Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: kG6xdj5euLzwNmwTSNakEWiweftpY0A9cyYrJd7LwG4=
Subject key identifier: 1B:33:F4:B0:10:CB:88:DB:DB:8F:B6:02:40:29:98:8D:18:48:E6:98
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 019CAC7E1498579CB0AE9D343DFCCB82FE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 1120
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: ZhJ5L5BrKwHCfAkrdgSHGKVEGLQ.roa (hash: LrOGWQlYoODl2o5Zz7qsJzTT29X+TmzrpsnPFdEc10c=)
2: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: nVdZ4EFoToQH2CtlyOPFv+Qiu93uNVLX49Upz872sEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:14:98:57:9c:b0:ae:9d:34:3d:fc:cb:82:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=1b33f4b010cb88dbdb8fb6024029988d1848e698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:b3:46:14:d8:78:94:b1:ac:06:af:bc:30:
a4:fe:4f:31:a0:5b:00:d8:0f:01:78:37:85:7f:22:
75:b3:1a:23:26:1c:18:da:3f:96:a6:30:e9:b2:a2:
04:93:24:e5:a8:c0:6c:34:50:e3:58:b4:26:f4:bc:
c2:c2:65:3e:e6:fb:fa:9b:e8:96:7a:b8:6e:f3:3d:
48:64:36:74:c2:d4:19:33:ce:a6:8d:3f:93:d7:b5:
e3:c2:d5:d3:f1:1f:de:62:fb:e7:51:55:f1:b2:4b:
a9:de:8c:2f:a2:af:ac:18:6e:df:19:21:38:69:cd:
ee:9d:57:24:ba:51:68:90:ed:51:f6:54:ba:af:54:
af:a4:0a:a2:6a:44:2b:6e:bd:0b:6d:f0:aa:3c:b3:
e1:83:6d:2d:10:09:2f:0d:89:cc:f5:62:0d:c0:2e:
37:cf:9a:b7:9c:c7:75:82:6c:a2:34:36:d6:b0:57:
6d:7b:eb:ef:30:9e:2a:7a:40:90:26:d4:e6:cb:5e:
79:06:fb:2a:a2:d4:10:2a:c8:11:6f:f7:76:e7:be:
08:b4:01:c0:25:94:69:96:a3:2f:87:09:22:e3:7a:
6d:e4:26:b7:1c:ac:36:f4:00:fb:b6:2a:3f:a7:da:
f6:43:cf:19:54:90:9b:f2:9b:82:fa:90:e4:8f:f4:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:F4:B0:10:CB:88:DB:DB:8F:B6:02:40:29:98:8D:18:48:E6:98
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6f:00:cf:02:57:45:88:6e:be:c5:61:48:e4:98:0b:5c:21:
4e:4e:ed:d2:0e:e5:83:e7:b5:69:08:d1:09:70:cc:05:cf:4b:
ae:19:92:1a:92:78:e7:9c:64:c9:5a:ad:6b:12:65:5a:4e:64:
7b:fd:dd:5d:00:47:1c:60:70:42:17:ee:33:70:27:e9:ef:5d:
b0:ff:3f:27:5e:17:75:79:de:42:64:36:35:71:a6:de:b7:dc:
e5:5b:be:f7:22:88:07:99:09:74:17:12:fa:09:55:03:20:d5:
f4:e8:9b:95:cd:cf:57:e1:a2:3d:e2:e1:74:e8:6c:98:bc:82:
25:1e:64:11:c9:2d:98:18:cc:03:0b:84:38:75:e2:dd:a4:65:
69:e9:a5:6d:b1:b2:fa:4b:cf:a6:6b:1f:20:3a:9e:8b:7b:74:
94:a0:a8:0e:ac:8f:f3:b9:8d:52:ce:e9:15:e3:2e:b3:3e:8b:
12:9f:69:fa:a4:80:0e:9b:ff:71:ae:5d:2f:61:a5:75:fe:91:
8d:0c:0c:98:83:ee:95:8d:2f:18:b0:12:7c:28:eb:a0:5c:42:
2a:29:b3:47:05:ac:4a:7c:dc:87:2a:7b:1b:df:99:79:c7:49:
92:72:c8:81:97:27:77:fc:a6:23:c0:20:c9:d8:14:31:7c:80:
c7:fe:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:36 2026 by rpki-client