Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: TBI1gpDu4uumrJXptjCO75Fl1wrMO8mykxxPYGs/B9M=
Subject key identifier: 6F:FC:48:22:82:2B:9A:0C:23:61:97:25:D7:24:A9:DC:E8:2E:2D:28
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 019D28BB45390AADDFCA806B86C4DF61574F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 027C
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: Hv6nIX8HVFeyFg4uQleXqqT5MWI.roa (hash: HIwiJMcqVUyXLS/mAM0+jLz/PX0Vv8ko69oawzAsSDQ=)
2: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: 2z+Ycsd6MGX4Y93a5MW13YFuR1W4mW4vnTb5cptik1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:45:39:0a:ad:df:ca:80:6b:86:c4:df:61:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=6ffc4822822b9a0c23619725d724a9dce82e2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:59:dc:10:c7:4a:cf:09:0f:62:75:cc:3e:
4d:64:f0:40:8f:77:ea:c3:64:52:d3:35:c8:7a:73:
f4:2c:4d:3a:ef:e3:f6:1e:19:55:03:a8:f3:64:27:
06:87:36:40:ba:e7:c9:b9:c8:1a:33:0e:fe:fd:18:
77:1c:8a:eb:fb:37:01:36:8d:f3:4d:fc:71:07:97:
2c:29:22:1a:7d:7f:10:c7:57:f0:84:a0:6d:ed:5a:
63:d7:6e:4b:ed:c2:ea:31:f3:08:40:3e:03:19:9d:
87:de:12:68:9a:b0:ab:90:1a:78:b1:68:e0:10:bc:
40:0c:84:4c:37:2f:8c:07:ca:4f:bb:80:7c:22:0b:
ca:19:f6:56:a8:88:5d:55:e3:18:ab:0d:8d:a6:d0:
96:8d:68:35:e8:5f:63:43:42:02:15:3c:7d:0d:a0:
ff:d1:dd:27:99:aa:ef:2b:f6:2b:83:1c:c1:8a:2d:
79:15:37:12:3f:d0:a0:4d:93:43:4b:29:c5:82:42:
5a:51:78:29:dd:f1:73:b1:16:6a:0e:1c:b0:37:1b:
38:2f:98:df:28:67:b3:d9:8e:9f:bb:5f:dc:ef:16:
a2:88:fa:0b:ea:6b:d0:7e:c9:ae:b7:09:c7:31:af:
1e:5b:13:64:0a:d5:23:11:1a:7d:5c:70:84:b4:36:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:48:22:82:2B:9A:0C:23:61:97:25:D7:24:A9:DC:E8:2E:2D:28
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:05:1d:27:d0:2c:15:a9:e7:15:e1:3a:a5:54:7f:61:45:94:
84:47:db:7a:f0:e3:6a:92:71:d8:05:76:15:3d:1d:d4:b6:02:
1c:2b:35:1e:c5:e3:f9:37:7d:97:4b:a5:31:48:5b:f4:dc:83:
15:fd:63:10:88:2d:a8:23:43:0b:c2:ba:b2:5c:dc:2d:9a:b6:
9b:7e:ca:a3:e0:e6:28:49:d3:be:b0:5a:20:f3:d7:5a:be:48:
43:2b:a1:0c:8e:d2:58:41:00:43:12:9c:4e:87:b0:68:c2:17:
6b:5a:c5:23:32:18:35:39:14:77:36:c5:d8:87:ac:8b:bb:cf:
21:1e:4b:0c:f3:42:87:39:7c:5a:36:ae:a0:4a:95:1d:f7:e9:
36:0b:41:e5:23:58:9f:0c:9f:b3:da:89:04:88:43:12:6e:ed:
17:2d:4e:3c:66:e8:3c:0b:1d:de:61:f7:a7:c3:29:5c:7b:7c:
dc:62:c1:cf:c4:c3:5c:8f:29:69:2a:da:36:84:c8:70:b3:26:
e0:f0:c8:67:8a:5b:8b:a2:51:d3:30:6f:12:6d:15:a6:40:0c:
ce:ab:6b:9a:b8:45:eb:a5:dd:dd:43:4d:dc:f6:bd:24:ca:0f:
1d:e8:ed:d8:57:5a:93:de:90:07:ec:97:37:83:d6:6d:e7:cf:
43:81:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:45 2026 by rpki-client