Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: cUTuk7Yq57fa7hvYDDba3B35GM6uXNXDTvbbcfLDh5k=
Subject key identifier: 13:1E:0D:58:9B:AC:1B:9F:88:D8:43:E5:45:FC:46:52:1D:26:5B:D0
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 019CB09187D59140A2569A7F1B9B9EF354AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 023D
Signing time: Mon 02 Mar 2026 22:00:53 +0000
Manifest this update: Mon 02 Mar 2026 22:00:53 +0000
Manifest next update: Tue 03 Mar 2026 22:00:53 +0000
Files and hashes: 1: 2tLIG-0F4pyXslqiRGqTKTBHrYg.roa (hash: eYNKy82bS91MfRi14r5WCRNJpu5XJvmqn53/5LunFO0=)
2: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: KXEzyE5rI+5h0CcdAldiMsLmZwnoblc1gyUSS9TBbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:87:d5:91:40:a2:56:9a:7f:1b:9b:9e:f3:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Mar 2 22:00:53 2026 GMT
Not After : Mar 3 22:00:53 2026 GMT
Subject: CN=131e0d589bac1b9f88d843e545fc46521d265bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:4c:02:5a:a4:c2:a2:dc:a0:e5:68:45:fa:
9d:56:f9:08:e6:15:bb:f2:8e:06:7a:47:db:ea:21:
7b:91:50:af:6d:41:6f:85:68:22:1a:3e:c8:a5:e8:
e2:4b:d0:cc:6a:c3:9f:7c:ef:b3:73:67:0d:6c:d9:
52:21:f7:9f:b5:cb:e5:bf:4b:ae:f3:7a:31:b6:11:
ee:ef:8c:d5:47:b4:f9:d3:ad:05:5f:17:c9:80:66:
3a:b2:ee:ac:e3:99:9f:98:77:42:05:46:c2:47:81:
01:1c:51:44:29:70:35:16:77:ff:60:f0:43:dd:52:
22:f2:ff:5f:1f:33:78:46:96:41:79:68:04:f0:01:
a7:a7:de:c5:c0:03:f7:12:81:28:c9:ee:b1:86:f1:
fc:23:ee:c0:4d:21:86:6a:c3:f5:60:36:c6:e5:cb:
f5:d7:bc:28:cf:b1:77:3f:be:ea:09:63:81:27:88:
b0:ce:a5:cf:a8:78:f7:47:28:f2:67:b2:f2:f6:bd:
96:d1:36:72:14:df:b4:9f:42:bc:f1:c0:39:91:01:
e1:cf:35:e2:90:80:ee:37:71:7d:d8:e7:a0:45:0b:
ed:9f:74:e3:ab:5d:4f:4a:06:5e:af:09:6d:d8:d5:
9e:79:c7:aa:1d:22:3b:68:05:bd:8c:55:56:a1:99:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1E:0D:58:9B:AC:1B:9F:88:D8:43:E5:45:FC:46:52:1D:26:5B:D0
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:9e:4a:18:3f:90:05:f5:dd:6c:11:10:1f:73:3d:8e:3a:
73:f3:04:66:a2:de:61:27:4c:5f:e8:6f:d0:e3:be:74:65:e9:
e8:fd:c5:02:cf:b8:7c:09:40:98:46:41:af:af:3f:02:18:10:
67:d4:54:e7:e4:c0:fe:76:dc:20:92:4a:b3:a5:d0:6d:95:15:
0d:ef:5f:2a:74:de:4d:f9:50:6b:d1:f1:f4:89:f1:b5:f4:7b:
14:db:05:f5:ef:02:e0:eb:25:61:d5:fb:54:49:77:be:80:f8:
46:29:9f:6b:ae:7f:23:fe:bf:86:06:59:00:47:ea:9e:1e:54:
e9:b7:2f:b0:16:65:ca:6d:67:aa:d1:bc:07:62:60:6a:d8:fb:
79:06:25:42:57:ea:4e:8a:77:71:06:81:a4:33:52:7a:68:e8:
d9:15:e5:d9:5b:81:15:58:2f:4e:1f:d3:ae:df:1f:85:55:7f:
ba:fc:5c:d7:4e:d0:26:9f:6d:c4:ef:1a:ae:ce:82:88:8d:ae:
dc:23:ca:63:dd:50:d8:7f:1c:60:05:93:5d:7d:cf:27:17:fa:
33:fd:23:78:fd:a0:b0:5c:4e:83:37:30:45:c6:c9:5d:3c:6f:
88:a3:e0:03:a2:ea:a7:69:31:d9:32:08:ab:e2:3c:fa:5f:88:
d4:08:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:33:40 2026 by rpki-client