Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: aq4dWWnzIA+Dl/5ydJiQpDrjK0DHG7HvMhrriQM7mT4=
Subject key identifier: D8:34:8E:60:64:AC:1B:B8:F8:D7:C0:17:66:18:E4:2D:4B:A6:FE:2F
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019F92EDEA79F08DF78B4A06826C7F9D4444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 07:01:33 +0000
Manifest this update: Fri 24 Jul 2026 07:01:33 +0000
Manifest next update: Sat 25 Jul 2026 07:01:33 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: s6LZffzAK/Y2/Plu3jKtl+nJ1b/1RrBOMhrWWZL7420=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ea:79:f0:8d:f7:8b:4a:06:82:6c:7f:9d:44:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jul 24 07:01:33 2026 GMT
Not After : Jul 25 07:01:33 2026 GMT
Subject: CN=d8348e6064ac1bb8f8d7c0176618e42d4ba6fe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:c0:15:ab:62:55:d8:4b:de:30:c0:61:a7:
a1:d4:c9:5e:f0:84:4e:ce:0c:4e:19:2a:1b:9d:d3:
f1:0c:7e:a4:54:1c:4c:9c:67:d3:ce:40:af:a3:36:
4f:a9:35:e9:c7:1a:d1:47:37:7a:38:e2:86:8b:8f:
76:57:8b:b1:0f:f1:f3:29:71:20:94:9a:98:07:de:
b2:38:e6:1a:fd:92:e1:77:3f:77:91:c8:61:f5:16:
35:8c:46:2b:69:49:be:6f:77:68:6f:2b:ee:db:c3:
d0:c0:3a:8b:43:c8:24:5c:a1:8c:fd:6b:e0:9d:b6:
e5:fe:ab:eb:94:d6:05:cb:ab:1a:68:d2:a5:e0:db:
7d:1b:23:43:92:70:34:2c:1c:73:cc:74:31:59:fa:
1f:81:f3:dc:9b:95:9e:58:ed:69:0b:75:e3:0c:7a:
f3:3c:60:a7:8c:df:82:2d:b6:97:79:ae:79:a3:a8:
17:90:5a:36:30:07:bb:b6:95:14:4d:d7:63:87:0c:
37:b5:83:fb:67:82:4c:a5:ff:ec:63:f1:5e:f6:dc:
26:b8:97:4a:84:19:30:08:3a:58:53:c7:77:a9:fa:
8e:55:75:b3:a4:05:cd:3a:b7:91:77:00:a5:16:38:
6d:f3:82:f1:0e:2a:06:d0:7e:35:14:9b:06:2c:b7:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:34:8E:60:64:AC:1B:B8:F8:D7:C0:17:66:18:E4:2D:4B:A6:FE:2F
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:07:fb:23:74:03:ab:6a:02:78:ed:71:22:d8:cb:8a:b1:08:
5a:03:d9:f7:2f:c6:88:e2:21:f9:0a:d1:43:d8:5c:ea:f4:b7:
92:54:ea:4e:68:52:b9:8c:5e:90:58:07:a2:62:43:5d:22:56:
f2:ec:08:3c:76:75:9c:ec:f7:7d:79:d8:2a:0a:7d:c0:29:37:
b0:25:c4:41:67:d9:29:52:a4:21:0b:a7:39:eb:68:41:23:b6:
8a:bf:ae:18:43:2e:8d:cc:7e:fd:26:71:39:a6:b6:3c:db:a3:
b6:1d:c6:3d:3a:71:af:7e:24:04:a0:bd:fa:a3:e3:49:69:f4:
a3:c5:34:44:59:fa:8a:4b:12:df:d2:31:46:de:51:0c:1a:99:
97:3a:e9:39:bf:eb:b4:31:01:d7:f4:6b:dc:78:c2:23:32:3d:
b2:f1:df:77:61:75:5d:3c:12:5d:52:68:64:6f:bc:e9:2a:e6:
8c:a0:40:41:c3:f3:13:c6:8b:fb:5a:88:ea:cf:c8:84:cd:2d:
af:bd:5d:ad:80:d9:03:6f:98:6e:d6:af:6d:de:97:39:b5:4b:
dd:c6:e2:1f:60:5f:8d:eb:5d:8d:c9:97:78:92:78:05:88:de:
54:15:10:8f:1f:b7:37:0f:72:7c:9c:49:98:b5:97:91:10:27:
d5:a9:db:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:00 2026 by rpki-client