Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: 6/S8B2CQVXZ+8z/cI23eKijzdH62OLPBVnX99L7lA5o=
Subject key identifier: 25:3D:73:A4:29:D2:C5:EB:B9:F0:48:21:4B:DE:69:37:18:78:BE:4C
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 01A0DBDF9A2F88A00BA8A9099B628D81CE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 04:00:59 +0000
Manifest this update: Sat 26 Sep 2026 04:00:59 +0000
Manifest next update: Sun 27 Sep 2026 04:00:59 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: gGDFL36r1Rga6MDisRICCY59/2McQMPMgRwqBmfD3gw=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:9a:2f:88:a0:0b:a8:a9:09:9b:62:8d:81:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Sep 26 04:00:59 2026 GMT
Not After : Sep 27 04:00:59 2026 GMT
Subject: CN=253d73a429d2c5ebb9f048214bde69371878be4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:fc:0e:a0:40:38:55:5b:70:33:44:e9:4f:
ce:30:32:a9:26:8e:aa:e0:3a:98:e7:6c:c7:86:b3:
1e:0d:c4:8f:15:0d:96:58:ec:d0:ea:af:a8:dd:d7:
17:8e:a1:8c:2c:3b:23:f2:31:a3:11:31:08:c7:24:
19:19:a2:76:de:27:e4:32:f2:f7:f4:b6:a6:7e:de:
6c:aa:f1:b4:4d:0b:10:c4:b8:8a:86:43:e3:25:28:
00:ac:64:b2:2d:fd:a4:7c:25:cd:4e:1f:9b:18:4a:
be:39:bd:5f:37:0a:14:e5:af:c1:4f:fd:1d:b3:f9:
76:05:4d:76:83:0c:7e:8c:52:0a:1c:92:b9:b2:34:
0a:9c:41:63:65:71:36:d2:43:49:d1:62:a6:32:4f:
0f:f6:2b:c5:c3:8a:f7:62:6d:77:d5:38:e4:5e:d5:
79:96:95:6a:2e:88:a2:74:0c:18:63:45:f0:06:fb:
ec:ab:45:d0:44:26:95:3c:f0:b1:a8:33:d5:b2:84:
c9:95:57:59:5f:ab:12:c5:f3:35:e1:2c:22:2e:f8:
0e:28:f7:07:e7:90:8d:6f:21:c7:37:12:85:16:83:
37:1b:84:06:fc:38:c6:4d:d2:75:e5:b3:6c:59:7a:
80:f7:da:f7:0c:59:a4:8e:c0:72:7f:fb:e9:e5:ee:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:73:A4:29:D2:C5:EB:B9:F0:48:21:4B:DE:69:37:18:78:BE:4C
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:77:f6:af:78:05:36:c6:29:59:67:40:68:9e:b2:f3:c7:cc:
4a:01:8a:80:3a:82:fb:9e:7d:16:b4:70:58:41:c8:a7:fe:15:
80:55:74:e6:76:77:77:c5:75:a9:25:3b:96:16:c8:8e:f7:e7:
56:c3:61:bb:05:7b:66:e7:0e:65:dd:bc:e3:ed:e2:9c:54:88:
b6:73:f7:80:6d:01:64:cf:7d:bb:35:05:85:37:b1:b1:3e:3a:
c3:01:e7:94:a8:de:64:79:8c:bf:b2:01:b5:95:44:ab:53:b7:
16:9d:61:d2:e1:4b:30:c6:a1:53:30:7a:82:49:e3:f0:46:c0:
14:fd:d7:8b:f4:f8:2a:30:2d:e4:2b:c6:f5:61:1a:e1:05:b6:
5c:d1:f6:0c:1c:8c:7a:44:a5:dd:79:ae:10:fc:21:9d:9f:96:
f1:1f:67:7d:66:fc:4d:af:1f:4e:c5:86:ec:b4:44:e4:f1:5f:
22:2c:d2:9b:b6:8a:e3:ec:f9:f2:10:27:ff:13:d0:74:05:26:
85:2e:1c:a5:6c:be:9b:d5:38:92:cb:45:61:1d:12:a5:7a:2d:
c2:df:ea:7a:b3:b9:a7:24:b8:8e:0c:2b:30:f5:ed:ae:c5:6e:
ca:44:84:88:0c:ec:28:03:b7:e6:13:99:78:a7:e8:af:91:7b:
51:8b:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:20 2026 by rpki-client