Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier: 8c6OGNNtHdiVdZv0FKYJdzb4+c2/jAEO8ks5fzbSQyY=
Subject key identifier: 11:8E:5B:4B:5F:22:33:AD:B7:80:A5:B3:21:13:B9:B5:51:CF:F2:61
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 019CABA1FCA8E039F923F1851EA5AC1A167E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: zMv2se/0Y7WxU7suqVQDFGzCZrTi90x+EP/dLlZA2E8=)
5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fc:a8:e0:39:f9:23:f1:85:1e:a5:ac:1a:16:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=118e5b4b5f2233adb780a5b32113b9b551cff261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:e5:71:69:a5:da:e7:f0:a1:48:6d:0c:2e:
d6:20:5a:b4:1d:85:cc:e9:91:2b:b7:ce:bd:10:ee:
33:32:27:50:e0:d4:93:d5:aa:04:c6:a6:d8:05:90:
65:ed:57:60:03:88:a6:5c:0c:e7:21:a2:9e:c5:e6:
e5:ad:f5:43:8f:ff:fc:fe:6b:10:d5:56:c0:98:de:
ad:ec:f1:60:ea:c0:c6:fb:9d:f5:14:1b:e1:19:8c:
a3:a9:ca:a3:b0:23:b1:59:c7:68:d4:94:d0:b5:49:
0a:33:7c:97:3b:82:01:0d:91:6f:b4:e2:d6:aa:b4:
df:ff:9f:31:b7:4b:62:51:6f:c1:bc:dd:92:3c:03:
e3:10:8d:03:2a:08:c5:9e:0f:d1:6c:ab:ed:b7:33:
8a:0d:c6:57:27:29:aa:88:53:1a:f9:22:07:9d:03:
95:49:a8:fa:bc:ac:87:bd:fb:28:19:4e:47:76:b7:
f8:90:61:f3:26:ce:b3:06:4c:4c:08:41:d1:4b:14:
dd:0a:09:4f:be:60:5e:e8:f7:33:c1:7d:7d:3f:0e:
a4:11:34:49:b8:ee:8d:82:bf:a7:68:cb:d8:aa:45:
7f:49:a3:ae:31:03:72:99:6b:f6:d8:75:9d:f6:b0:
6f:86:a5:ac:8b:a4:13:27:ae:7c:6e:22:ea:e4:a0:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8E:5B:4B:5F:22:33:AD:B7:80:A5:B3:21:13:B9:B5:51:CF:F2:61
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f5:d7:9d:1a:61:e6:80:91:92:50:32:b0:b5:72:0d:45:cd:
82:1f:e2:fa:d7:5f:f0:0a:8d:79:30:29:19:cd:49:9b:94:9b:
00:4b:91:8e:d3:9a:d6:a2:6f:30:23:06:57:2e:3f:d9:eb:bc:
90:21:8b:5e:45:85:ea:50:dc:5a:4b:9e:d2:72:87:bf:b2:2d:
57:1b:3f:3a:5d:d7:03:97:04:fe:d6:81:34:df:be:1e:1b:95:
87:d6:93:bb:0a:0f:0f:97:3e:e8:b3:25:44:75:c9:27:12:74:
c6:7c:3d:f9:e9:2e:c0:2f:ad:ba:cd:90:85:c8:83:a3:3f:89:
84:11:dd:7c:b2:0d:88:05:5e:77:25:ad:4c:8c:1c:91:1a:6d:
34:8f:11:70:0b:53:20:d9:17:b9:70:2d:b3:ff:c5:55:61:1c:
12:d3:3e:ba:87:b9:20:bd:12:81:26:41:b5:7a:78:3c:af:ab:
4b:5b:65:af:2d:39:c8:ff:24:a4:f6:f9:67:cc:5c:77:b9:cf:
0b:b2:ab:c6:11:a2:ac:a6:a3:b0:14:8a:10:f1:3e:f2:e4:01:
3c:97:f8:51:2f:d8:dc:3c:77:d3:aa:3c:cb:87:20:b5:a2:2b:
48:9e:cf:2e:2a:14:c2:1f:8d:3a:5f:49:40:9c:47:fc:98:41:
8e:73:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:49 2026 by rpki-client