Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: nDOhHYGUULhBV3rxIUV5eeSIxaGnhl799tdTs+grRXw=
Subject key identifier: 31:18:AD:C9:E3:A6:1E:71:12:ED:39:31:F5:DA:63:FA:DF:A7:EA:41
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019CF8AB81F13744ABDF2E0CBEBF33FC29D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1876
Signing time: Mon 16 Mar 2026 22:01:55 +0000
Manifest this update: Mon 16 Mar 2026 22:01:55 +0000
Manifest next update: Tue 17 Mar 2026 22:01:55 +0000
Files and hashes: 1: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
2: Ble-2DKUX-bI_pCO2COt4CKXa8c.roa (hash: CZIHpvsUMQoZP0t5OmkQjhg6lPLENkoG8ZqKq6OJf9Q=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: reei2mIe5dEMPHrHzOuWZR4fbjDInuneGBxcxjCV5sg=)
9: Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa (hash: bZNszqhnT3nG89SByGHQ2OOopVxYZGpnqUauM45GA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:ab:81:f1:37:44:ab:df:2e:0c:be:bf:33:fc:29:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Mar 16 22:01:55 2026 GMT
Not After : Mar 17 22:01:55 2026 GMT
Subject: CN=3118adc9e3a61e7112ed3931f5da63fadfa7ea41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:61:ec:20:21:b0:34:48:73:5f:18:2e:e6:
82:9b:9c:21:5d:6b:b9:14:61:76:13:be:1b:78:b4:
d7:07:48:84:dc:53:b5:61:58:4f:e8:40:28:14:94:
62:31:49:17:16:e8:f2:a2:6b:92:ce:42:fc:23:1c:
f9:50:35:bf:05:9e:4b:6e:3d:f7:df:bb:c7:b7:88:
40:c0:66:5f:3e:9a:f3:77:86:af:9e:b7:34:b0:f9:
fa:fe:01:b0:bd:01:84:21:48:e3:6b:99:52:c9:d6:
fb:da:dc:7c:8f:ff:bb:18:8a:fe:70:81:48:d4:82:
a7:c3:8d:c4:c3:b4:cb:22:ea:f1:70:84:1c:84:7b:
bb:1d:6a:18:2c:10:9c:96:88:ef:f7:5c:68:46:f4:
11:4b:ef:9d:c7:06:0c:0d:a1:31:a5:99:f8:24:ac:
bd:03:d3:6d:2a:c2:88:5e:cf:54:2d:8b:64:54:58:
3c:45:52:12:11:bb:1c:07:5f:39:6f:66:7b:aa:ed:
a3:bc:9f:d3:49:50:32:8e:5c:2e:f3:a5:6b:17:b0:
98:ef:04:f7:fe:92:08:2f:f1:d8:23:8e:84:73:d8:
41:6e:e1:77:b7:8f:d6:fe:5f:21:48:62:4c:03:07:
87:30:35:e3:20:c1:b1:74:27:78:2c:28:50:fb:8b:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:AD:C9:E3:A6:1E:71:12:ED:39:31:F5:DA:63:FA:DF:A7:EA:41
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e0:04:13:19:34:c5:87:61:59:c9:46:0d:60:27:a8:22:50:
0b:7c:8e:42:b5:fd:d4:da:f2:ed:5c:02:be:89:76:21:62:6f:
76:2a:c9:ce:5e:a1:72:f2:4a:77:2b:7b:9a:41:b7:da:60:a2:
3f:08:14:b9:44:19:7e:01:87:82:41:be:2b:9a:dd:45:9a:26:
fb:46:77:9c:03:af:8a:ab:30:60:cb:c4:1c:38:48:b2:e8:d6:
b0:a2:a8:68:57:3a:74:c6:d1:2b:02:4a:31:70:16:1b:b5:5b:
7e:56:ed:7c:2d:68:6e:4c:cd:4d:ad:a2:17:3d:a4:ae:39:e7:
6d:28:10:a0:0e:73:6e:c9:af:3d:61:23:c5:78:a5:3a:26:11:
36:2d:c5:92:fd:1b:8e:f0:0b:d1:50:86:5e:39:85:13:d1:f1:
6e:38:d6:63:d9:39:f1:91:e9:21:84:ff:8d:ec:98:67:06:60:
ba:ec:a9:40:cd:51:b0:1a:f1:60:14:72:19:96:8c:43:f3:0f:
71:54:b2:e1:3c:3d:fa:a3:32:94:87:b6:92:2b:bd:28:fd:7e:
7f:62:db:3e:f8:e5:be:ce:ee:8a:f4:9a:fe:70:ca:8b:01:2d:
78:c7:3e:2c:8c:9b:3e:7b:43:00:5b:ab:1e:4f:3f:a0:a9:f3:
d9:8e:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:15:38 2026 by rpki-client