Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: m1s9RPBRisBsLg6hC/9DJ8P+hmOV+lMk5eLTlMVVAcw=
Subject key identifier: 0F:DD:A2:D7:EE:2B:95:A0:CA:57:38:6D:F2:03:BE:EC:AA:01:B0:42
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 019F9580A5C17F16E19625AA00B87B8682B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 19:01:03 +0000
Manifest this update: Fri 24 Jul 2026 19:01:03 +0000
Manifest next update: Sat 25 Jul 2026 19:01:03 +0000
Files and hashes: 1: B5RT0XtewP8cK9bXYSGvr5I78ZE.roa (hash: BqZxPf+eE3tSK4x6XVJzraCKqqoFgKdx7BkdQiQzZ6M=)
2: E5bBysMKSA1fmFGTZ4YTELHyIyo.roa (hash: 9+nbl69b4mD21SV0cAnWG05018xchGUSGZ1kN6eC+5U=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: V/Nxl325ksUIQqAgY550jwBwZMkfCP1A1jFbnndM/iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a5:c1:7f:16:e1:96:25:aa:00:b8:7b:86:82:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Jul 24 19:01:03 2026 GMT
Not After : Jul 25 19:01:03 2026 GMT
Subject: CN=0fdda2d7ee2b95a0ca57386df203beecaa01b042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:7b:7c:8f:53:cf:39:9d:a3:87:8d:54:bb:
79:42:90:0f:6b:1a:dc:67:c4:30:44:5d:50:bf:eb:
67:d0:0a:c9:b8:0f:ad:49:c3:2d:1d:ed:ca:df:eb:
a5:ad:a2:c9:92:80:c7:d2:73:53:48:2f:1b:5a:a7:
c2:bc:99:21:a6:55:94:d6:86:8f:ef:db:db:9a:9e:
1c:e0:3d:e1:e1:af:f8:83:60:1a:77:d7:62:8a:d7:
01:92:4c:22:87:35:32:54:3c:35:de:dd:be:ae:02:
e0:21:9d:2b:85:48:69:6e:6b:66:82:25:17:fd:03:
f5:e5:66:c3:94:ea:a0:ac:f1:1e:cf:86:2a:e0:22:
71:cc:88:49:72:2d:c5:10:cd:78:2c:e9:1c:26:e9:
71:17:d4:00:2e:d0:30:b4:64:12:7d:7b:d1:30:fe:
9e:ea:f8:66:c0:ed:ff:49:8a:88:82:4f:70:d2:52:
9b:05:4a:8d:6f:a6:44:d9:0e:37:be:5f:b0:77:5d:
bd:30:56:87:56:48:9f:c4:11:15:6c:31:a9:ac:ac:
6f:c4:5a:23:c1:e9:6f:da:aa:0a:ae:d2:ac:bb:bd:
45:eb:29:12:a7:4c:a3:0d:16:ba:24:56:9c:74:8c:
21:de:f0:51:b6:14:98:2d:38:83:28:05:d2:70:cc:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DD:A2:D7:EE:2B:95:A0:CA:57:38:6D:F2:03:BE:EC:AA:01:B0:42
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:a4:44:0c:8d:06:12:bb:9a:35:40:e1:54:17:f8:49:73:
b5:51:f7:a6:16:c4:38:32:50:14:84:66:27:e0:29:47:6d:df:
15:4e:d3:9c:19:f9:bf:2f:1e:fa:3f:72:85:1f:73:2b:4c:60:
c7:9a:4a:4d:fe:83:4e:92:e5:70:bb:44:45:3a:14:27:f0:c2:
e6:76:1b:cc:5e:b2:ac:05:8c:51:3e:b7:f0:14:4b:be:c7:d2:
86:1e:46:12:47:8f:d5:63:02:df:8f:f6:4c:aa:db:55:0d:27:
45:62:03:68:c8:14:93:2a:49:99:79:e5:80:a5:39:8c:95:79:
0b:b1:3a:5c:1a:21:2f:0e:9c:6b:f5:b6:65:e6:83:a9:75:3f:
6c:e3:83:dc:3c:25:6a:be:07:d2:33:f4:5d:10:3e:77:d4:f0:
e1:fc:41:27:35:35:9e:18:28:12:4a:36:be:dc:19:ea:78:98:
52:ba:ae:57:cf:39:f7:39:a6:db:fb:c9:83:ed:19:a6:f4:ca:
ae:cf:94:6c:1a:48:88:f9:6e:4f:a9:48:d7:f0:ab:b1:74:98:
6b:bc:8b:92:f5:fa:7d:14:48:6d:88:df:e8:c5:ef:c7:50:7b:
b3:89:cb:fa:36:c4:61:5b:38:7c:fc:ff:9c:13:e5:ef:e1:61:
b5:0b:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:06 2026 by rpki-client