Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: t2tHSjxPGxaUrxb8ziXxWvoBU/iiUBXYEBJMMwcyj+0=
Subject key identifier: 1E:36:62:10:87:FF:B2:59:62:23:C0:B1:9E:B7:35:8C:36:FC:10:9E
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019FCB934E469079AC303CA24E5A0D57FED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 19F0
Signing time: Tue 04 Aug 2026 07:00:56 +0000
Manifest this update: Tue 04 Aug 2026 07:00:56 +0000
Manifest next update: Wed 05 Aug 2026 07:00:56 +0000
Files and hashes: 1: 60T19wa2SlM3ZiPayRZ2n1NrApw.roa (hash: aMzkAP/cDxiHQ9vf70ws51PtkVu4/Z7Zz2jP+ZQUqas=)
2: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: KsSx7HAIG8UiPo_9ox9BjV2Oltc.roa (hash: pCu9vg3wAa4MKzkAnOhHwcvZiyujnFlJ5yjYXEI6nsA=)
6: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
7: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
8: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
9: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: fuWvjnPUSoKOUqdzsByLbpMjJkuRmBVkM9UkZejxbME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:93:4e:46:90:79:ac:30:3c:a2:4e:5a:0d:57:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Aug 4 07:00:56 2026 GMT
Not After : Aug 5 07:00:56 2026 GMT
Subject: CN=1e36621087ffb2596223c0b19eb7358c36fc109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:2f:ce:d5:54:22:71:e7:d8:2c:70:38:ed:
16:f5:38:31:1c:b1:b9:f3:6a:ce:22:ee:e9:b8:19:
45:e8:bd:ef:c3:cf:8b:fb:a9:6b:56:15:1c:2b:44:
4b:ef:6a:fd:35:82:08:69:d6:4e:0c:e1:8d:ed:22:
c8:fa:3e:a4:de:74:8f:4a:cf:06:de:69:de:5d:69:
ed:fe:55:7a:16:97:58:70:f6:2e:1c:0d:d9:8a:50:
1f:ac:29:9d:03:3a:79:06:24:cf:84:8b:68:89:fc:
84:73:2d:ee:2f:e2:3f:01:21:7d:e8:14:f0:21:ef:
30:13:46:19:61:a4:a6:91:44:a9:29:5b:72:6f:c4:
91:f3:4d:4f:46:1a:3b:eb:88:4b:06:f9:06:f2:6d:
73:8d:ca:64:ea:80:1a:d2:9e:c7:36:1f:8e:ba:21:
0a:ac:8c:b8:fa:01:7e:94:c8:3a:4e:d3:59:2e:eb:
06:fa:84:64:69:82:22:88:4b:ea:52:92:07:b2:92:
2f:e5:41:e5:b8:69:d5:b0:8b:29:05:bc:ed:61:47:
18:d5:22:58:40:c3:e1:82:ec:9d:f1:b2:cc:5e:31:
d6:b5:5c:92:60:1a:c4:66:c8:5b:87:f9:84:ef:f8:
9a:cb:65:fd:07:1e:76:c7:3a:66:6e:75:c0:9a:97:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:62:10:87:FF:B2:59:62:23:C0:B1:9E:B7:35:8C:36:FC:10:9E
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:34:ff:38:af:c2:d9:fa:6f:f6:3b:96:70:fc:e8:a6:91:
5a:dd:82:9e:f6:49:23:ab:6e:7b:4a:da:21:82:6f:cb:f0:f8:
cc:9d:b3:f4:58:9d:4e:a2:40:b5:15:60:76:da:7f:f9:52:9b:
a6:56:70:87:c8:de:ec:8f:a2:d4:b8:b3:15:91:f3:84:5d:f8:
e7:d4:80:ee:25:49:ba:d5:f2:d6:d6:d0:a2:8c:d2:6e:53:28:
e7:6c:22:7f:1e:b2:5f:75:80:d1:82:5d:05:3e:d3:9b:51:7f:
dd:02:15:36:8e:af:85:1b:55:8f:39:2c:6c:7a:4b:92:70:03:
a7:cc:a5:c0:2a:04:58:75:14:5c:c3:ce:05:ed:01:97:d5:0b:
bf:7a:1f:61:ae:b3:3e:80:b1:0a:2f:e8:b9:eb:0c:fd:1c:58:
97:59:5f:28:3e:df:ae:22:85:52:4e:83:08:c8:85:99:de:93:
80:6b:5f:f9:56:7e:1a:af:5d:45:27:13:18:b2:51:39:4b:60:
7a:a8:4b:c7:d0:e5:2d:e2:62:82:62:8f:37:d1:96:79:ea:61:
a7:de:68:6e:ef:5b:e2:d0:df:27:45:c4:cb:4a:41:6d:2f:16:
74:3f:f6:e4:fa:b5:56:01:59:45:5e:83:81:37:25:10:fc:62:
a2:e6:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:50:47 2026 by rpki-client