Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
File: ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft (raw, json)
Hash identifier: Q9NuKUpPegKct8b5PD9lQJYSEjZQud8uMSU6U2LkW7E=
Subject key identifier: B4:0F:F8:89:60:65:8B:9D:12:7E:21:1F:3A:3F:F3:87:C1:07:0E:01
Authority key identifier: 66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
Certificate issuer: /CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Certificate serial: 019EE39E58056C14355F28C2FAA797067CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
Manifest number: 1D
Signing time: Sat 20 Jun 2026 06:01:05 +0000
Manifest this update: Sat 20 Jun 2026 06:01:05 +0000
Manifest next update: Sun 21 Jun 2026 06:01:05 +0000
Files and hashes: 1: XCBgBb40KAFNV8_NTuAh4kKrwoc.roa (hash: zjjSUJaypws5+cHHwDC46HZi6SOAqaNmSSp20fnQ/zo=)
2: ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl (hash: QoZX1AafCsI6CxIQY45/oROhCEF49utEnT1e4IktD7k=)
3: enNwWa_tjEADj60hMM9KCK674dI.roa (hash: jbZhyNpL/OUred4wU6osJUOuoDw7EZkVk6iISt/NlJo=)
4: mvMfPRH6Mk3EjG0E4WCshPoSRK0.roa (hash: wR4V3iYm4lRZUfpxuBz7lXadGQ4ppLA7EP2UVUE9PYw=)
5: urNZqraMe24QrD8E6aBXbm8Rda8.roa (hash: 8iEEx3bYaRsI09sBEMgTKSlraFYwfmKRddI/LwDyHYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:58:05:6c:14:35:5f:28:c2:fa:a7:97:06:7c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Validity
Not Before: Jun 20 06:01:05 2026 GMT
Not After : Jun 21 06:01:05 2026 GMT
Subject: CN=b40ff88960658b9d127e211f3a3ff387c1070e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:d5:b0:2b:1e:a9:26:76:f2:d1:55:42:e1:
b6:21:c9:4d:9e:bb:ce:33:f4:eb:c7:28:6c:ab:db:
d3:ae:cb:8e:69:18:14:c4:ab:0b:d7:09:2c:fa:90:
6f:8d:0e:05:f5:f0:60:6a:87:d0:49:ec:3a:4d:f6:
74:05:34:0b:9c:3e:e7:c9:f9:68:bc:31:66:25:bf:
5f:45:0e:b0:0f:79:19:9d:2e:9f:74:11:4e:17:18:
1b:c8:d9:01:01:30:5d:1f:5e:cc:20:66:e7:cc:5a:
34:1d:f8:b0:8f:16:39:fb:8e:da:10:a0:fb:af:0c:
2f:da:22:7a:33:d8:d8:53:fe:e1:6d:46:fe:7f:3c:
97:72:67:54:d0:d8:48:0b:b4:da:0d:96:70:e2:ec:
43:51:e0:a2:ec:fc:54:93:ad:cf:df:30:66:ad:19:
70:dd:79:f8:94:79:8a:45:6c:34:6e:81:a8:76:19:
6a:31:38:de:fa:8d:be:74:2d:f8:11:75:8b:2c:99:
ed:24:60:fc:a1:b4:6c:fe:2f:ba:d2:70:e8:24:25:
71:82:41:22:63:ac:8b:c1:33:8b:45:11:e4:00:8f:
9a:4d:40:e0:97:d8:62:99:0b:4f:6d:2d:83:e1:ba:
93:b7:30:d7:78:19:74:42:a3:a2:fd:6a:1c:5b:c1:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0F:F8:89:60:65:8B:9D:12:7E:21:1F:3A:3F:F3:87:C1:07:0E:01
X509v3 Authority Key Identifier:
keyid:66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:02:7c:b5:ca:68:40:67:e2:a7:ab:cd:fb:24:7f:b1:36:
6b:dc:43:d9:cf:7f:8b:8e:06:b5:ff:24:d2:90:4c:97:6e:4d:
cb:b3:e1:e2:9f:b9:05:e7:d4:a1:4f:7e:d2:a6:f3:63:49:c0:
1e:be:90:4d:c7:ac:66:97:a2:81:e4:99:4a:d5:d7:2a:3b:a5:
61:08:37:d9:79:d8:d1:59:cf:8c:fe:7d:b3:13:62:55:18:e4:
01:7c:d9:fd:13:20:da:64:98:89:13:5d:11:03:b7:21:76:d6:
ca:30:9b:c4:f0:50:26:89:ce:e5:3c:c8:e2:96:49:71:64:c0:
1d:d9:d2:61:5d:20:4b:c9:79:05:ac:05:97:18:c6:52:40:09:
2a:7d:e2:36:11:a7:b3:04:1c:30:ce:5d:e7:11:3a:bb:74:02:
fb:b3:1b:56:a1:b5:fe:75:71:c0:50:4b:72:5f:dd:13:ef:bf:
6d:a0:4a:41:71:8c:2e:5c:23:ea:24:85:fd:44:8a:53:8b:e8:
53:1a:0b:09:82:f9:5b:76:b6:f8:73:ee:ef:76:e7:40:2a:cf:
46:3c:2f:35:2b:a8:7e:75:6b:c1:57:a2:18:30:85:fe:ea:e8:
05:7b:b8:7a:01:fa:9b:15:c1:88:bd:6d:b9:df:dd:59:84:98:
2f:d0:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:32:41 2026 by rpki-client