Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: 3Qrg7Kz6Afroue8yoqVEkrdtn/PMls309ooR07GnoMQ=
Subject key identifier: 96:44:1A:E4:37:51:D9:3C:29:74:F2:23:13:89:3A:DA:DC:EF:72:6F
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 01A0D9F1315B4197FDA361344D4CF7030169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 19:00:57 +0000
Manifest this update: Fri 25 Sep 2026 19:00:57 +0000
Manifest next update: Sat 26 Sep 2026 19:00:57 +0000
Files and hashes: 1: B5RT0XtewP8cK9bXYSGvr5I78ZE.roa (hash: BqZxPf+eE3tSK4x6XVJzraCKqqoFgKdx7BkdQiQzZ6M=)
2: E5bBysMKSA1fmFGTZ4YTELHyIyo.roa (hash: 9+nbl69b4mD21SV0cAnWG05018xchGUSGZ1kN6eC+5U=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: F2X2rgUzFoxWgjGb7M5SqtSzVQtmCAMj7RlIJqVp6FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:31:5b:41:97:fd:a3:61:34:4d:4c:f7:03:01:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Sep 25 19:00:57 2026 GMT
Not After : Sep 26 19:00:57 2026 GMT
Subject: CN=96441ae43751d93c2974f22313893adadcef726f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:11:95:8b:f5:71:45:d7:0c:de:f6:84:ab:
a1:a3:42:c1:31:dc:86:97:f3:03:5d:2d:a7:b9:e5:
e6:a2:b5:68:3b:39:5d:62:1a:9c:f3:ac:cd:02:5a:
e8:c9:75:b1:2e:f1:91:3e:36:a3:cb:8b:3c:84:3c:
e2:63:28:95:7a:00:18:fd:23:7f:a2:1b:ea:3b:84:
4b:36:ec:f8:6d:89:59:3f:04:ef:03:33:e6:c6:58:
d8:41:33:19:19:5e:39:73:d0:c2:b6:d3:ff:46:82:
a1:e6:c3:22:df:d0:56:64:a5:e0:2c:ca:78:3b:ec:
70:5f:c0:a7:0f:91:16:21:8f:d7:1c:d9:59:b4:46:
58:1e:ca:d8:bb:77:37:8f:0b:8a:fe:05:59:9c:45:
df:82:4a:85:ea:ca:b6:44:b0:45:b0:c9:be:de:69:
9f:82:96:43:bd:93:17:fb:33:5a:05:41:91:62:75:
01:24:dc:64:7b:f3:cb:9c:ae:59:a7:d4:30:27:29:
f8:b0:87:f6:5b:c1:4f:4c:59:7a:61:cd:01:8d:af:
86:00:ef:a0:56:48:6e:56:20:7b:db:5d:7d:13:9f:
07:14:2a:f1:d1:6c:c3:d7:a2:33:5b:7c:3f:2b:0f:
ae:cf:9e:54:78:a5:d0:0f:42:24:0d:b6:88:19:af:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:1A:E4:37:51:D9:3C:29:74:F2:23:13:89:3A:DA:DC:EF:72:6F
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:7f:14:cf:be:82:06:f0:0f:27:5e:13:55:f5:50:6f:c4:
36:35:dc:76:8f:e5:da:0c:db:79:d6:55:b3:7e:cc:45:66:0d:
43:95:02:b0:d3:15:43:b6:66:2c:8c:99:19:27:2c:b2:a9:85:
79:3d:6c:6e:60:e9:18:83:17:d2:52:9b:21:12:24:f2:65:b6:
b8:99:14:21:d0:f1:92:e2:8c:ac:d2:6a:f8:6d:9e:c5:75:12:
8c:63:49:7f:1c:a8:73:b4:69:a7:da:c6:1a:d6:b4:24:f0:6c:
d9:f3:2a:2d:e5:fb:80:67:fb:fa:ae:95:6c:3c:51:05:0a:6d:
38:37:13:6a:db:24:65:1b:e9:52:dc:a7:77:03:a6:85:f4:4b:
49:1b:2a:8f:c8:ff:d8:a0:20:0d:b4:ea:4d:ff:8d:eb:fb:77:
6b:48:0c:80:22:f3:e3:1e:3b:9b:81:da:af:19:ec:73:e6:56:
18:89:99:7a:a2:f0:7e:b7:95:ce:f6:70:b5:06:40:d8:a3:4f:
5a:4b:f8:e0:65:96:3a:27:6e:80:ca:f1:6a:0e:b6:60:3b:16:
b7:ae:91:44:2d:89:5f:b8:b6:d8:7b:54:9b:3a:78:31:4d:56:
ee:e0:e3:e0:5e:b8:67:83:21:13:ae:0f:6a:ff:b8:3b:fc:3e:
56:bc:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:45:49 2026 by rpki-client