Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: 33/sQ669zX5WwkbT9EQp1o0wAUTG1eFY+ZOPNxVhVlc=
Subject key identifier: 1B:C1:9E:7C:9A:C3:94:79:7D:9F:82:D1:C3:E0:32:8F:AF:2B:FC:10
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01A0D383C50A4C253B826D385B34E4196F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 13:03:43 +0000
Manifest this update: Thu 24 Sep 2026 13:03:43 +0000
Manifest next update: Fri 25 Sep 2026 13:03:43 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: Rjpkyv+3cr3CCx4ykUlUNAmHLBCzvcsPd6WkU/TgqXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:c5:0a:4c:25:3b:82:6d:38:5b:34:e4:19:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Sep 24 13:03:43 2026 GMT
Not After : Sep 25 13:03:43 2026 GMT
Subject: CN=1bc19e7c9ac394797d9f82d1c3e0328faf2bfc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4f:6a:76:d3:68:70:1f:85:c9:2b:5d:35:6f:
8b:f8:3a:97:44:63:db:d4:62:f2:93:51:21:55:b5:
a2:31:57:6c:84:a1:e9:80:75:b2:d9:ff:ef:ed:dd:
cb:6b:bb:99:68:b0:89:24:69:05:b1:18:83:5a:9f:
1e:98:4e:94:18:4c:4a:48:35:10:d3:9f:85:8f:bf:
d4:10:a5:f6:3f:a7:da:84:1e:16:95:1d:55:e9:c4:
6d:a2:d1:63:fb:a9:7e:0d:33:b2:5e:a2:15:70:e4:
00:4b:d5:2a:d6:3c:85:8d:41:1f:b5:d1:f4:d9:92:
b2:61:15:50:cb:85:81:e0:af:cb:a7:a4:41:42:2b:
83:38:62:ab:9e:8a:19:25:08:7f:97:ab:57:74:c1:
c0:6e:ee:a3:b7:8b:c3:c3:32:a5:d0:2c:e9:d2:21:
8b:6e:e7:51:1d:0c:33:75:55:6d:e0:d5:63:e4:d5:
1d:23:ca:52:7f:38:e1:fc:40:e2:bc:0c:47:39:bc:
52:8f:a4:cc:bb:dc:30:04:cb:2e:9e:03:dc:ce:d0:
d1:41:f9:5e:52:ec:2c:3b:c1:b0:a8:1b:09:ad:87:
ab:66:51:09:31:ef:9a:e4:7a:1d:b7:b9:f8:46:dd:
fb:08:c9:35:5d:17:25:30:0b:d4:d9:53:ba:70:67:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:9E:7C:9A:C3:94:79:7D:9F:82:D1:C3:E0:32:8F:AF:2B:FC:10
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:9c:f9:db:c4:18:35:05:aa:f6:21:df:8e:69:ac:39:84:
8b:bd:89:f7:a9:38:3b:40:e5:57:8f:22:d7:08:f5:e1:fa:f2:
4f:0d:fc:42:89:57:0a:92:8d:fb:b9:45:a5:f5:b3:7e:e3:f5:
32:66:8f:13:d9:6f:a0:09:d8:8a:55:e0:8e:48:de:48:a8:90:
20:d8:25:82:ee:7e:d3:b1:20:10:c3:f6:7d:80:d8:a0:41:31:
4d:9b:2b:c7:a6:6f:08:68:03:c9:08:71:3f:36:24:6d:2e:09:
d5:56:d1:ff:69:45:08:89:9b:31:26:9f:f5:8c:c9:dc:25:c8:
12:4c:17:ef:60:6e:f5:bc:a0:13:76:4d:51:aa:7b:84:d5:0c:
c4:d5:92:3e:bf:af:c4:03:14:b8:e8:1e:4a:cc:aa:a2:50:f1:
ff:93:4f:cc:53:2d:dc:4f:02:34:71:27:ad:15:ce:ba:89:0a:
1c:58:7e:34:8a:c5:54:c5:5b:6c:f4:bf:89:97:1d:84:5e:7d:
2b:7c:8b:78:62:f2:42:94:d7:93:fd:15:fb:51:fe:a6:5e:f2:
de:2d:7f:92:57:1b:e6:c4:7c:65:4a:31:85:9c:7c:6b:e8:18:
f2:52:b4:0a:1a:a7:de:f5:39:9c:ce:ea:42:f9:ea:9d:ab:d6:
6b:fa:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:18 2026 by rpki-client