw/JFcjC2aCJ5OMA1f1CxZ2wXzE1rXbsHNm6FZ2g/UNJNTW7xqmnhZvG+R14Q
xY1l6cFSQyF6BsR7Pw2rmJ8JyDe99Tuj90xoxwJMMWH8SECZdFv6ZrO+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiKyxdB6Bd12gsYHu+maRu17S6cMB8GA1UdIwQY
MBaAFM70Rv5EcrppT8Ipgpik+NFVmV4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODkt
OTAxMDA2YmMxZmQ4LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODktOTAxMDA2YmMxZmQ4
LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilfnD3/3
a3szNbq4C8Iwa4xpoFq3JQ/IW74AjJtV6RHT7c4eDMjoH962UqXzZwnx9bYaH8D7
X6A3VTfterZOHI5NVfEsZnHYHzuKw6YWU5i8MtMK95uZWXF/fEMo4m+Kf3R8MT6N
Moiudu4Kw+WL3O+Ps3W1joIaMn5FpRHCo6TYZlGjS5v3GqK2t1lcTMdWgPfVFFqn
vk+4+nBOwUd5EQq9TXFrGshOdC1PnIYKJY8WTiRn4gopMaSzJ7Y0KfdpoNjBZZWT
HRnSa5DCCydp0NdCFuvvgb2fC+HDDfiaAV419v9ayKL8Bos9TEYRMPAvaG/PMOe7
hp/b9iOtqcZ3og==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:26 2026 by rpki-client