Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: L1yxJRwUaX0esBxDx0IdGxWY3/qa5zYMnxah/Hp0WNE=
Subject key identifier: 85:81:AF:10:8A:2A:8B:F3:60:A3:50:E6:FB:9E:76:8D:FA:66:1C:4B
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019D39098EDB2E211256933704702ADE0D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: /E/S5QXMGtY12CGIO4BYRUdqeK3JXSepR7ASQw+YuHQ=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8e:db:2e:21:12:56:93:37:04:70:2a:de:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=8581af108a2a8bf360a350e6fb9e768dfa661c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:a7:c4:08:64:18:57:c2:c8:51:ce:15:b5:
de:f0:50:51:a9:57:15:5c:d7:bb:ff:45:92:9e:71:
33:98:8f:66:6b:07:68:b2:31:f9:40:5d:1d:b8:2b:
68:2e:ce:90:1b:89:a2:1d:28:37:19:6f:e2:88:12:
b1:f6:ff:a5:16:c5:8b:b5:5d:80:44:97:36:65:4b:
4c:14:9c:dd:2c:b4:68:e1:05:47:be:fe:ed:c5:03:
0a:00:54:78:e7:c5:4b:b0:ee:4c:6a:b0:69:b9:26:
da:a4:1c:14:09:25:39:59:51:6b:01:bc:ad:a8:48:
0b:a6:d1:63:86:08:2b:39:09:06:14:18:0c:ae:77:
9e:40:d3:de:9b:cc:74:aa:08:8b:21:05:c4:a5:17:
2c:a2:a8:b5:ad:ed:fe:c4:3c:f3:54:d9:d2:d2:0b:
57:af:0d:9c:de:b1:89:35:43:33:55:4d:76:13:d9:
a9:e8:e2:6d:b9:92:20:fe:c1:c2:f6:25:de:dd:ac:
52:89:36:78:cd:1d:51:eb:80:70:24:ba:dc:9c:c5:
42:21:5b:e3:da:c6:f2:07:24:9f:de:8e:6c:2f:d6:
e5:c2:20:80:86:f9:b5:54:3f:5e:79:e4:1f:29:21:
7a:75:55:43:5f:62:e7:12:45:9e:62:51:67:e1:9f:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:81:AF:10:8A:2A:8B:F3:60:A3:50:E6:FB:9E:76:8D:FA:66:1C:4B
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:19:cf:e4:74:48:3b:4b:1d:2d:87:0b:ec:41:ed:66:cc:
20:10:db:e0:32:0c:d0:02:c5:b9:60:3c:c7:5a:b5:7f:02:b8:
91:2f:9c:33:6f:d8:21:f6:ad:09:28:84:e4:00:ed:e9:7f:45:
9f:ce:6d:3a:5b:42:e5:b4:ae:ac:5c:51:7e:87:0f:87:d4:60:
a0:4f:95:bc:78:ed:af:17:1e:9f:fa:4d:ae:1d:20:38:36:2d:
07:60:ad:a9:cb:1a:b7:32:6b:bc:1c:1c:36:ba:b4:10:eb:ae:
f6:bd:c1:c7:d5:39:8f:b5:f3:2c:96:9a:a2:06:59:30:45:b0:
e0:cb:5e:cd:e6:15:b9:ad:a1:0d:0c:94:0c:44:21:fb:d0:24:
c3:cb:d5:fe:4f:00:b9:23:9a:70:b3:e7:9a:9f:4b:b0:a9:0c:
cf:37:17:44:6c:ef:ca:56:58:58:86:f8:b5:9f:9a:ce:7c:02:
98:15:a5:af:56:9b:bb:cf:0d:d6:ac:c4:9e:05:2c:b0:d3:52:
c6:6f:ab:ab:e5:af:b2:ec:f6:a7:56:a7:3e:e7:11:9f:1a:47:
97:99:78:72:2b:24:2f:0b:6a:81:24:1b:41:58:fc:ad:f7:b8:
c6:e2:56:4b:07:a1:37:90:fb:f8:d1:b6:47:1a:9d:f7:73:70:
bf:1c:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:12 2026 by rpki-client