Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: OTey6BgZUr7WmHJFmLdMhaqvhcbj1YfpmYsQuLiMWzA=
Subject key identifier: CC:BF:69:02:30:29:64:3A:49:2C:44:26:AB:9F:48:CC:41:06:04:03
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019D27045F2C7DB1C771CC8DF0FC27CE3030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: bIuiK5oMHfDuvwmIucCRfAv4helAqOtikw5bufyJkGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5f:2c:7d:b1:c7:71:cc:8d:f0:fc:27:ce:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=ccbf69023029643a492c4426ab9f48cc41060403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:2e:82:4f:2a:b0:67:fb:87:66:17:d1:b4:
73:0f:a9:66:85:c2:80:f9:ab:1d:b4:5b:b1:d3:2e:
73:19:3e:44:2e:b2:e2:83:eb:1a:c6:ab:33:55:64:
dd:60:dc:e5:bd:b9:52:6c:06:c5:c8:46:f3:d1:a2:
ee:03:6b:eb:a6:88:05:83:34:a3:51:a9:12:e1:97:
91:05:fc:41:31:5c:38:bd:6b:8a:46:4a:ef:bb:19:
6c:99:70:27:bf:cb:43:e4:eb:70:58:0d:9e:e4:dc:
98:2e:bb:cf:42:80:be:87:6e:14:f7:9b:2c:8a:94:
c8:b2:83:15:6b:f2:18:a0:a2:c8:34:95:a3:23:31:
27:fd:c3:f3:9b:59:fa:97:db:b8:07:64:c4:30:f7:
34:77:f5:85:ba:e4:3e:dd:40:30:0b:38:53:c5:de:
be:bd:b2:11:fc:87:6a:bb:08:df:21:df:56:2d:52:
74:81:a6:2b:fd:2d:3e:0e:72:27:a0:97:df:01:68:
2f:e6:75:5f:de:84:37:e3:7f:37:c3:94:68:32:e5:
4b:ff:11:2e:53:35:08:4b:59:ab:c9:18:cc:50:e7:
4f:50:2e:19:53:3c:19:65:52:11:e5:3b:94:cf:5c:
8d:47:8a:33:b4:27:a5:15:73:f9:2c:40:ee:98:d6:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:69:02:30:29:64:3A:49:2C:44:26:AB:9F:48:CC:41:06:04:03
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:8b:c8:be:39:e9:c6:32:fd:de:8a:c4:d9:81:58:94:d2:
83:00:f5:7b:8c:0e:51:80:54:13:87:d1:0f:78:a0:0f:d4:e6:
1a:1d:c6:a4:47:87:c8:8a:51:68:9d:d2:e0:74:cc:3a:ac:87:
6d:9e:30:67:7f:9b:8d:e6:0a:5b:b2:94:5b:f6:7b:d6:5e:a6:
00:a7:41:50:89:9e:4f:48:a4:da:1a:b1:1d:b3:a9:84:c9:b6:
1b:76:d6:84:54:35:11:8d:a5:cd:40:ab:67:ea:7b:60:23:a0:
6c:6c:42:2d:c9:9d:9b:82:ea:43:76:37:dd:57:ed:34:e6:b4:
eb:dd:50:03:b6:80:c3:50:85:e9:88:d5:66:b4:ec:09:74:f5:
22:0a:2a:49:0f:cd:5e:c4:d4:a9:ec:7b:7c:06:9f:38:77:65:
79:ba:24:eb:27:c3:de:41:e4:b2:21:00:20:e4:e5:f3:fd:be:
55:17:f0:62:38:61:fd:a0:b0:9a:af:be:da:9b:67:bd:e9:62:
55:5c:4e:47:fe:09:43:ed:be:36:b3:2b:3e:cd:c4:15:12:f8:
ea:48:4d:c6:9e:8a:d6:b6:95:bf:18:55:fb:1f:7c:d2:8b:6d:
53:f0:a7:66:47:bf:3a:0d:81:ee:74:01:43:a4:0a:89:86:7b:
79:3b:82:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBF8sfbHHccyN8PwnzjAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTc1NTMyOTJhZjU5NTQyNmVlMWQ3ZGM5MTlhMjEwNDg5
NDc1MmIwHhcNMjYwMzI1MjIwMTMwWhcNMjYwMzI2MjIwMTMwWjAzMTEwLwYDVQQD
EyhjY2JmNjkwMjMwMjk2NDNhNDkyYzQ0MjZhYjlmNDhjYzQxMDYwNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1kugk8qsGf7h2YX0bRzD6lmhcKA
+asdtFux0y5zGT5ELrLig+saxqszVWTdYNzlvblSbAbFyEbz0aLuA2vrpogFgzSj
UakS4ZeRBfxBMVw4vWuKRkrvuxlsmXAnv8tD5OtwWA2e5NyYLrvPQoC+h24U95ss
ipTIsoMVa/IYoKLINJWjIzEn/cPzm1n6l9u4B2TEMPc0d/WFuuQ+3UAwCzhTxd6+
vbIR/IdquwjfId9WLVJ0gaYr/S0+DnInoJffAWgv5nVf3oQ34383w5RoMuVL/xEu
UzUIS1mryRjMUOdPUC4ZUzwZZVIR5TuUz1yNR4oztCelFXP5LEDumNY/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy/aQIwKWQ6SSxEJqufSMxBBgQDMB8GA1UdIwQY
MBaAFGTnVTKSr1lUJu4dfckZohBIlHUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAt
YzE0ZmFmNDNiZTE0LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAtYzE0ZmFmNDNiZTE0
LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsWLyL45
6cYy/d6KxNmBWJTSgwD1e4wOUYBUE4fRD3igD9TmGh3GpEeHyIpRaJ3S4HTMOqyH
bZ4wZ3+bjeYKW7KUW/Z71l6mAKdBUImeT0ik2hqxHbOphMm2G3bWhFQ1EY2lzUCr
Z+p7YCOgbGxCLcmdm4LqQ3Y33VftNOa0691QA7aAw1CF6YjVZrTsCXT1IgoqSQ/N
XsTUqex7fAafOHdlebok6yfD3kHksiEAIOTl8/2+VRfwYjhh/aCwmq++2ptnveli
VVxOR/4JQ+2+NrMrPs3EFRL46khNxp6K1raVvxhV+x980ottU/CnZke/Og2B7nQB
Q6QKiYZ7eTuCpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:54 2026 by rpki-client