Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
File: ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft (raw, json)
Hash identifier: LvR4rclc5joQUuHcPOyR0KbTp8odjzSnrM9srj2ooFA=
Subject key identifier: 45:73:E9:49:8D:CE:7B:68:8E:84:DE:56:82:F3:C8:86:65:59:5D:FF
Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Certificate issuer: /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Certificate serial: 019D38655932A9D66259ECDE649D493389AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: 1EEqzl6569G0sfFfrdSOLFfNcao.roa (hash: Hy6juSAUvyR5cpFqP5vct+S4ILevzqtlke3afnwXjDQ=)
2: KM6LXRdvYX6Jdf5znnByrZNFbWE.roa (hash: 5T8qLatFSeA8HvsDJI4XbxLYpOTROjWzeS8VVr76EJg=)
3: ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl (hash: BjpZI0NfgIk9WGEqOdTixXMDGRmy5xZvwQcfPvKRvSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:59:32:a9:d6:62:59:ec:de:64:9d:49:33:89:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=4573e9498dce7b688e84de5682f3c88665595dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:86:b0:68:b0:46:7f:05:9a:cd:f5:14:b6:
4a:25:a8:07:09:26:bc:ee:d8:f5:b6:af:d4:f3:8a:
5c:13:ef:ff:8f:1a:e8:d1:7c:e0:6c:54:82:d1:9f:
8a:b7:e2:1f:59:d1:cb:0f:26:ea:3c:35:39:96:5c:
2b:51:2e:ac:68:6c:d0:ed:d7:89:0b:d0:af:5e:8e:
4f:44:02:30:c5:b4:c8:ec:22:9a:81:c5:1a:df:fa:
17:f3:ed:60:a2:4f:ce:1d:66:cc:91:76:d0:4c:d1:
7c:28:99:78:c3:83:19:59:da:7f:78:5a:06:ba:c4:
5a:a6:f5:49:b4:af:3f:e7:56:64:e7:6d:d4:75:a8:
2c:1e:78:61:1d:4e:b8:d5:3d:95:44:96:4a:9e:0d:
25:d7:e2:e5:aa:f4:08:5a:44:5a:08:dd:8a:b7:3e:
f6:5b:e2:8f:d3:c1:92:a1:dd:f6:4b:c9:4a:68:34:
1e:b6:04:dc:5c:02:48:bb:59:51:33:82:a8:72:b1:
f0:fd:87:44:f1:e7:9a:6d:b9:1d:5e:32:6f:c5:d3:
4d:8a:19:b5:98:11:d5:11:3d:b6:3e:54:8d:f9:ce:
1c:3b:d2:57:a5:3c:c1:83:ac:e9:e7:20:d9:0d:58:
35:13:46:48:22:65:df:17:e7:22:db:ca:a5:6f:7d:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:E9:49:8D:CE:7B:68:8E:84:DE:56:82:F3:C8:86:65:59:5D:FF
X509v3 Authority Key Identifier:
keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:51:47:66:ab:4c:fb:0e:e7:f8:f2:4e:a1:2e:9a:98:66:3e:
ae:60:04:ab:84:72:bb:b3:36:6b:96:ec:5c:21:ce:42:03:42:
08:c0:08:2f:51:ca:79:5d:2c:ce:f8:a6:53:e2:bc:da:6a:3a:
17:de:60:50:ea:86:27:7a:e1:16:96:b8:17:0a:9f:0f:66:7e:
f8:d0:08:0e:a0:ff:3f:bf:cb:40:b7:9d:a5:55:d8:c3:7a:59:
f3:27:d4:9d:95:d9:c2:15:2f:9f:b1:f6:50:61:de:54:ef:c5:
d4:93:19:9e:c6:b0:71:e8:69:87:3a:ac:40:8b:ff:d4:0a:4c:
62:01:3f:36:6e:bb:77:cf:b5:d6:ee:41:4e:00:c3:9a:86:1c:
6f:79:90:96:85:b9:8e:0f:1c:b2:39:a7:bb:5b:a8:ed:7f:c9:
79:f8:4a:14:ca:4f:48:d6:8b:61:22:34:05:31:bb:03:75:12:
a2:ee:2c:7f:ca:ea:ca:44:26:47:c2:40:a1:53:02:40:1c:cc:
61:1b:c2:d8:7c:86:64:66:77:72:49:92:67:b6:f8:4d:e8:43:
d9:d2:37:e0:b2:6c:af:78:0d:d0:74:04:cb:b6:d0:be:13:e7:
6a:7f:dc:57:67:e8:ef:6f:51:c5:f1:9b:86:8e:05:87:2a:51:
9f:81:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:59 2026 by rpki-client