Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: hdxXrbcpp8U80/t91D4cF74UxISZ3IisnQNR8bxJEL0=
Subject key identifier: 5D:CF:4F:6E:76:37:4D:80:A4:C3:09:B0:53:2A:4B:D9:BE:3D:B7:DC
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019E26933DA16517AA3D7F2074DEB8B0D28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 190A
Signing time: Thu 14 May 2026 13:00:44 +0000
Manifest this update: Thu 14 May 2026 13:00:44 +0000
Manifest next update: Fri 15 May 2026 13:00:44 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: 1vFVHLq3JP5nyiVbZVr5+LjgnqdVt1SrmaAXrqK22to=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:93:3d:a1:65:17:aa:3d:7f:20:74:de:b8:b0:d2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: May 14 13:00:44 2026 GMT
Not After : May 15 13:00:44 2026 GMT
Subject: CN=5dcf4f6e76374d80a4c309b0532a4bd9be3db7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:e3:d7:79:20:8c:58:63:75:21:cb:a5:17:
9c:99:ef:c7:ea:de:2f:a8:cf:15:12:b7:e1:c5:0e:
8b:3d:73:d3:99:28:96:bd:aa:87:d2:92:0b:30:3e:
44:6b:ec:1b:4e:64:a3:d5:98:27:23:c0:c5:9b:f8:
16:9c:5e:ac:34:b3:08:ec:a5:df:8c:71:ff:20:0c:
aa:c3:f9:81:9b:e4:fd:6b:f0:4e:77:12:14:4a:bf:
da:74:ec:b3:50:0e:86:76:39:63:13:e9:a2:cd:35:
0a:91:82:6b:61:5a:22:e4:24:b4:5c:f9:69:13:cb:
98:b8:99:97:44:bf:36:67:d2:d3:f5:94:7f:7a:c4:
fd:43:93:33:67:cc:e8:5c:a0:a0:35:5e:91:80:89:
d2:84:77:2b:21:b0:ba:4c:4b:ec:6c:4c:cd:db:ae:
53:02:1e:ff:eb:9f:56:b5:8f:4d:68:d9:a5:e2:d4:
d3:bd:98:3e:9a:45:6b:82:07:f5:ce:b6:6e:f7:cb:
4f:b3:80:83:17:79:1b:c1:74:44:8f:ac:c8:4b:f3:
92:42:2d:88:e9:08:fc:c6:d0:ce:27:ea:40:4d:7d:
2a:93:63:d2:9d:2d:5b:7c:22:2d:74:3d:c3:0f:59:
95:f1:f8:ac:f5:00:db:3b:31:af:ed:52:e9:05:66:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:4F:6E:76:37:4D:80:A4:C3:09:B0:53:2A:4B:D9:BE:3D:B7:DC
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:22:ed:69:4f:21:0d:73:ef:cb:be:ab:28:f6:5a:8b:24:
69:16:af:c3:a0:68:6a:c3:5d:0c:16:aa:93:13:d8:c0:c7:07:
8a:a4:5d:ea:13:59:d3:27:2a:7c:6f:17:8c:ad:37:46:0b:d9:
87:aa:7c:91:28:3f:9a:c6:ef:52:56:3d:38:d9:b5:f8:41:07:
35:83:4c:2b:14:15:9c:76:9d:00:bc:bf:76:e9:f9:c3:af:da:
85:ea:2e:9b:32:3b:4a:48:d1:f2:37:ab:0c:42:d9:92:31:10:
c0:f2:2d:71:b1:2a:de:17:fa:2e:2c:63:31:4c:f2:87:5a:28:
dc:f3:45:84:09:50:23:e8:28:97:bd:80:97:3b:12:e5:45:53:
a9:05:22:8e:1b:58:7a:ee:5d:e2:f8:e7:1c:87:93:09:50:80:
1f:12:33:b2:b9:40:02:32:84:e6:2d:ea:1b:f1:1b:1a:4d:9a:
7c:aa:12:74:6f:94:48:bc:88:34:99:cb:d4:fb:a7:3a:5d:a1:
1e:f6:0d:bc:fa:ee:02:00:d7:f9:08:fe:64:07:8f:83:6f:d5:
62:30:59:38:c2:a0:0a:13:fb:39:6f:64:7a:0c:62:59:16:46:
e9:00:d9:67:1b:57:e8:2a:e2:c0:70:7e:2a:d3:65:dc:fb:93:
40:26:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 15:58:53 2026 by rpki-client