Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier: a3xdNXlzhPGcHPv4imNlU0fiaEXtW6vKDc/hXW6ydVY=
Subject key identifier: 94:7F:81:B9:D4:9E:CE:A2:94:E1:05:5B:55:65:B1:38:70:49:33:E3
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 019D9D0872D5C53F47F359A8143AEB3D26FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number: 18D2
Signing time: Fri 17 Apr 2026 20:01:09 +0000
Manifest this update: Fri 17 Apr 2026 20:01:09 +0000
Manifest next update: Sat 18 Apr 2026 20:01:09 +0000
Files and hashes: 1: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (hash: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M=)
2: PpOYs6t43PH4GR9qIThOE1vaAks.roa (hash: Im1Y98FpEgnUbHH9KOtV4b1u5NuFFGfeVmvEGUjUXPY=)
3: YwlkzOh40N4SzqCHKWcC97MEiGo.roa (hash: 1LCHJNlMLpepR4sv2pj3j5D9S9GvMti3zGg5V/TMwP8=)
4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: eq96jn78VaCCuhOd1lxRU17GRkkbdEVVelYygxak2YI=)
5: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (hash: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo=)
6: gDiXd9Mst5s-XWsSBWPs08-uTHU.roa (hash: CcTqCeCWdkvuGEKvjGUEouLc82NmDES6GwWVPEJ2whU=)
7: ioECjT17G0_6OLgmor7_dptRVdE.roa (hash: 4GHJcy1NEQdNT4tM6/0vR+b78HpLI+Kdh82ajfi8C4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:72:d5:c5:3f:47:f3:59:a8:14:3a:eb:3d:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Apr 17 20:01:09 2026 GMT
Not After : Apr 18 20:01:09 2026 GMT
Subject: CN=947f81b9d49ecea294e1055b5565b138704933e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:88:37:a8:dc:06:2a:e4:fb:c2:00:2f:8c:
c3:36:50:a0:7e:1b:6d:5e:d9:9b:6e:32:35:45:bc:
7d:7f:8a:2e:c5:77:e8:70:cb:52:98:5d:6d:67:03:
25:90:ca:30:81:91:e5:4a:a8:76:fe:e0:ef:07:bc:
2d:8d:36:1a:e7:1e:55:9e:85:33:3c:4f:ea:d6:73:
ea:60:f6:7d:78:61:33:aa:cb:5f:29:64:35:84:14:
6e:6e:9b:1e:6e:ae:e9:c1:d7:a8:33:f7:68:e4:f0:
9e:fd:d4:22:50:e8:88:7c:ed:f2:d6:20:9c:4d:77:
d6:5f:13:0c:57:eb:0a:7a:f3:08:68:03:76:58:f8:
90:ec:61:4f:78:d2:82:f2:7a:ab:86:ee:8d:e6:7a:
94:41:0c:7a:3e:5b:24:84:7d:97:e5:a2:7c:43:5d:
f6:b1:72:d1:9b:17:b2:00:34:1c:b5:f9:bd:57:45:
8c:0d:89:d5:74:73:a8:69:c8:c2:4e:77:35:4f:37:
a2:ce:f9:06:23:7e:5b:2e:48:ad:bf:7b:23:76:80:
78:06:16:0c:ad:7d:6a:c5:97:21:c2:84:49:12:b3:
c8:d7:cb:8d:a1:97:b9:60:67:78:a6:e7:ad:71:ff:
6c:6b:17:bf:b5:2f:73:b6:2b:ae:96:f3:99:e3:e6:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:81:B9:D4:9E:CE:A2:94:E1:05:5B:55:65:B1:38:70:49:33:E3
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:94:99:03:b1:f8:8f:dc:37:5c:f7:64:88:6d:9c:4b:3c:5c:
75:e2:53:3d:ea:7c:15:b5:22:25:35:93:8f:7b:23:be:86:cb:
d2:bd:5f:15:6d:7e:58:65:aa:dd:5a:29:51:34:19:65:b1:07:
97:ab:83:48:7c:9d:cb:a5:0f:17:e3:29:41:cc:f1:16:36:07:
a5:a4:a4:65:60:69:b1:e2:8b:aa:47:a7:f1:04:42:9b:2c:85:
0a:77:95:73:a9:71:14:38:ec:57:88:7d:40:98:9e:e5:19:96:
29:81:44:af:bc:7c:a6:fb:f9:de:20:5b:a9:77:71:bd:36:74:
a6:d0:1d:14:03:a4:91:a4:6d:5e:40:fc:7e:4d:33:f6:b1:a2:
44:5b:b6:fc:65:f4:0c:9f:d8:04:3c:2d:20:47:e4:73:ec:32:
ad:e9:ac:48:8f:b4:8d:72:cb:61:47:a1:0a:17:52:35:16:f4:
b6:d2:89:f4:af:98:08:73:e5:f5:35:c3:29:e1:d5:1b:c5:98:
5f:cf:94:b7:f4:e2:95:9f:0a:bf:44:18:49:39:98:8e:43:7c:
8b:18:6e:e7:c7:41:0b:ed:f4:38:60:9d:5e:d6:f7:d9:bc:40:
c8:2e:57:b7:8f:da:83:e9:8e:2b:a4:21:39:00:f8:d1:bb:5a:
29:9f:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:23:18 2026 by rpki-client