Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: rPiQQuEeqcbey39Tkmei9DNeYf93hK4qJbWWJmVGae8=
Subject key identifier: D0:2D:A0:81:E2:B4:7E:D4:CD:B9:A6:CC:90:75:BD:63:A9:ED:A4:9E
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019CAD59AC4513FEACE1F6975E219B6237DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:01:00 +0000
Manifest this update: Mon 02 Mar 2026 07:01:00 +0000
Manifest next update: Tue 03 Mar 2026 07:01:00 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: cVckxSg5HOTPIlq9nJRO1FAbVdoYSQ0CLFVbX/eTgTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ac:45:13:fe:ac:e1:f6:97:5e:21:9b:62:37:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Mar 2 07:01:00 2026 GMT
Not After : Mar 3 07:01:00 2026 GMT
Subject: CN=d02da081e2b47ed4cdb9a6cc9075bd63a9eda49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:07:af:64:43:a2:92:fc:0a:d5:c1:82:c5:
a0:71:df:31:75:ea:20:ec:5e:f4:6b:01:9d:88:3f:
51:be:d1:7a:d8:24:a7:f2:80:a1:6e:dc:96:85:84:
40:66:dc:0c:29:83:2a:b7:e4:c4:35:32:b0:74:52:
56:87:01:62:e2:ed:c1:5d:64:ae:70:10:f8:93:5b:
79:3e:27:4b:35:5e:9c:64:e8:46:43:3f:de:ae:fe:
30:59:b0:e3:21:bc:1a:cf:f1:3d:68:34:23:94:29:
6b:84:37:21:2a:02:a3:8f:98:34:0a:7b:fc:af:3c:
f5:4b:91:bf:cd:a7:f4:0e:2f:f2:d4:38:5b:2f:ea:
ef:e4:9b:70:e6:c9:31:0b:0d:9f:66:39:3e:af:6e:
f6:3e:51:2f:49:43:31:bf:32:cf:ab:4c:61:ec:6e:
0a:77:8c:fd:d1:82:92:9c:85:9a:6f:91:05:14:d1:
c7:b0:ae:fc:a7:55:03:95:eb:d0:0a:96:d9:81:40:
cb:f9:34:d4:4e:af:0b:e4:ad:7c:ac:d3:1a:70:2b:
f9:6f:98:e0:9e:d4:8c:f1:da:4d:32:4f:aa:eb:1c:
36:08:28:16:08:57:ee:ae:2e:51:e7:cf:3f:e7:da:
93:dd:23:1c:fd:d6:ab:cf:f5:c3:5c:79:21:ee:9f:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:A0:81:E2:B4:7E:D4:CD:B9:A6:CC:90:75:BD:63:A9:ED:A4:9E
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:0c:d9:43:39:c7:65:f6:f7:66:72:46:e7:e3:4b:d1:66:
3b:4d:12:21:08:1d:48:b6:2c:2f:f8:40:c2:50:bd:cd:11:8b:
66:d3:e4:e1:23:70:70:2c:01:1e:13:cc:b8:87:44:c0:be:5f:
36:c1:5e:b8:d1:4f:d8:46:18:9f:96:69:32:59:3e:de:8e:3e:
81:fc:74:eb:db:fd:99:6f:27:c6:8f:3b:14:47:83:a9:68:98:
3c:65:bd:e9:1c:1b:45:ae:df:eb:d0:ef:16:c4:9c:00:b0:66:
e6:3b:29:93:b5:c3:f6:40:cb:dc:57:40:a9:d5:dc:d3:c5:f0:
71:85:fb:61:32:7a:72:16:6a:da:b1:fe:a7:94:6c:dc:e0:97:
0f:ca:65:1f:7e:b3:db:23:81:6c:10:33:60:52:86:7c:df:b5:
07:7a:8b:91:e8:0a:6f:4f:a9:ec:7b:bb:fa:b3:31:9b:46:ec:
03:18:0f:9d:61:9d:48:70:e7:cb:6c:a5:c3:92:50:d6:75:1c:
26:c1:72:96:2c:28:fd:eb:a0:0b:73:73:d9:e3:23:83:20:e7:
0e:23:2c:d8:de:60:b3:ae:46:ff:0e:ec:1a:e6:a0:25:9b:c4:
cc:42:64:c3:b6:29:9d:2a:05:57:6e:f3:7f:3d:8b:80:45:fc:
ed:c5:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:14 2026 by rpki-client