Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: /e86PWsj5nPWr5vKe7k53W8+vnC77yIYT0JJo5vomf0=
Subject key identifier: 9A:29:4E:D3:6E:FB:6D:D0:31:84:ED:F7:8F:FC:D9:DF:06:37:35:C6
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 019D25BAB70680EF6C00C5DD6967CD1272C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 16:01:26 +0000
Manifest this update: Wed 25 Mar 2026 16:01:26 +0000
Manifest next update: Thu 26 Mar 2026 16:01:26 +0000
Files and hashes: 1: B5RT0XtewP8cK9bXYSGvr5I78ZE.roa (hash: BqZxPf+eE3tSK4x6XVJzraCKqqoFgKdx7BkdQiQzZ6M=)
2: E5bBysMKSA1fmFGTZ4YTELHyIyo.roa (hash: 9+nbl69b4mD21SV0cAnWG05018xchGUSGZ1kN6eC+5U=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: DhrVMpXGAoRTL39NEApIi/D+wBmT7ZCABvK9iwQE+ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b7:06:80:ef:6c:00:c5:dd:69:67:cd:12:72:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Mar 25 16:01:26 2026 GMT
Not After : Mar 26 16:01:26 2026 GMT
Subject: CN=9a294ed36efb6dd03184edf78ffcd9df063735c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:a0:04:a4:f5:00:65:68:e2:57:c3:26:3b:
e9:7a:cd:de:7c:b5:41:9b:3c:07:ec:7a:10:e3:4a:
dd:07:9f:9e:76:6f:6d:7a:00:db:b0:4a:d2:cf:43:
2f:63:0f:df:f8:be:5b:40:b2:e0:d8:44:ba:6c:e6:
03:53:c9:2e:3f:07:46:e6:0e:ec:70:f2:25:a3:37:
c9:3a:ed:e6:df:a3:d3:6e:70:2c:4a:d7:2e:7f:54:
01:e0:89:7b:c5:04:36:22:f5:90:2a:43:7b:9f:11:
68:60:a7:32:68:68:5f:b3:06:54:89:f9:5f:00:f4:
35:c9:4c:57:3e:6f:4d:35:55:0f:be:a0:f6:82:a5:
8c:4a:bd:9b:42:59:14:23:43:82:13:3c:23:e8:7f:
2d:15:47:0a:5c:37:94:7c:64:af:57:65:f9:08:b9:
8a:79:5d:eb:c1:e8:c6:81:11:be:00:5d:c1:14:36:
86:cc:dc:1a:fd:97:df:f1:98:71:77:cd:0e:70:87:
ba:e9:bc:3c:a0:d3:01:4e:88:c2:7b:36:8d:d9:ae:
f6:b2:e4:84:8d:cf:f4:85:7b:15:87:bc:29:f8:c7:
24:c1:93:4b:58:a2:16:d6:53:19:98:12:20:89:de:
9a:b7:42:55:db:a6:4d:ab:8c:9a:77:8b:c2:db:b5:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:4E:D3:6E:FB:6D:D0:31:84:ED:F7:8F:FC:D9:DF:06:37:35:C6
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:30:8b:f7:c2:46:d3:04:20:61:3a:0d:e1:51:67:82:e0:db:
b4:ae:d4:61:40:aa:67:fd:87:ca:ed:4b:44:c8:f4:4d:16:8c:
3b:ed:2b:ad:76:18:19:a4:3b:e5:55:4e:04:48:e0:42:05:92:
9c:93:5b:cf:fd:0f:b6:39:9f:ad:e6:05:2f:dd:40:26:69:58:
ae:d0:29:4d:b7:77:d3:47:1e:a1:90:51:95:b9:56:bc:4f:6c:
a9:96:5c:1b:9f:97:c7:da:05:7c:18:cc:40:8f:61:9e:ef:77:
49:5a:a3:ed:3d:64:0b:d7:b4:fa:d1:25:af:41:24:8b:1f:ae:
2a:19:d7:23:73:a3:ae:4d:27:99:c3:63:ec:e8:99:a8:db:35:
8b:86:07:55:a9:d5:f0:a0:69:f3:eb:19:e1:5d:e0:7c:0b:ea:
bb:78:f7:5b:6e:cb:f9:ac:b8:96:3e:c0:a0:e5:90:e4:d0:d9:
42:3c:fe:6e:7d:7a:b1:e1:98:8c:f4:74:45:bb:e0:60:e7:ea:
c5:a8:09:c1:c3:30:1a:d6:62:58:a4:94:5b:4f:d6:d0:9f:08:
77:30:41:e7:29:5a:e2:9e:37:10:6a:11:d7:92:a3:33:2b:7e:
11:25:61:64:d2:d9:50:97:9f:90:e1:e9:45:8d:f6:be:7c:5f:
b8:44:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:06 2026 by rpki-client