Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: +ySrJhDb7GOEb3klNtB+Euo6ST12yd1Pd1EYCfZeZPI=
Subject key identifier: 00:1E:4C:C6:D2:B0:9B:DC:FC:86:3D:FC:34:34:57:ED:4F:4D:EC:79
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019F103FFC754430914694EB05B73701CCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 1983
Signing time: Sun 28 Jun 2026 22:00:56 +0000
Manifest this update: Sun 28 Jun 2026 22:00:56 +0000
Manifest next update: Mon 29 Jun 2026 22:00:56 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: NAMbz5ORG1AvxkYkq+BWGhPrXXt/NPhBsJwjiNOs4Ow=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:3f:fc:75:44:30:91:46:94:eb:05:b7:37:01:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Jun 28 22:00:56 2026 GMT
Not After : Jun 29 22:00:56 2026 GMT
Subject: CN=001e4cc6d2b09bdcfc863dfc343457ed4f4dec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:47:ec:4a:38:45:79:76:1d:c8:b0:29:4e:
23:a6:8b:e4:b7:61:f7:c0:97:1a:0b:ba:4e:b3:b0:
90:3e:3f:bb:0d:f2:5a:53:d1:c5:b0:03:b3:69:e0:
a1:a2:05:e5:72:b8:fd:b1:b2:e1:a4:d2:5a:5e:e1:
36:0f:a0:bd:10:ac:50:7b:91:31:2c:59:64:34:0d:
3a:a2:55:fc:20:70:c6:6e:5b:61:75:70:e6:a9:22:
35:52:84:ba:1e:47:46:98:31:67:35:61:e7:0a:ca:
6b:ee:9b:3a:02:73:56:46:c7:0f:18:df:7e:3f:f1:
3d:66:06:8e:1f:e1:3e:f0:fc:08:54:37:78:39:7a:
c3:f4:f9:da:75:49:b8:fb:c5:ae:9a:76:00:df:13:
0c:32:04:fa:33:55:56:25:7b:a8:54:d2:cf:5c:6b:
c5:af:9c:f4:26:c0:69:94:bb:67:d0:7f:51:1b:68:
c6:32:06:e1:35:7b:89:86:05:db:e0:bc:21:82:d8:
16:48:aa:27:f0:3e:7f:2d:23:e4:72:a2:5f:d4:d4:
c6:d4:2d:05:0b:20:4e:f6:22:d5:0b:88:5e:62:0e:
0e:83:1c:52:6d:1d:fb:41:7c:94:24:1f:39:b4:5c:
c3:60:15:fd:f7:04:2d:56:bc:5a:27:c1:df:f2:81:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:4C:C6:D2:B0:9B:DC:FC:86:3D:FC:34:34:57:ED:4F:4D:EC:79
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:f2:07:38:d5:bf:72:8c:d3:f4:e6:b7:eb:a6:10:17:f1:
36:fe:79:e1:c3:81:fa:b0:ad:f3:35:75:c5:1d:04:57:31:12:
a3:12:06:e9:de:24:3b:4a:46:08:e2:e8:05:11:37:f3:79:5f:
b0:0f:ae:06:a6:9b:65:38:ca:ef:0a:15:a8:66:3e:fe:ea:55:
62:80:99:4e:2a:d9:36:84:8d:9d:50:b5:e1:1a:53:61:91:1d:
a2:66:05:6c:b7:25:57:24:e6:99:dd:d7:6d:77:16:6e:17:41:
ad:c4:0e:fc:ed:ec:c9:08:f2:c0:c3:1e:9e:71:14:dc:a9:06:
70:95:34:f1:b0:b7:1a:07:bd:26:ff:01:66:19:fa:43:b6:da:
76:32:8b:bd:09:6c:8f:66:63:37:86:6e:11:00:13:7c:a2:95:
b5:e7:18:5b:9c:74:f0:07:a1:53:d6:b0:8e:82:d0:13:3b:99:
5f:fe:a9:a8:09:51:b7:fd:fb:bb:4a:92:49:18:09:db:5c:cf:
7d:34:4f:ce:65:c2:f9:5c:3a:43:9d:ce:ae:d0:ef:46:62:13:
48:ba:20:ff:e6:54:6e:fb:69:45:a1:f8:b4:ea:fd:73:6b:20:
b7:c3:e4:49:7c:f2:d0:a6:7c:f8:05:c5:a7:1e:49:55:e3:ed:
af:36:9a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8QP/x1RDCRRpTrBbc3AczNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw
YTM0YjIwHhcNMjYwNjI4MjIwMDU2WhcNMjYwNjI5MjIwMDU2WjAzMTEwLwYDVQQD
EygwMDFlNGNjNmQyYjA5YmRjZmM4NjNkZmMzNDM0NTdlZDRmNGRlYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgRH7Eo4RXl2HciwKU4jpovkt2H3
wJcaC7pOs7CQPj+7DfJaU9HFsAOzaeChogXlcrj9sbLhpNJaXuE2D6C9EKxQe5Ex
LFlkNA06olX8IHDGblthdXDmqSI1UoS6HkdGmDFnNWHnCspr7ps6AnNWRscPGN9+
P/E9ZgaOH+E+8PwIVDd4OXrD9PnadUm4+8WumnYA3xMMMgT6M1VWJXuoVNLPXGvF
r5z0JsBplLtn0H9RG2jGMgbhNXuJhgXb4LwhgtgWSKon8D5/LSPkcqJf1NTG1C0F
CyBO9iLVC4heYg4OgxxSbR37QXyUJB85tFzDYBX99wQtVrxaJ8Hf8oEVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAeTMbSsJvc/IY9/DQ0V+1PTex5MB8GA1UdIwQY
MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt
YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh
LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3HyBzjV
v3KM0/Tmt+umEBfxNv554cOB+rCt8zV1xR0EVzESoxIG6d4kO0pGCOLoBRE383lf
sA+uBqabZTjK7woVqGY+/upVYoCZTirZNoSNnVC14RpTYZEdomYFbLclVyTmmd3X
bXcWbhdBrcQO/O3syQjywMMennEU3KkGcJU08bC3Gge9Jv8BZhn6Q7badjKLvQls
j2ZjN4ZuEQATfKKVtecYW5x08AehU9awjoLQEzuZX/6pqAlRt/37u0qSSRgJ21zP
fTRPzmXC+Vw6Q53OrtDvRmITSLog/+ZUbvtpRaH4tOr9c2sgt8PkSXzy0KZ8+AXF
px5JVePtrzaasg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 01:15:32 2026 by rpki-client