Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: DimIZDAwAySOuMTw+P/EHhyA8eJi0DrTK8H2EZTI4UI=
Subject key identifier: DB:40:59:8E:CC:42:76:A5:3D:29:6C:C7:AC:12:F1:22:B1:4E:11:50
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019F85317F6C6E9E9FAD9B701FFEE9BB4FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 15:00:41 +0000
Manifest this update: Tue 21 Jul 2026 15:00:41 +0000
Manifest next update: Wed 22 Jul 2026 15:00:41 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: /m4My/cU6VBegD2MU66AFErL6j1Bz+kyxYKhatHMPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:7f:6c:6e:9e:9f:ad:9b:70:1f:fe:e9:bb:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jul 21 15:00:41 2026 GMT
Not After : Jul 22 15:00:41 2026 GMT
Subject: CN=db40598ecc4276a53d296cc7ac12f122b14e1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:c0:74:93:37:1b:97:18:ef:07:32:8f:94:
a9:03:89:b7:e4:82:d2:a9:9f:b7:04:2f:b6:b0:e6:
05:91:a1:17:54:71:ec:6a:e1:12:90:9d:50:b0:e6:
64:e4:9a:f9:68:7d:c5:29:b8:99:4a:e2:3c:0e:75:
11:45:fb:87:31:73:bd:b7:a4:51:a7:10:6e:68:ba:
b3:9b:fa:61:4c:79:a3:03:23:f3:dd:32:ee:73:94:
25:5b:5f:b9:f8:0c:58:b4:c9:58:94:be:7e:94:59:
19:f3:0b:1e:fb:09:82:60:2a:4e:8c:54:de:65:8e:
93:ac:53:a5:78:0d:ce:bc:84:58:53:f5:6a:6f:fc:
d4:07:cf:8b:d3:29:ab:c5:ad:24:1e:c4:05:60:cb:
03:47:5f:06:fa:64:4a:ad:e7:ae:71:fe:e3:1e:a5:
3f:de:d7:82:57:3f:ec:80:55:56:bf:17:21:bf:f1:
78:af:41:b0:c9:16:c6:fa:1a:d9:68:5d:bd:77:58:
bf:f1:07:75:9b:cb:18:8d:c4:a3:3e:df:56:69:b5:
04:bc:6a:98:42:40:1c:93:c5:26:d9:af:e0:8a:2f:
f8:82:17:98:ff:e7:0b:5d:71:f1:70:38:29:9f:a4:
77:82:fa:84:23:ac:ba:1a:23:7f:d5:9c:89:f5:ec:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:59:8E:CC:42:76:A5:3D:29:6C:C7:AC:12:F1:22:B1:4E:11:50
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:df:69:63:01:9a:3a:4a:2b:5c:79:6d:1d:7c:16:50:27:2c:
94:d7:23:1b:b6:ca:90:f3:b0:50:d8:7b:e8:72:54:2e:01:40:
55:d4:02:14:59:f4:fa:2b:05:3f:78:aa:e3:09:59:89:8b:ec:
8f:49:2a:6c:2a:63:a5:e9:0f:2c:ad:f4:4b:ca:01:e5:ec:cb:
a3:e3:e6:32:df:ff:a8:7e:51:30:b7:fe:ee:57:3c:aa:75:7c:
ae:38:65:8a:4d:81:52:68:fe:53:69:57:5f:e6:99:78:27:fa:
1a:0f:b9:79:0c:88:b6:7c:45:3b:3b:73:51:c5:87:e6:9e:c1:
8d:c2:8b:92:c6:81:04:24:a9:26:4e:cf:0b:48:9f:df:b6:12:
b8:00:af:4c:ba:5d:06:e8:a8:da:5e:54:70:a0:b6:de:bb:b9:
3e:d6:18:a8:1c:d5:7f:88:c5:e8:5b:a5:12:99:8b:f5:40:7c:
01:39:ec:fe:4b:d0:57:db:0b:4e:2a:7e:93:c5:ed:80:fa:d5:
5a:7e:c8:0f:ac:ef:7a:81:02:24:51:3f:91:71:8d:3d:e4:23:
e2:eb:e8:e1:5e:10:b1:30:a6:af:a0:0d:b6:f1:38:08:9e:71:
14:cf:da:17:6a:1e:0c:37:ea:c5:59:b3:21:9f:c8:49:6e:73:
e0:86:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:45:26 2026 by rpki-client