
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: L45XZ+TL998wExWZRKzmidva/FKamNTUIE0shwtOObk=
Subject key identifier: D5:87:3E:D0:50:7E:D0:55:EC:1E:C2:83:B5:6D:D0:D1:9F:95:D3:86
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 019D27045D5F49D4537A3BC2DAAE7814DE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 12EF
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: qhM/M9NVHnZGgU9s0EKS/I9fUezFJPTASdU4rfLJMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5d:5f:49:d4:53:7a:3b:c2:da:ae:78:14:de:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=d5873ed0507ed055ec1ec283b56dd0d19f95d386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:44:dc:3b:04:0f:0d:ab:77:d2:60:0e:21:
3a:f6:1b:da:67:a1:da:4d:45:46:02:02:9b:11:9f:
80:da:f8:ea:69:75:78:8b:c2:74:35:09:32:0b:33:
60:d9:81:66:42:6f:88:bf:0d:6a:e8:0f:1a:d0:1c:
5e:73:66:54:e7:e8:cc:19:e5:cd:e6:08:48:6e:de:
30:5e:04:67:79:2b:18:bf:4a:c2:8a:6c:71:e8:05:
ff:7b:74:d7:cf:df:45:17:13:50:92:01:9d:bc:72:
5b:c6:68:56:61:98:92:43:0a:93:45:c5:fa:da:5b:
24:d7:3d:b6:dc:ef:17:7b:ab:a0:73:d0:04:40:f0:
ac:34:0b:30:22:e8:8f:02:ad:a1:04:72:d5:d7:51:
8b:88:69:60:75:bb:3c:19:c9:c9:ad:8e:e5:17:5b:
17:55:3f:8a:46:73:dc:e5:44:3c:1a:dc:9e:b0:d2:
3e:92:9c:de:da:eb:16:23:dd:e2:f3:b3:8f:98:6c:
5d:5d:20:12:a5:03:01:01:40:93:9f:61:45:39:68:
7d:4b:aa:36:7a:9c:d0:fb:ce:12:9b:9d:9c:a5:31:
fc:c8:6a:57:c0:73:08:9f:01:7c:85:d5:c1:1c:9d:
c5:11:cd:61:4f:da:af:b4:d7:92:95:42:da:79:9c:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:87:3E:D0:50:7E:D0:55:EC:1E:C2:83:B5:6D:D0:D1:9F:95:D3:86
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:75:1b:e4:8d:43:eb:14:55:b0:03:6c:45:d4:df:38:6a:
0d:4f:5a:fe:86:d6:f2:9d:f7:32:ad:df:2f:41:7a:f8:05:19:
45:3f:33:6f:79:b3:4a:ec:e8:41:08:cc:54:07:73:8d:09:75:
57:6f:01:04:66:0a:e3:5c:32:37:9d:1d:c1:26:25:b1:e9:d3:
84:8b:38:af:d1:46:f1:8a:27:6c:5f:95:90:01:3e:c6:c1:68:
02:b7:c6:a0:32:e1:11:25:f9:61:08:6a:12:5b:15:67:9c:4c:
0c:d5:98:aa:a5:7d:b4:f8:a3:06:2e:ff:d7:f7:d4:0e:b1:a6:
17:49:9d:ec:4a:fa:88:60:51:60:a5:2d:c0:66:3d:a7:ea:b1:
e0:0c:01:19:3c:70:3c:88:92:86:b3:b0:82:0d:60:d6:5f:e9:
a2:78:a1:10:6d:99:49:37:58:09:eb:e5:41:77:83:f2:c5:b5:
0c:37:1b:35:c9:35:f2:94:c8:51:50:00:c1:6b:65:c1:ce:4a:
81:e1:21:75:87:8a:e2:2b:05:41:1e:e8:3a:23:14:81:3c:85:
4f:75:c2:47:e1:ed:0f:d7:2a:4a:e9:72:f3:6f:12:64:95:76:
cb:3c:e0:d3:26:83:e0:20:39:28:08:a4:fc:d2:9c:1f:f1:79:
fa:05:ad:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:30 2026 by rpki-client