
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: GRgTuq6mbf3twQ8otrv8fjRH7Bt3rinJNCtyQw6WYTA=
Subject key identifier: A7:D7:9D:1F:52:E8:EF:BF:5C:0A:2C:D7:DB:D0:96:84:E4:02:28:EB
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019F957FFC3E91E8FB5F408C8B3F8D9DF818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1A1A
Signing time: Fri 24 Jul 2026 19:00:20 +0000
Manifest this update: Fri 24 Jul 2026 19:00:20 +0000
Manifest next update: Sat 25 Jul 2026 19:00:20 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 67xK3czei/jd3+EJtuI4CXobBNtvFJqYvbOFqdVR/f4=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:fc:3e:91:e8:fb:5f:40:8c:8b:3f:8d:9d:f8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jul 24 19:00:20 2026 GMT
Not After : Jul 25 19:00:20 2026 GMT
Subject: CN=a7d79d1f52e8efbf5c0a2cd7dbd09684e40228eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:e9:af:aa:2f:ee:f6:b2:be:d4:4d:6d:10:
43:83:4c:7c:e0:7d:a8:90:c7:4a:12:e3:dd:b1:bf:
8d:93:1c:7e:40:39:b1:ed:70:56:a2:e9:07:f9:91:
6c:bf:28:e5:c4:ff:20:2a:a9:da:c5:4b:60:3a:bc:
f5:ba:9b:25:41:74:a0:78:a1:a9:f8:73:42:5b:0f:
8f:3c:6b:19:2b:d1:36:8b:f6:de:bf:bd:e8:c2:62:
fb:1f:dc:8f:ef:64:92:59:eb:ec:f7:e6:dc:47:97:
f9:8f:91:05:88:13:84:f6:24:7c:2d:19:d2:af:7e:
36:fa:94:2f:e2:6d:d8:c7:f3:b9:01:da:3a:72:7b:
17:98:ff:c2:7d:e1:19:f4:31:41:27:93:b9:ce:24:
76:0c:79:2c:60:9b:1c:60:e5:1c:66:91:df:29:fc:
d2:e1:25:31:0c:4e:90:05:96:c3:8f:08:9e:1c:3d:
0c:e5:99:8e:60:a5:f2:f8:b8:0b:c2:dc:d1:e9:12:
cd:c5:6d:9d:84:01:b9:7f:ae:26:81:77:8e:e6:cb:
d7:ed:c2:ed:71:ed:d5:01:b0:00:4d:c3:a1:51:af:
4c:38:b5:1a:0e:48:9b:2f:dc:ef:e9:b5:d9:1e:88:
42:98:2f:74:5d:82:b2:21:5e:e6:ab:b1:ce:89:92:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:9D:1F:52:E8:EF:BF:5C:0A:2C:D7:DB:D0:96:84:E4:02:28:EB
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:42:f5:1b:2e:b4:36:8d:17:01:17:4e:65:02:e6:1a:94:ad:
da:bc:08:f8:0b:a3:99:26:5b:20:b8:2f:23:73:dd:0d:a5:8b:
b8:57:bd:1d:3e:05:9c:29:5e:e4:ca:d0:85:2f:ca:ec:60:b5:
05:e2:65:cd:b5:6f:a8:b1:94:20:08:d2:27:20:e4:19:a0:16:
8b:b2:b2:72:d9:bb:a0:aa:7e:33:b6:9b:8d:6b:7d:1d:68:67:
85:62:26:80:dc:74:48:fe:0c:4c:7e:e0:61:9e:5a:06:ef:43:
5e:e0:bb:c8:db:d6:7d:b6:4b:8f:e7:3d:cc:a3:ec:3f:fe:d0:
30:cb:52:29:74:cf:b9:6f:d6:eb:c1:97:86:6e:bb:07:e3:7d:
4d:2f:9d:1d:65:28:59:49:5c:01:81:09:fb:d2:42:56:a8:b3:
24:e8:5a:c1:13:53:67:94:2a:02:9e:6e:e6:03:46:e8:b6:89:
0f:0e:c4:e6:50:93:c6:ae:d2:01:02:62:30:3c:c1:fe:ad:29:
dd:1d:6c:30:21:06:74:7f:7d:2e:0a:4f:11:5c:8e:16:b0:15:
ac:d8:a7:7b:4d:64:7b:81:97:74:65:8d:de:b5:b2:c0:93:c2:
e4:68:fc:88:5c:27:9a:c6:01:d0:e3:89:4f:d2:f8:a3:d5:35:
16:88:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:56:35 2026 by rpki-client