Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier: QIrkcEnTcAhE3dx+sYbTVZKUxV2Hb8XE5TY7eEb+Ln0=
Subject key identifier: CD:B4:05:F6:66:9A:69:64:25:AF:18:38:94:66:DA:20:B8:AC:7A:5A
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 019D273A8BC6469D9F842C4B3E3B5718B1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number: 1895
Signing time: Wed 25 Mar 2026 23:00:41 +0000
Manifest this update: Wed 25 Mar 2026 23:00:41 +0000
Manifest next update: Thu 26 Mar 2026 23:00:41 +0000
Files and hashes: 1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: V/89/2pKbcQGo+hYDjm4IAaznvAJHl0zT5fW5p8XtMo=)
5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:8b:c6:46:9d:9f:84:2c:4b:3e:3b:57:18:b1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Mar 25 23:00:41 2026 GMT
Not After : Mar 26 23:00:41 2026 GMT
Subject: CN=cdb405f6669a696425af18389466da20b8ac7a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:2d:59:ff:5d:af:50:cf:6d:16:ec:0a:78:
c2:a0:d2:8e:7e:6b:be:29:76:74:4b:11:1c:de:57:
0d:e4:39:26:a4:e2:b5:23:07:d1:90:34:ca:10:6a:
6d:6c:9e:c7:63:c8:9c:86:fc:70:26:6a:7e:d7:f4:
f3:cd:53:fd:6f:06:51:9d:1f:28:ba:4c:85:83:05:
53:68:22:a1:e3:11:a7:90:d8:6f:fe:27:e9:4a:02:
1e:c6:60:52:0a:fb:67:c6:5c:05:97:d0:80:70:27:
39:2d:ef:ad:cb:2e:56:ae:80:d7:58:29:b6:fc:b8:
ce:af:52:73:35:2e:ff:4c:18:c5:08:a4:d3:00:23:
66:8f:48:37:2d:93:67:f3:62:0f:61:bb:fa:bf:df:
a4:f3:b6:40:db:73:58:32:74:77:6b:cb:1f:1e:70:
c6:a6:14:a7:b8:37:c8:b2:3d:f6:e3:73:96:12:f3:
a0:99:d7:16:e6:6c:a8:c3:df:f7:02:27:9c:71:9d:
c2:33:62:39:6c:50:ee:11:1b:99:9b:bf:4b:e0:f1:
42:28:b1:78:c4:66:fb:ec:7e:ba:a8:56:6b:df:61:
7e:12:37:d2:de:0d:e5:4d:73:11:f2:72:69:5a:fc:
2b:69:0b:fc:a2:a0:86:14:4d:e8:e8:90:f2:57:15:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:05:F6:66:9A:69:64:25:AF:18:38:94:66:DA:20:B8:AC:7A:5A
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:1a:d7:8e:6a:c5:06:ff:3d:0e:14:8d:b5:34:43:99:da:
64:48:38:18:d2:72:36:59:fc:e6:65:36:7e:c1:8a:61:fc:84:
de:b9:25:5a:77:56:21:cf:6e:3a:ff:f6:c3:99:0c:38:89:90:
8c:44:6d:1e:12:46:94:4d:6f:10:6f:b0:56:54:4a:d3:d5:92:
8d:68:f8:a8:b2:3c:50:e4:b5:96:16:d0:11:db:83:7e:37:81:
cb:f4:62:66:f5:51:08:9b:ee:d5:a8:9b:79:dd:67:8d:f5:d8:
18:22:b4:10:5b:5a:63:89:d0:35:21:38:f2:dd:4a:11:1c:a1:
7e:3e:da:42:f2:6d:42:de:d0:45:ee:f6:dc:1e:1a:c5:85:aa:
2d:62:b8:bf:a3:29:3b:0e:d8:14:fb:7f:97:65:c2:01:4a:4c:
8e:02:20:76:7a:b4:66:e6:f2:ec:e1:f8:73:c0:53:85:48:6d:
71:ff:d4:62:ed:eb:81:3a:b6:e3:12:24:7f:5a:b0:c6:1b:c3:
c3:05:9c:6d:ea:17:42:22:6e:ce:85:99:86:6a:70:29:7b:3c:
21:85:fa:50:f4:42:ec:09:67:6d:9c:ee:c7:8c:a3:88:0c:26:
17:ed:59:44:90:04:7a:47:91:fc:f6:6d:7c:5e:bb:10:7e:23:
5e:85:df:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOovGRp2fhCxLPjtXGLGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm
MGIwNWMwHhcNMjYwMzI1MjMwMDQxWhcNMjYwMzI2MjMwMDQxWjAzMTEwLwYDVQQD
EyhjZGI0MDVmNjY2OWE2OTY0MjVhZjE4Mzg5NDY2ZGEyMGI4YWM3YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKgtWf9dr1DPbRbsCnjCoNKOfmu+
KXZ0SxEc3lcN5DkmpOK1IwfRkDTKEGptbJ7HY8ichvxwJmp+1/TzzVP9bwZRnR8o
ukyFgwVTaCKh4xGnkNhv/ifpSgIexmBSCvtnxlwFl9CAcCc5Le+tyy5WroDXWCm2
/LjOr1JzNS7/TBjFCKTTACNmj0g3LZNn82IPYbv6v9+k87ZA23NYMnR3a8sfHnDG
phSnuDfIsj3243OWEvOgmdcW5myow9/3AieccZ3CM2I5bFDuERuZm79L4PFCKLF4
xGb77H66qFZr32F+EjfS3g3lTXMR8nJpWvwraQv8oqCGFE3o6JDyVxX0qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM20BfZmmmlkJa8YOJRm2iC4rHpaMB8GA1UdIwQY
MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1Ua145q
xQb/PQ4UjbU0Q5naZEg4GNJyNln85mU2fsGKYfyE3rklWndWIc9uOv/2w5kMOImQ
jERtHhJGlE1vEG+wVlRK09WSjWj4qLI8UOS1lhbQEduDfjeBy/RiZvVRCJvu1aib
ed1njfXYGCK0EFtaY4nQNSE48t1KERyhfj7aQvJtQt7QRe723B4axYWqLWK4v6Mp
Ow7YFPt/l2XCAUpMjgIgdnq0Zuby7OH4c8BThUhtcf/UYu3rgTq24xIkf1qwxhvD
wwWcbeoXQiJuzoWZhmpwKXs8IYX6UPRC7AlnbZzux4yjiAwmF+1ZRJAEekeR/PZt
fF67EH4jXoXfUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:05 2026 by rpki-client