Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: vy6sHPMfJrAC5SWrJ7Wawio/lga7f9Ujz3d0rto7qh0=
Subject key identifier: 32:C5:83:BD:3B:E0:3C:F1:7A:E8:2A:99:1C:F3:57:05:AD:93:F4:2B
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01A0CFA471D8E85126BB1E9AF4B1DB8046DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 19:00:55 +0000
Manifest this update: Wed 23 Sep 2026 19:00:55 +0000
Manifest next update: Thu 24 Sep 2026 19:00:55 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: ZKpDCLTHQgP7l2uiJy5bVrkbO0rqGNK+dvBYMOciT4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:71:d8:e8:51:26:bb:1e:9a:f4:b1:db:80:46:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Sep 23 19:00:55 2026 GMT
Not After : Sep 24 19:00:55 2026 GMT
Subject: CN=32c583bd3be03cf17ae82a991cf35705ad93f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:07:9b:ec:82:42:50:1c:d1:96:54:28:f2:
59:d4:2e:bf:5e:b1:f5:cb:b3:ce:a6:b8:cd:ef:75:
a5:bb:72:ab:0f:fb:97:84:2c:69:50:14:88:c4:78:
b6:0e:65:7c:5e:d0:ac:ba:88:a2:6e:ec:24:56:6c:
20:d4:94:d4:e7:cf:2e:52:2a:01:7a:62:24:f4:b5:
5e:66:ff:57:62:b1:4b:e9:d8:b2:d7:be:c4:d5:bf:
51:4b:74:8d:46:6f:e8:a8:16:73:96:50:b1:55:fc:
c8:df:a8:a6:99:13:b3:da:34:e1:ed:cb:43:9f:e5:
52:dc:e7:f2:37:2f:9a:b7:91:e1:c3:b9:8f:73:75:
da:7d:07:2d:c2:7f:da:49:a1:04:44:12:82:59:5d:
ff:be:08:ed:36:0b:d9:31:3a:6a:ea:c0:c8:30:6a:
0a:ef:d3:12:2f:29:ee:40:d3:1a:21:a6:b9:d3:dd:
f9:cb:21:8b:a5:50:e1:5e:f3:65:1b:31:23:94:b3:
7f:e7:94:54:bd:1b:a3:7b:40:b8:1d:3b:45:14:7c:
31:90:55:7e:a6:dd:56:75:a8:d8:94:b5:1f:d9:0f:
46:bd:bf:24:30:97:2d:60:8c:07:52:7a:2f:ed:b7:
4d:14:2f:91:e9:61:6e:1f:f5:de:2e:50:be:d1:a2:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C5:83:BD:3B:E0:3C:F1:7A:E8:2A:99:1C:F3:57:05:AD:93:F4:2B
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:87:3f:a7:f2:2b:b5:9e:dc:c2:a8:ec:89:64:96:a7:a7:41:
53:bd:b2:50:33:bc:3c:59:dc:48:61:9a:00:66:91:98:1f:6e:
e6:bd:a9:4e:bb:48:b9:5e:f0:4d:e5:3a:79:6f:bd:d0:3f:27:
4d:04:28:d5:27:b6:5e:84:f8:9f:29:e2:a8:ad:7d:8a:50:30:
fb:0c:e5:31:fa:3c:2c:63:0e:d3:c6:b0:bc:3b:06:d1:88:ae:
6a:00:0a:6e:4a:46:3f:c5:75:cb:5f:63:22:e9:3b:3a:ba:da:
0b:83:a1:21:0b:da:94:7b:fb:7a:15:46:6f:8b:b1:10:94:5c:
55:29:2a:24:ea:4f:27:f3:42:d7:9e:8b:f0:c6:35:2a:b6:c6:
ad:56:02:e5:f6:d9:76:1c:7a:24:b4:8e:db:84:ef:00:fc:ee:
48:6d:04:33:fa:97:88:21:b3:15:5b:22:ef:53:a0:c4:d9:6f:
63:a5:bc:0f:67:c2:2d:23:cb:6e:58:57:54:05:a6:cc:16:5c:
39:2d:94:aa:83:5f:87:ec:f1:f1:56:25:4a:6b:f6:1a:45:dc:
05:7a:59:6f:65:41:15:42:97:8b:c0:38:dd:d1:6c:9a:c7:0c:
d8:22:6b:66:58:96:ef:ff:47:f5:50:7d:2e:ff:0c:c7:5c:29:
9e:21:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:10:32 2026 by rpki-client