Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: JCv9ArpD0jBn+f8Rfl+rTBZKlLIP8bJpnmWiQ3DiHJw=
Subject key identifier: 1B:02:64:CF:04:8B:97:5F:2D:69:8E:DF:CE:53:A2:A1:13:DF:6D:58
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 01A198EA7781093B6B09F9082D30C773BA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 04C9
Signing time: Sun 01 Nov 2026 21:01:05 +0000
Manifest this update: Sun 01 Nov 2026 21:01:05 +0000
Manifest next update: Mon 02 Nov 2026 21:01:05 +0000
Files and hashes: 1: Hv6nIX8HVFeyFg4uQleXqqT5MWI.roa (hash: HIwiJMcqVUyXLS/mAM0+jLz/PX0Vv8ko69oawzAsSDQ=)
2: gu4GPTRfWQO75vY7xSH9xzSoqQY.roa (hash: odhJabg6AJqtqcZtfP2GyOkQsROVO1GzPGrLF/Q0sqM=)
3: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: pp7tttvFx4HVzUPmbThHjewg4EnrBcdIl6vg1DHDuMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:ea:77:81:09:3b:6b:09:f9:08:2d:30:c7:73:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Nov 1 21:01:05 2026 GMT
Not After : Nov 2 21:01:05 2026 GMT
Subject: CN=1b0264cf048b975f2d698edfce53a2a113df6d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:3e:e9:f2:92:da:68:6e:48:04:88:bb:f6:
f3:af:61:7f:90:48:6d:fe:01:73:dc:f3:77:b4:24:
5c:f1:6b:69:23:80:92:f3:74:71:84:e4:35:e3:48:
b1:25:ab:58:51:39:00:fa:7a:a4:d5:09:4c:41:2a:
78:e2:72:8a:21:80:d8:ae:9e:93:4a:e1:db:54:c9:
21:1c:91:1e:18:56:4f:01:94:b4:0f:2c:16:d4:99:
55:1f:18:86:04:be:27:f4:96:0a:da:b4:af:0a:40:
69:dc:f6:c6:f0:f5:76:44:d0:41:d8:c7:4f:5f:5b:
e1:da:c5:e5:ec:ec:bf:86:13:c5:58:c5:bb:52:fd:
a1:64:bb:15:39:e9:d5:72:49:ff:e4:54:9a:94:43:
9c:4f:18:5b:c8:e5:59:f3:2b:55:7e:e6:13:20:7e:
33:b8:2b:3d:d3:0d:bd:5a:47:5e:79:8a:94:c7:48:
92:b2:04:63:a8:43:03:08:2d:6c:a0:d6:42:d1:98:
99:f7:2b:e8:39:ef:dd:05:52:23:b2:5c:43:c4:69:
f7:f4:95:1d:49:5f:7c:a7:52:01:70:f9:9b:23:b9:
9c:9f:0b:7c:72:6c:e3:ea:e5:b5:ec:6a:77:16:1c:
85:ba:93:2f:3a:c7:dd:8f:e6:30:a3:fa:d5:25:88:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:64:CF:04:8B:97:5F:2D:69:8E:DF:CE:53:A2:A1:13:DF:6D:58
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:ea:8d:ff:6b:05:0d:af:2a:ac:6b:b3:c4:26:7a:88:f2:
a6:a9:2b:e7:58:f9:fc:1e:1f:cc:f0:96:bb:bb:a3:4f:b9:06:
ad:90:81:70:15:6c:b9:4f:ae:79:8d:f9:a6:7c:e6:94:aa:a5:
ff:84:56:b4:1c:7b:2a:a5:c2:17:38:25:5e:df:76:c1:58:1a:
40:ec:3e:5e:6c:03:1d:4e:85:48:be:a3:02:6c:67:14:ed:21:
6c:f4:72:e4:3b:d1:4c:64:1e:25:f5:89:ad:6d:74:2d:7e:4c:
72:46:08:bd:01:73:6c:68:a0:27:83:c0:24:b3:9c:16:b2:cd:
3d:dd:49:60:bd:23:42:c6:b3:6b:0b:34:19:60:5a:5d:ef:23:
02:f0:53:dd:74:93:27:e4:ab:50:01:9c:eb:83:8a:fd:f8:02:
96:5d:49:00:57:02:f9:22:7f:20:64:0d:8c:3d:fc:83:70:4d:
d2:f6:86:a5:5a:74:ec:2a:c9:63:5a:8c:1f:cc:20:04:54:3e:
9d:8e:7e:59:2c:17:43:28:53:03:66:35:cd:0f:3f:47:b1:45:
e2:fe:5c:52:ab:ae:a1:63:d9:9e:d3:50:34:96:14:26:00:2a:
49:4c:9f:05:ac:04:9f:26:77:1d:60:54:4b:32:5e:6b:32:ce:
a8:04:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 23:14:17 2026 by rpki-client