Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: r3QiCPVjfS4sBW9r142RGSZCWZl9brNvFFlF7qVOMb4=
Subject key identifier: 01:BE:76:67:D4:14:9D:8A:E2:42:9C:F9:6E:12:9D:E3:7B:6F:7D:92
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019E1E35BAE348B98F2DA3E93B6FE6A8F744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 22:01:38 +0000
Manifest this update: Tue 12 May 2026 22:01:38 +0000
Manifest next update: Wed 13 May 2026 22:01:38 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: fJ75nG8qFArcMT+i1XpHyXKJN5w6xanp5vzcz3zdNpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ba:e3:48:b9:8f:2d:a3:e9:3b:6f:e6:a8:f7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: May 12 22:01:38 2026 GMT
Not After : May 13 22:01:38 2026 GMT
Subject: CN=01be7667d4149d8ae2429cf96e129de37b6f7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:41:a1:1d:97:4b:16:9b:c8:5e:2d:ed:55:
83:d4:85:38:36:ee:c3:ad:2a:bf:44:df:47:e7:a4:
58:11:34:76:2a:12:67:ac:2c:96:6a:02:cb:99:ec:
f6:ce:96:1c:69:dd:2d:9a:8d:68:b0:42:4b:f6:e9:
0e:b7:9c:87:b6:f4:7a:96:a0:83:ff:34:34:d6:14:
06:9b:52:03:f5:02:0f:69:39:c4:db:04:cd:08:da:
7d:48:ef:24:dc:90:ac:bd:ab:3f:5c:ee:d9:04:f6:
f1:a4:2e:49:00:54:cf:87:7e:2d:7b:c7:76:17:a5:
b0:19:da:ba:71:ee:e7:0e:2d:15:a4:13:7c:9c:54:
5d:f8:2f:c8:ed:1e:33:99:89:19:0e:76:75:45:4f:
0e:3f:83:1c:4d:da:35:77:b7:0e:7f:32:1f:81:44:
68:24:c0:94:0a:1a:19:17:31:3f:88:4c:ea:1e:dd:
57:6f:16:23:10:69:ad:2c:8b:e6:77:8e:c2:5c:d5:
f0:df:7d:10:4d:4d:0e:07:b6:2e:83:e7:69:46:ec:
5b:c4:5a:cf:b6:0e:5d:2b:dd:bf:36:33:38:cc:b6:
2a:78:a1:ba:88:7d:1c:bc:7e:da:f5:57:74:b9:bb:
53:3d:2f:c9:bf:29:79:bc:78:11:c2:ac:f0:5b:26:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BE:76:67:D4:14:9D:8A:E2:42:9C:F9:6E:12:9D:E3:7B:6F:7D:92
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fe:65:0a:f8:d8:9a:7e:74:b0:76:a0:af:10:c3:77:2c:b5:
f3:ee:12:14:f1:ea:ce:e1:a6:eb:58:fe:8f:4b:94:ad:f8:a9:
47:ca:ec:12:3d:f9:57:6a:14:08:77:6f:a6:7c:cd:d7:3f:37:
83:b3:f9:d1:34:6c:44:ce:98:16:f1:30:91:27:d7:2b:52:a8:
b2:d6:3c:18:e8:b9:fd:99:b9:e8:df:0d:66:69:76:df:dc:b6:
1f:b1:69:c2:46:05:f4:49:25:26:be:82:c2:a5:40:d3:b9:83:
cd:b0:1a:ae:e4:2f:53:d8:2f:69:fc:4f:4c:27:d7:73:83:ee:
00:11:7b:f8:63:0f:5f:79:55:85:08:fc:fb:f3:66:20:f4:2f:
53:e1:7d:b4:b4:a7:02:44:85:5f:df:e6:19:d4:06:50:de:f9:
2e:39:5d:8e:bc:d4:d0:d2:a6:3f:f4:97:dd:a0:34:f9:74:3f:
a9:b4:0a:1e:f7:b7:1d:8a:d9:59:15:2c:94:29:de:7b:66:31:
c7:61:5f:17:b7:b6:4b:01:a0:2d:26:00:bd:4a:67:7e:d5:fe:
cf:f0:74:cd:45:cd:84:9f:f7:78:31:cd:ba:d6:f6:cb:36:ed:
05:4d:47:aa:4c:14:29:14:c8:3a:31:b5:68:a6:f2:d9:e2:74:
b9:02:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:43 2026 by rpki-client