Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: wY3EEJnJZF+CTznku/EFlbJ0CKUoIWyZFlI0gHit7QQ=
Subject key identifier: 6E:D2:C4:08:57:5D:A9:4B:CC:6A:55:FA:44:AA:BB:E7:21:43:79:27
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 019D38D31634FD353ABFEE96F013A5C1FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: vFDZciYoBr3UVbAAnLol1pOSZRwAGa+4LLt7sCGjNbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:16:34:fd:35:3a:bf:ee:96:f0:13:a5:c1:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=6ed2c408575da94bcc6a55fa44aabbe721437927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:19:d3:d3:2f:98:4f:c6:6f:24:af:01:36:
2c:d9:fe:c6:14:e9:01:b6:38:8f:9c:d5:28:52:96:
19:8c:6f:f8:57:c9:c9:13:ae:95:94:d0:4f:66:5f:
4c:6c:10:32:4e:cc:6b:92:20:8f:27:29:06:ee:38:
7a:4a:e0:34:99:89:ab:2d:19:bc:03:d7:7f:e6:74:
5c:a9:2e:b1:84:57:5b:93:ec:f5:e8:73:2c:71:89:
e1:86:b3:ab:ea:41:d0:8f:d3:41:ac:45:d7:7b:f1:
23:7b:a5:e4:a3:9a:77:ec:91:13:ea:90:83:c6:70:
5e:c5:9c:f6:ac:b1:8a:59:36:08:d4:52:fb:71:e4:
03:d7:92:34:d3:46:c0:94:8c:9d:eb:66:7d:76:68:
a4:3d:91:2e:b9:ef:04:06:62:15:72:06:12:18:45:
e4:91:82:eb:a0:0b:9f:e1:53:0c:42:2b:fb:73:ac:
ac:9a:db:f3:23:05:a7:d6:84:bd:67:47:e3:0a:79:
c2:a0:86:49:54:68:98:5c:b7:33:ac:47:87:12:76:
88:ae:f6:b9:99:ea:31:b2:24:d2:2c:1c:36:ae:3e:
78:c2:be:af:a2:e7:1c:0c:fe:82:1c:38:96:ad:80:
6b:c4:d3:bc:df:bf:09:21:55:46:aa:c0:6c:3d:ea:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D2:C4:08:57:5D:A9:4B:CC:6A:55:FA:44:AA:BB:E7:21:43:79:27
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b7:d2:5d:ef:f5:ed:c7:67:df:50:18:d3:fa:75:60:6e:55:
77:0b:2b:55:16:aa:ca:bd:92:4c:bc:0d:2f:23:bc:fd:e9:05:
68:25:46:e7:55:d4:6a:06:ca:ac:74:80:b1:a3:7f:b4:59:04:
c8:4b:4e:a6:85:29:bb:8b:00:58:bc:de:5f:a3:da:2c:22:d0:
5c:9f:1d:44:83:fc:d6:02:17:82:bc:96:e7:ca:52:79:7a:7c:
fa:cc:be:bd:bb:9d:23:a5:7a:b1:8c:e2:12:0e:0b:8c:7a:1d:
0a:4d:1d:83:ff:d2:ba:b5:f9:c5:f9:e0:3a:fc:da:8a:96:05:
98:f9:d4:c3:3b:76:db:a8:48:fe:a7:9a:27:4b:48:7c:66:ab:
30:9f:5b:24:46:5c:88:15:4c:af:7d:8c:41:5f:29:04:a2:84:
fe:d8:62:09:db:c0:7f:29:e1:0a:bb:52:d1:90:78:15:98:96:
4c:18:e7:71:39:1d:d9:4d:87:56:fd:de:0d:9e:26:74:a4:14:
a7:0a:a9:de:29:80:9f:f0:20:77:15:77:c5:b0:23:9a:cd:5d:
46:76:e9:5a:70:23:04:27:fa:cf:98:9f:a1:3a:74:7d:58:7e:
ba:5c:62:ad:c7:7b:0b:6a:c1:b9:0c:e7:fe:75:8f:00:a3:35:
66:e5:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:40 2026 by rpki-client