Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: yIi4XnaHZBREJzj/pqD5x4+D2DT2i7+ty/9fGKZolrY=
Subject key identifier: E9:F1:6B:24:EA:C7:24:6D:EB:52:F9:AD:91:F7:44:A5:DC:2F:A2:1E
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 01A0E3993561C0BF669DD1ACCE7D4050C8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 16:01:03 +0000
Manifest this update: Sun 27 Sep 2026 16:01:03 +0000
Manifest next update: Mon 28 Sep 2026 16:01:03 +0000
Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=)
2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=)
3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: SlLioHwurCjiMqyWVDqUuwzK+2d6D9g/q2j243kOr3M=)
4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:35:61:c0:bf:66:9d:d1:ac:ce:7d:40:50:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Sep 27 16:01:03 2026 GMT
Not After : Sep 28 16:01:03 2026 GMT
Subject: CN=e9f16b24eac7246deb52f9ad91f744a5dc2fa21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:a3:eb:36:d3:a0:c6:e7:50:b4:d3:74:be:
49:89:dd:e3:aa:64:02:ac:bd:3a:7d:a2:d1:4a:e6:
39:63:37:ff:0a:e2:78:5b:54:20:3e:eb:f7:19:f2:
f8:0d:54:a0:b1:ee:69:6e:01:f6:9b:c0:03:0e:4b:
71:14:3a:18:38:89:77:4a:f6:36:dc:fa:35:b2:5d:
22:6c:a1:71:34:1e:32:fc:39:f6:98:68:7f:7d:df:
e4:09:74:eb:0d:4e:fd:db:6b:91:cb:84:98:d2:e6:
de:62:b4:5e:b9:6f:2f:2b:7c:8b:f6:28:96:95:5f:
a7:18:82:2d:9e:1b:97:fc:4e:49:42:11:82:b5:fb:
67:4a:94:6e:19:5b:6c:4f:5c:0e:ae:65:4b:9a:a9:
d4:0b:28:00:f2:7d:af:71:46:b8:9d:28:51:7b:5e:
46:7e:aa:9d:ea:8d:cd:80:94:6e:ef:ef:6e:28:e9:
93:bf:c0:16:97:14:1b:c1:da:aa:c6:25:94:bc:77:
9f:e6:3c:62:d1:a1:ce:64:3f:86:39:11:05:64:a3:
4a:8e:1c:30:51:cb:69:cf:e5:96:2e:f9:bc:72:03:
aa:11:e9:a1:27:4a:7c:73:56:07:41:56:d6:5f:07:
ca:5d:0c:0d:3b:b3:7b:63:e2:fb:31:0c:69:ac:30:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F1:6B:24:EA:C7:24:6D:EB:52:F9:AD:91:F7:44:A5:DC:2F:A2:1E
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d4:cc:13:ab:69:d4:34:bb:b1:fc:d2:60:5a:76:f2:e2:44:
fd:4a:fb:25:22:a6:50:46:ff:6b:51:e6:9f:ed:79:6d:74:32:
df:c4:9b:30:41:c8:47:8c:b0:b5:18:f5:d9:04:0b:f7:3c:4c:
8e:05:ad:26:81:3a:ea:f9:5e:97:73:a3:33:fb:f2:68:94:9e:
4a:7a:c2:21:65:a8:32:55:a8:59:17:51:86:b5:0c:37:13:a7:
56:7c:36:ee:18:d7:ab:98:a9:94:55:0c:b3:79:1f:1a:3a:e2:
a8:57:8d:65:d0:7b:6b:cd:8e:0c:27:b2:ff:f2:d6:2b:d9:b5:
37:fb:f4:73:2c:2b:e2:2d:45:64:da:d0:20:04:c5:8d:0b:94:
c4:05:67:90:58:7e:10:0f:99:43:70:58:f5:ba:9f:0c:a7:c4:
a1:fa:fc:86:12:ba:fb:a5:b6:bd:6a:a0:60:38:c2:b9:38:d1:
3d:2a:3f:75:a9:c2:6e:d0:31:7a:b6:5a:02:74:69:fe:da:32:
97:26:e7:cd:a7:c9:b6:25:38:cd:2e:1a:61:36:e1:c5:6c:79:
c2:6f:b4:4b:e5:d3:28:08:85:41:33:9d:b4:47:f2:6a:df:bd:
90:40:00:6d:1d:a6:da:d4:38:f5:9f:46:7f:a8:63:86:21:8e:
71:6a:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:28:48 2026 by rpki-client