Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: NyJmKUi+dixB2VG9x5Ol4a48gj+O02vJUo0Qgb9CkCI=
Subject key identifier: A0:D1:88:6A:22:8F:E0:DF:DB:BD:89:71:96:F6:E1:B9:5C:59:B3:CF
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019FAC07DB814AD88AA85C62C6E165D8BE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 04:00:23 +0000
Manifest this update: Wed 29 Jul 2026 04:00:23 +0000
Manifest next update: Thu 30 Jul 2026 04:00:23 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: yGkNMH/ogEIgAyO+dIK1EqmZAldPhoP4bdGnvXgCJFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:db:81:4a:d8:8a:a8:5c:62:c6:e1:65:d8:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Jul 29 04:00:23 2026 GMT
Not After : Jul 30 04:00:23 2026 GMT
Subject: CN=a0d1886a228fe0dfdbbd897196f6e1b95c59b3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:2d:33:32:c8:8d:79:ea:c5:c8:22:f6:67:
92:3e:7a:18:17:86:54:66:26:e3:1f:f6:5b:64:43:
a4:b6:77:29:b3:ba:86:8e:cd:b3:16:40:d9:09:0a:
23:77:c7:d0:13:8c:b0:2d:50:f6:cb:8f:be:58:9e:
89:c9:46:9b:e5:50:c6:ad:5b:55:fa:7e:0a:4c:e1:
8b:87:b4:55:a9:40:92:65:80:1e:cc:b3:0b:23:74:
ab:0c:a3:fa:6a:13:e5:81:a8:b1:72:e5:d0:99:d3:
6b:b3:b4:e3:10:41:4e:64:eb:0e:67:6a:21:5e:a1:
c9:4b:a3:a1:35:4e:9c:d3:4f:15:61:3c:a6:51:15:
af:c7:50:35:a0:c0:5c:b4:92:b1:7c:d1:d0:65:85:
0a:76:67:25:50:b7:e2:28:84:f6:fd:79:f5:7b:80:
14:55:ce:13:a0:93:bb:88:5e:6d:47:ce:53:d2:56:
fe:4a:d5:fc:23:f3:dc:22:ec:63:9f:da:ce:b0:df:
db:73:67:cf:79:53:a7:a7:a8:09:0c:54:ec:a8:bd:
83:7f:d9:9d:5d:5a:dc:f0:37:9b:d5:8c:9c:a1:61:
0c:e8:50:42:17:27:c8:61:bd:f5:4e:03:73:b9:9c:
20:4e:1f:4b:62:0c:a0:17:ce:05:0f:9c:03:51:68:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:88:6A:22:8F:E0:DF:DB:BD:89:71:96:F6:E1:B9:5C:59:B3:CF
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bc:1c:30:0f:21:fd:14:4b:1a:21:88:59:d8:6f:85:90:ba:
60:85:6d:3d:a6:4e:e5:7f:bd:c3:65:c3:91:95:1e:7b:9b:b2:
4c:12:fd:be:5e:b1:76:e3:8b:f9:9f:8c:82:7f:fa:06:df:91:
5c:68:4a:54:a4:a5:91:32:45:61:88:9a:56:a4:f9:a5:55:8c:
b5:44:21:0f:c1:e2:e8:5a:30:91:10:a4:50:be:25:64:40:94:
e6:0d:cb:7c:ea:5a:5e:90:b8:6f:a0:5d:46:dc:c4:1c:5b:2a:
63:84:ca:86:6e:2b:1c:78:ac:e3:32:ba:c6:1d:db:1a:dd:d5:
41:81:f8:ec:11:c2:33:ba:99:f6:3d:39:de:85:a1:2b:ba:fc:
2c:30:12:a5:35:a3:e9:0b:9a:5a:2c:e5:57:f5:8e:56:79:66:
90:3d:d0:20:09:06:52:48:d8:b3:e9:9c:7a:4d:d9:35:95:fe:
f2:40:31:ff:67:39:ba:12:0a:96:e7:77:73:ba:dc:32:07:ed:
60:28:e2:82:f1:dd:e1:05:e9:9d:d6:96:68:af:d0:85:86:29:
d9:48:d0:cb:89:fe:e8:aa:93:87:9e:27:e4:e3:31:7a:81:4c:
88:b6:77:32:bb:fa:49:f6:de:d4:82:51:5c:df:bf:6e:fe:05:
06:28:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:46 2026 by rpki-client