Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: WwfQXUk9II9DpAH/C1o7fuEC+FtVIa8f1cJjJp24aZ8=
Subject key identifier: 07:D8:04:68:D9:5C:11:E2:9E:4E:81:BE:94:0C:33:AA:AC:93:F0:FC
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019D9A3E2D684310A580D08205BBB8245FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0619
Signing time: Fri 17 Apr 2026 07:00:59 +0000
Manifest this update: Fri 17 Apr 2026 07:00:59 +0000
Manifest next update: Sat 18 Apr 2026 07:00:59 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: 7SqIyYAmVyYjO8pDgrrYWFZ6KGO5fVcWGr835wXz3Ck=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2d:68:43:10:a5:80:d0:82:05:bb:b8:24:5f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Apr 17 07:00:59 2026 GMT
Not After : Apr 18 07:00:59 2026 GMT
Subject: CN=07d80468d95c11e29e4e81be940c33aaac93f0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:bf:ce:e9:e6:32:8f:ee:00:80:6e:cf:4a:
73:6b:4f:85:85:f7:d8:56:7d:d8:a4:0d:36:c9:f5:
95:52:c3:6b:f2:6a:b9:d5:b1:e1:d2:a7:cb:55:0b:
1b:a2:7d:24:d9:9b:ee:fa:38:f2:3b:5a:6e:88:0d:
31:3f:ce:e4:4c:8c:83:42:86:4d:d3:9e:29:91:31:
d2:54:1e:65:64:25:36:46:0a:fd:49:b8:16:67:1d:
b6:0b:a6:29:1d:3a:25:4c:e4:2f:03:56:96:5b:41:
13:ce:c6:32:27:c9:ec:6c:04:3b:22:c3:a3:04:82:
0a:66:e6:75:34:20:1d:6f:3e:13:87:43:73:d3:60:
96:d2:64:c1:d6:7a:da:d7:c9:62:db:a9:e7:f1:97:
ab:75:25:35:07:85:c1:a9:54:05:18:23:c8:ba:0c:
df:95:50:ff:85:da:0b:61:c7:67:f5:1d:b3:09:f6:
04:24:de:18:de:16:95:2b:55:e9:f8:02:83:94:93:
74:07:88:b7:b4:5d:60:99:86:8e:06:de:8e:8f:19:
fc:0e:a3:5c:67:24:06:c7:7b:bb:77:70:d6:32:6d:
45:2a:0d:25:1a:3e:11:31:96:4b:27:13:1c:d2:a3:
b1:69:5e:96:70:dc:87:58:18:cf:aa:24:ca:12:73:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:04:68:D9:5C:11:E2:9E:4E:81:BE:94:0C:33:AA:AC:93:F0:FC
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:72:bc:ed:00:ad:84:6e:1f:84:0d:76:68:30:97:cf:06:87:
ae:3f:a7:56:a8:20:2e:b2:14:de:59:e1:ee:64:63:20:29:eb:
36:d9:3f:3e:37:9f:fc:4d:ef:49:70:02:d3:64:3d:d0:f7:06:
7e:c4:9d:26:83:51:04:03:f3:3d:d9:54:a4:7f:ad:aa:e8:9c:
54:2f:54:3c:9c:eb:62:c4:90:d5:28:85:a8:3c:c6:1b:ec:b7:
3b:1a:e8:15:77:19:b5:a2:46:74:04:aa:00:e3:85:2a:8c:52:
1c:40:d4:f2:e9:08:87:67:f3:74:00:fd:66:5e:2a:34:ce:3f:
d9:38:53:c9:84:0c:f5:5d:66:c6:d7:b9:62:9b:e5:71:d1:fd:
0b:85:11:3a:e9:2a:3b:05:4e:8b:cb:8c:a9:2f:07:78:e3:ab:
c6:cf:d2:95:20:b7:1e:e6:57:d6:35:e6:8b:bd:3d:d2:81:b0:
ff:3d:5c:b2:1b:78:0f:5c:41:4f:cf:c1:91:59:90:13:bc:33:
7d:87:11:9b:d7:c7:03:0f:04:b1:09:d1:a5:f4:61:40:f9:98:
8b:2f:39:6e:42:ec:be:8b:47:b0:8e:84:1e:c6:ab:5e:f5:0a:
8a:89:86:37:3e:aa:f7:53:72:89:19:49:e3:27:57:90:8b:69:
51:b0:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:39 2026 by rpki-client