Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: IKVc6oBSFy87cB+ANnImc5uLlaB8/Y4dmy4WXPiRWjE=
Subject key identifier: D6:F8:30:F4:DE:E7:7E:24:84:37:11:87:4A:D5:C0:00:DB:45:1C:4C
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019D258420470B3C6AD01FD453A298DCA2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 0A99
Signing time: Wed 25 Mar 2026 15:01:49 +0000
Manifest this update: Wed 25 Mar 2026 15:01:49 +0000
Manifest next update: Thu 26 Mar 2026 15:01:49 +0000
Files and hashes: 1: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (hash: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: krNYuyG57UWHuYtRZ5ErmduOM8+blYnez2sdttlW5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:20:47:0b:3c:6a:d0:1f:d4:53:a2:98:dc:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Mar 25 15:01:49 2026 GMT
Not After : Mar 26 15:01:49 2026 GMT
Subject: CN=d6f830f4dee77e24843711874ad5c000db451c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:0e:f0:14:5e:8c:dc:31:0f:a8:10:f2:61:
ea:c4:de:f2:71:52:52:b8:f3:d2:df:7c:06:65:11:
31:d2:57:75:63:ed:ec:b8:43:95:7a:89:af:c7:37:
54:22:3e:2e:7b:67:9a:e8:6b:48:e1:81:ad:5d:c3:
cc:b2:da:41:2b:ac:e8:ef:3c:85:5f:24:09:49:7a:
ad:b7:3c:cc:8d:f4:c7:2b:c3:8c:ae:59:71:f8:cf:
14:22:06:e8:3b:b5:0b:c3:3b:7a:16:78:6d:04:6d:
f2:63:9f:98:8b:06:28:06:2e:ab:09:73:07:c1:5d:
89:a6:8c:4d:74:66:2c:5b:fd:6e:67:7e:8b:43:50:
b3:77:1a:40:c9:d5:9f:43:03:54:fc:f4:06:70:66:
7c:fc:1d:90:48:a5:ab:f7:a7:21:b2:d1:0e:54:18:
09:6a:f2:e5:93:59:12:3c:49:3a:88:c5:5a:2e:d4:
29:19:88:90:e2:67:5a:46:5f:8b:d2:fe:ec:25:d3:
c2:95:8c:63:c1:a7:04:c4:cd:a1:89:05:ae:1e:12:
42:53:e4:af:e6:f2:ac:fe:c5:37:fd:29:09:1f:a9:
40:dd:32:ca:d0:1c:a3:8f:7a:93:42:47:26:e7:10:
4b:9a:3f:3d:31:ef:90:8e:61:d2:c5:6c:d5:c2:ac:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:30:F4:DE:E7:7E:24:84:37:11:87:4A:D5:C0:00:DB:45:1C:4C
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:51:9d:c7:56:75:8e:f1:f0:c8:dc:50:44:24:d1:1e:b0:5c:
01:6f:37:13:29:20:b1:a8:87:d5:3a:8c:0b:3c:d8:ca:a2:a6:
52:8d:73:20:91:67:94:aa:9b:b7:b4:8a:f4:e0:3b:f3:a3:ee:
77:6d:8d:b0:79:b6:90:31:1d:1c:7e:5c:a7:44:b9:27:c9:10:
23:7f:3f:f2:9c:b7:7b:73:ae:4c:c3:9f:21:11:a3:b4:13:c8:
6b:3b:c2:6a:5e:54:4c:2f:a5:d5:c5:ae:5a:86:95:5e:3b:4a:
28:98:dd:e2:25:32:fa:d0:3b:e3:e8:fa:7a:9a:50:3c:5c:5d:
98:a9:26:8a:5e:67:3c:5b:9f:6b:55:b6:12:5e:10:8f:04:6e:
18:4b:2d:ae:cd:4b:bf:ac:5d:4a:3a:c8:4d:38:a2:9e:d0:c0:
e6:37:e8:70:6e:b2:b9:8b:cf:48:20:fc:2f:b4:6d:cf:36:9a:
16:7a:2a:bc:dc:ae:a9:ac:f3:51:2d:0f:25:fa:7f:f6:0d:fe:
e9:47:5b:66:44:d7:2b:74:67:07:d0:75:96:e0:0b:ea:5c:76:
3c:30:2f:2e:5e:ca:da:18:ac:99:eb:5d:0b:ff:e4:9d:2a:ee:
f1:67:2a:30:3d:a4:f3:3a:f5:24:f8:a0:e4:fe:d3:37:ff:14:
79:f7:ff:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhCBHCzxq0B/UU6KY3KLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx
ZjUzZjUwHhcNMjYwMzI1MTUwMTQ5WhcNMjYwMzI2MTUwMTQ5WjAzMTEwLwYDVQQD
EyhkNmY4MzBmNGRlZTc3ZTI0ODQzNzExODc0YWQ1YzAwMGRiNDUxYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRkO8BRejNwxD6gQ8mHqxN7ycVJS
uPPS33wGZREx0ld1Y+3suEOVeomvxzdUIj4ue2ea6GtI4YGtXcPMstpBK6zo7zyF
XyQJSXqttzzMjfTHK8OMrllx+M8UIgboO7ULwzt6FnhtBG3yY5+YiwYoBi6rCXMH
wV2JpoxNdGYsW/1uZ36LQ1CzdxpAydWfQwNU/PQGcGZ8/B2QSKWr96chstEOVBgJ
avLlk1kSPEk6iMVaLtQpGYiQ4mdaRl+L0v7sJdPClYxjwacExM2hiQWuHhJCU+Sv
5vKs/sU3/SkJH6lA3TLK0Byjj3qTQkcm5xBLmj89Me+QjmHSxWzVwqwdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb4MPTe534khDcRh0rVwADbRRxMMB8GA1UdIwQY
MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt
Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk
LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlGdx1Z1
jvHwyNxQRCTRHrBcAW83EykgsaiH1TqMCzzYyqKmUo1zIJFnlKqbt7SK9OA786Pu
d22NsHm2kDEdHH5cp0S5J8kQI38/8py3e3OuTMOfIRGjtBPIazvCal5UTC+l1cWu
WoaVXjtKKJjd4iUy+tA74+j6eppQPFxdmKkmil5nPFufa1W2El4QjwRuGEstrs1L
v6xdSjrITTiintDA5jfocG6yuYvPSCD8L7RtzzaaFnoqvNyuqazzUS0PJfp/9g3+
6UdbZkTXK3RnB9B1luAL6lx2PDAvLl7K2hismetdC//knSru8WcqMD2k8zr1JPig
5P7TN/8Ueff/5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:36 2026 by rpki-client