Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: BuslwbdR3DofZl2tz/jKRGfCV/LI5zk60CPvh5fQ4A8=
Subject key identifier: 82:39:B7:4D:C7:6D:FB:7D:A7:FE:41:3C:25:92:96:7E:AB:0D:CD:66
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019D28F2A2BDB1CF7A0E1B260FFBD1FDE685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 18F6
Signing time: Thu 26 Mar 2026 07:01:23 +0000
Manifest this update: Thu 26 Mar 2026 07:01:23 +0000
Manifest next update: Fri 27 Mar 2026 07:01:23 +0000
Files and hashes: 1: 5P1wGtB85HxirMIBYnTtfNp_BtI.roa (hash: t+c+B7cr2MGabIHzLXA82hUcSDP2mV2mZWJBmkVbzNA=)
2: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=)
3: KhGccG-9kSJW0nKCk6yANGIBUFg.roa (hash: zywPAJ1T+FuIU1G9CdS4XD+lquEKkevubyLrKuYUwfk=)
4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=)
5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: ThHWJOtR76CeUYS3iFnouDFwgUemG816BufZonI+uwg=)
6: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=)
7: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a2:bd:b1:cf:7a:0e:1b:26:0f:fb:d1:fd:e6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Mar 26 07:01:23 2026 GMT
Not After : Mar 27 07:01:23 2026 GMT
Subject: CN=8239b74dc76dfb7da7fe413c2592967eab0dcd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:c3:e0:e6:da:d9:23:23:a5:37:1a:e6:fe:
21:d9:68:2c:3b:86:2b:61:bc:e2:7d:3e:45:8e:a8:
89:9d:d2:7a:dd:a9:0e:9b:0b:0d:45:08:0f:3e:3e:
f4:da:4d:25:a3:38:09:06:ff:5c:e6:39:3c:b2:f0:
3e:89:2b:78:6d:e6:23:28:38:df:ee:36:5b:50:6b:
13:dc:11:b2:2c:e3:b2:0c:1c:89:f6:14:32:97:fb:
9c:38:0c:9f:90:7f:f7:e9:97:6f:e6:6c:f1:63:7f:
62:8f:38:fb:e4:b1:8e:1d:77:b1:49:9e:07:fc:2d:
5f:81:1e:df:3f:3a:2a:12:c8:0d:19:71:0d:4a:1e:
8e:a5:fa:1a:f9:1e:af:c3:da:97:56:9e:75:3e:ea:
06:83:b3:bb:da:6b:2a:ab:e9:91:64:4d:1f:41:7b:
14:f2:49:a6:30:76:d1:96:63:94:aa:b9:22:bc:41:
07:4a:ca:56:19:a3:4e:6c:7d:5f:ea:e4:2d:e1:49:
b9:fc:48:c1:7f:f5:5e:c4:ae:3b:b7:60:da:b9:93:
63:74:a0:5a:d6:8f:a3:4e:0d:65:c9:e5:5b:fd:9d:
a9:07:b5:f3:e5:c9:2f:07:be:0a:b3:42:94:c4:ae:
5d:46:5e:30:83:9e:4d:ae:dd:ae:69:e8:55:13:4a:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:39:B7:4D:C7:6D:FB:7D:A7:FE:41:3C:25:92:96:7E:AB:0D:CD:66
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d1:81:e1:b8:4c:ab:53:18:02:dc:6c:99:48:03:ba:2e:7c:
82:5b:c4:48:71:79:bd:40:52:04:03:b4:4a:17:6f:34:b0:65:
f9:71:41:5e:2e:61:2b:af:31:42:94:93:62:94:2d:80:fc:56:
e7:66:2c:4e:d8:e2:44:61:14:b7:02:94:c7:d8:62:7d:e3:93:
45:1e:93:33:81:fa:f0:12:df:11:dc:3a:26:f3:75:75:5f:67:
49:ba:c6:9c:00:81:4c:18:6c:f1:71:58:44:90:88:d4:d8:31:
8a:c3:e2:11:da:3e:5f:f3:81:a6:13:f3:d0:ed:3e:51:a1:86:
58:bd:ef:cd:61:29:e1:aa:bb:2f:cf:8b:80:72:70:0a:25:e9:
b5:21:a1:8a:77:4d:92:f3:2a:39:1a:58:46:4c:53:8d:dc:2a:
f8:d7:08:07:87:33:25:14:03:e1:7b:a4:b3:59:30:de:02:7d:
02:e7:1b:b0:dc:32:65:14:fb:2a:d2:50:30:99:2b:48:3a:6b:
32:51:7d:bc:a3:e4:54:4e:ed:93:07:00:86:78:26:68:cd:6d:
78:25:c8:09:44:0e:7e:2c:04:92:c1:db:f4:20:75:0a:30:18:
65:52:a2:44:48:9f:31:9d:b5:92:75:86:b9:1b:92:90:f4:bf:
44:0c:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:29 2026 by rpki-client