Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: JnL13HI02SQAHKa3bSjLb4MrMhPehsPz4tBCrEIL2Bk=
Subject key identifier: 42:B3:6A:C5:0B:42:A8:B6:14:E6:F5:61:E3:3D:DF:7E:DC:7C:E9:04
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019DBE4A522240563DD2B2D57AEF991C9A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1926
Signing time: Fri 24 Apr 2026 07:00:34 +0000
Manifest this update: Fri 24 Apr 2026 07:00:34 +0000
Manifest next update: Sat 25 Apr 2026 07:00:34 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: AmDNZMmXvRuAkBylpk9eOV78HF+L0m5z+Q0Hg0qQIwI=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:4a:52:22:40:56:3d:d2:b2:d5:7a:ef:99:1c:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Apr 24 07:00:34 2026 GMT
Not After : Apr 25 07:00:34 2026 GMT
Subject: CN=42b36ac50b42a8b614e6f561e33ddf7edc7ce904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:bf:43:7d:da:a2:fb:f6:93:28:d5:3f:0c:
8f:03:c5:7b:a4:ea:c4:5c:51:05:46:b8:cb:f2:27:
fd:b4:73:54:0c:e5:ac:7c:b7:11:fb:2d:a3:b4:f6:
92:85:8a:c3:a7:75:c5:24:81:d9:f3:db:61:8f:42:
bb:a1:9e:c9:cd:ba:ad:c3:f0:a2:ba:43:49:ed:60:
be:0b:f3:24:49:00:db:b4:64:da:de:40:e4:88:48:
20:14:2d:93:22:e0:e5:6d:5c:b9:87:a3:d3:f7:e7:
ca:8a:72:ca:9f:4c:20:ff:84:6d:45:7d:cc:c0:cd:
ee:20:54:09:b8:04:55:c0:ae:05:1d:e0:e2:28:94:
f2:cb:fa:29:1b:e6:d0:62:88:84:d6:e0:12:bc:c7:
8f:3f:8b:1a:ad:35:03:c3:b4:84:9e:4e:aa:e2:90:
4f:c7:da:c1:b3:d4:be:6e:b1:75:93:a3:d2:be:3c:
bd:23:40:b7:a9:1a:50:fc:78:19:0f:d4:1a:98:e3:
85:1d:37:c9:4c:c3:f4:5b:ea:99:24:eb:0f:89:8b:
93:7d:99:09:f0:c4:33:42:07:14:ea:a8:68:12:b0:
c3:06:6f:f8:1b:ce:5e:96:5d:ee:43:85:9d:94:d2:
b5:e4:fb:33:b1:f7:74:8a:40:e5:ca:8b:25:07:80:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:6A:C5:0B:42:A8:B6:14:E6:F5:61:E3:3D:DF:7E:DC:7C:E9:04
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ef:f2:ad:64:fa:34:b9:ee:22:bc:71:ef:89:4b:c2:b7:ab:
f0:32:7e:74:cf:8e:1f:b3:0b:86:25:c4:63:ce:a1:c6:57:7d:
08:6d:b4:8b:26:82:07:84:e1:22:9c:17:16:57:e8:f2:c9:c4:
f8:8a:01:b4:47:ec:39:f5:77:84:ab:75:9e:2a:ec:8b:b5:a6:
69:0b:33:29:7b:98:79:71:da:d4:e6:1c:15:3f:15:a8:9d:a7:
69:cf:50:eb:7a:1d:90:9f:f1:21:d1:9b:38:76:61:0a:03:75:
18:1f:3c:1d:79:10:3d:11:f8:91:ea:2a:60:56:6b:f2:7c:36:
79:3a:4d:55:2f:70:6f:a2:da:b5:fb:6b:ad:81:fe:6a:40:63:
4c:00:b4:00:09:a8:f3:55:d0:1e:82:7b:81:df:66:8f:f4:b6:
94:07:4d:89:bf:1e:9d:30:93:ac:ab:2f:43:89:bc:06:99:5c:
1a:a9:95:66:ff:32:9e:93:d6:f5:29:01:08:b7:7a:39:8c:5a:
42:36:c9:54:da:db:12:01:47:e8:2a:f3:b9:cd:b0:6c:66:fe:
6b:59:33:2c:d7:5f:7c:e9:9f:1a:0d:33:b2:9d:8a:d5:85:06:
32:16:30:52:3f:6f:b8:e3:89:ee:a2:d3:e8:ca:9a:c1:1a:5a:
c8:dc:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 15:35:27 2026 by rpki-client