Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: fif8JGmvzKBN3Id/POKWT4s46/keimKQqE6RQeuPogk=
Subject key identifier: 61:A8:01:59:CB:73:43:9B:CA:A9:44:CE:6F:EA:3C:32:2A:2D:4C:85
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019CD49E07D887AEB3E23826F1169FD3A4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 18AD
Signing time: Mon 09 Mar 2026 22:00:52 +0000
Manifest this update: Mon 09 Mar 2026 22:00:52 +0000
Manifest next update: Tue 10 Mar 2026 22:00:52 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: y/XG2Y9oarf2XX6g8pwmLsZphU3RDo1Ej+CA2akt8cY=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d4:9e:07:d8:87:ae:b3:e2:38:26:f1:16:9f:d3:a4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 9 22:00:52 2026 GMT
Not After : Mar 10 22:00:52 2026 GMT
Subject: CN=61a80159cb73439bcaa944ce6fea3c322a2d4c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:3c:b6:cd:a6:e8:ea:c1:9e:76:47:69:26:
98:1e:3a:b4:7e:99:62:74:ce:12:d5:e4:c7:04:8d:
f4:22:8f:1f:b9:4a:0d:a1:43:e4:fb:32:be:56:05:
41:fc:68:fd:c9:0a:ec:90:e4:07:c6:cd:35:2c:95:
ee:0e:aa:ef:fc:d4:f2:7b:24:c8:51:ab:8e:5d:07:
31:f0:47:25:50:f3:25:27:ed:8f:bc:75:cd:11:53:
3b:6a:80:60:b1:47:13:d7:bb:bb:aa:54:9f:f5:29:
e2:53:d1:0d:eb:61:14:40:39:a1:99:d1:52:00:e1:
1a:37:de:4f:8a:cc:04:a8:7e:6d:a5:4b:c6:48:80:
ea:be:7e:fa:4f:b3:44:8c:b2:5b:a1:b7:c7:b7:01:
c8:67:ea:4f:29:28:dc:49:f6:e5:89:5c:4d:a8:6f:
90:b8:cf:4d:7b:00:b8:27:cc:56:cf:90:28:3c:61:
db:20:9f:d0:26:05:ab:05:fb:13:6d:bf:ad:28:92:
d7:ad:11:b8:2a:d6:7c:f6:e1:cf:2b:ef:82:dc:49:
51:41:d0:a1:5e:6c:cd:dd:12:ab:8e:34:ff:ac:1a:
39:04:b1:98:01:5b:ea:a9:0d:82:78:f2:a3:69:a3:
9e:a4:87:0e:65:98:3f:3e:1a:32:14:ae:6c:59:41:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:01:59:CB:73:43:9B:CA:A9:44:CE:6F:EA:3C:32:2A:2D:4C:85
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:3d:c0:88:3e:2f:ec:60:4e:3f:e5:07:2f:29:58:60:8d:
aa:2e:27:46:e6:8f:02:65:cf:75:6f:4c:ac:37:74:54:18:b7:
10:f5:20:0c:12:76:23:2c:1a:ef:eb:e4:6b:77:c9:86:ad:aa:
6a:21:a4:65:98:13:79:90:6c:cd:36:34:6b:4d:40:25:79:1e:
ea:03:cc:6b:49:41:43:34:72:94:d5:c6:34:46:6f:05:ab:a3:
37:2c:ea:a2:9a:3e:d2:a7:83:49:6c:52:52:6e:8c:44:a9:48:
c5:e5:cd:2b:76:67:92:c5:36:99:70:81:88:b4:93:fc:4c:e1:
1a:df:7c:2d:b3:a1:15:d0:21:63:68:d8:3e:3e:85:cc:6b:84:
1a:04:33:a8:2f:98:b1:6b:36:60:2f:31:71:90:77:70:d1:4d:
bd:10:87:44:25:d3:07:92:31:c6:9e:e8:62:01:34:cb:ba:15:
d8:c8:64:93:b2:1c:3d:d4:d3:da:99:ad:a2:da:71:27:5c:b9:
ae:2c:d5:13:93:84:cc:b9:a8:34:5a:82:8f:0f:02:f8:e1:95:
81:a5:20:3b:f9:a0:85:c2:dc:29:02:1c:b7:66:62:97:44:2c:
71:3e:86:a9:06:d9:f4:74:48:c3:66:fb:53:26:44:bb:10:0d:
b3:31:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 07:07:05 2026 by rpki-client