Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier: R6vhFC5J6KUkdwWTPKFVgiEo2DWx8hKU7/gZGiP2Itw=
Subject key identifier: FD:A3:9F:50:C2:29:D3:0E:10:0A:AA:AB:D5:70:16:23:D6:77:92:DF
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 019D389C0BBFECF461E0E54F115EBA6BB032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: Oz9iB3o+FwOxCCN2swDN5tCq0XBkxcddiQYZbjJzmVI=)
5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0b:bf:ec:f4:61:e0:e5:4f:11:5e:ba:6b:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=fda39f50c229d30e100aaaabd5701623d67792df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:9a:d7:5e:eb:97:a3:2b:74:cf:a8:60:e6:
bd:f9:52:54:e7:8a:7a:ca:8d:bb:29:f3:f8:33:94:
a5:66:c5:a6:29:56:91:d9:c5:23:e2:f8:30:bf:91:
86:e1:13:1b:a8:95:bb:4e:a1:c5:a8:ca:34:5a:73:
29:e0:f2:82:7b:74:eb:94:07:5c:0a:2c:8e:2e:9d:
87:d9:88:42:1d:af:7c:9f:e3:6c:e3:74:ac:93:10:
7a:a3:ed:b7:7d:50:14:30:5f:bc:bd:7d:66:87:6a:
29:bc:39:15:f6:66:d9:6f:71:e8:aa:66:4c:21:c6:
22:8d:b9:75:79:4a:01:2c:6e:e7:f7:38:96:e4:5f:
db:bc:95:92:aa:08:2c:c3:b4:89:c6:d2:60:b8:7b:
46:79:89:0e:92:6e:04:a5:8c:ea:3a:cc:3f:d8:23:
e6:6c:c4:3a:85:d9:6d:59:0d:25:14:80:44:e3:79:
be:08:16:6a:a7:89:ca:43:1e:7c:db:20:e2:5e:97:
8f:a3:af:98:fa:36:93:4b:4a:e3:ea:4a:dd:7f:90:
a2:85:7b:0d:60:c6:c2:a9:f6:bb:cf:41:a6:79:ec:
6a:4d:91:b0:8b:7c:c1:ac:c9:d4:a0:88:ba:36:15:
11:3d:6f:47:91:b5:51:ae:54:1b:72:11:9d:68:93:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:9F:50:C2:29:D3:0E:10:0A:AA:AB:D5:70:16:23:D6:77:92:DF
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a2:81:35:4f:aa:6a:e9:dc:ee:7f:31:09:2b:68:78:14:db:
2d:c7:de:ac:5e:b6:c5:ca:01:3c:7f:a8:7b:82:19:6d:41:0a:
aa:ec:61:f7:6d:49:5f:c2:14:1e:ef:5c:ef:e4:68:d6:95:0f:
df:20:91:fb:49:c2:75:1a:f7:33:b2:ba:b3:c0:4b:b7:2b:85:
16:7f:38:fb:81:80:a1:39:39:2b:a9:29:e9:a3:24:dc:dc:bd:
9c:21:dc:f1:b0:11:73:c4:12:37:46:06:66:7b:72:b1:6a:dc:
e5:19:cd:17:b7:c6:6e:d4:27:84:37:26:2e:67:45:6c:76:16:
c3:a1:8d:19:7a:d8:07:21:e9:38:47:8a:a3:5a:7d:e9:08:c4:
80:2e:f6:74:76:5d:9b:50:d4:ec:55:c7:6b:ba:ba:d2:5f:0b:
44:7f:14:68:a5:4d:c5:b3:b9:bc:83:dc:42:c0:7a:34:e9:81:
87:ab:c8:1e:f9:2d:5d:ef:cd:0a:cd:fb:0e:38:bb:be:49:09:
af:4a:ba:ba:93:6d:4a:44:2d:05:84:ea:f7:95:d5:e9:66:c4:
e1:d1:c6:90:0d:b3:2c:f8:b0:37:8b:3b:0a:6a:d9:a8:03:67:
71:8c:92:e4:5f:05:52:2b:ba:57:a9:f5:f0:9f:8d:09:4f:f2:
9c:c0:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:25 2026 by rpki-client