Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: z0c/tcpMoP9+NxK1UI5N9w4dH9nXwcAIDBAjKOiawrw=
Subject key identifier: 69:D9:5C:C4:6E:B3:DB:9F:A4:55:9E:46:FD:4F:13:91:15:E1:78:E0
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 019FA2CF2E14745FC4911847A05A965C4471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 19CA
Signing time: Mon 27 Jul 2026 09:01:54 +0000
Manifest this update: Mon 27 Jul 2026 09:01:54 +0000
Manifest next update: Tue 28 Jul 2026 09:01:54 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: LB8KoAxzLKG2Zn+rKnysS+QBTbmA7pnmokjB+m/fU3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cf:2e:14:74:5f:c4:91:18:47:a0:5a:96:5c:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Jul 27 09:01:54 2026 GMT
Not After : Jul 28 09:01:54 2026 GMT
Subject: CN=69d95cc46eb3db9fa4559e46fd4f139115e178e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:47:92:4a:51:eb:17:e1:80:4c:17:32:6d:
0d:32:31:13:c6:f2:bc:9b:b0:f7:01:ae:8a:46:8b:
b9:08:c9:3b:2b:48:b7:f8:e4:a3:42:2f:f2:01:c2:
e4:91:a9:d8:ec:ed:53:d0:ef:5b:e9:32:3f:e5:b2:
6c:c2:0b:bb:23:5a:af:c8:0f:b9:cd:53:b4:2e:7b:
54:98:16:41:37:6f:3e:a9:f8:1b:f1:7d:84:c6:79:
dd:65:40:63:21:30:84:f9:eb:97:a4:15:87:c5:6d:
a2:78:20:f4:1c:f2:c8:da:8b:5b:ab:9d:4b:4e:1b:
4f:b0:0c:41:8f:80:e7:a9:98:1e:9c:71:50:b9:2e:
c4:a1:29:c6:a5:5b:56:07:ac:ba:29:aa:cb:14:61:
19:d7:76:28:65:00:58:fc:fa:f1:30:f2:fd:ee:10:
39:06:2a:57:76:73:52:b0:1c:e4:b0:95:20:59:9c:
33:99:67:14:b0:b8:4f:88:6f:75:ee:d4:d7:b5:66:
37:1a:8d:5d:c6:77:67:b2:f7:21:af:a3:69:36:6c:
6c:92:87:74:4f:d0:53:80:ad:da:11:b3:c2:68:51:
8a:a8:5f:82:4f:4f:55:95:05:e5:db:bd:28:91:68:
a9:f7:a4:95:fc:8f:ce:b6:20:5b:25:d5:b7:94:50:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D9:5C:C4:6E:B3:DB:9F:A4:55:9E:46:FD:4F:13:91:15:E1:78:E0
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:69:08:f5:f0:ec:cc:29:1a:19:06:f8:5f:8d:0d:a9:86:7e:
8f:99:59:4c:54:b4:72:3f:f2:43:a1:33:92:74:03:de:49:c2:
48:01:55:41:37:49:1e:5e:d6:d0:2d:d1:e0:b1:2e:55:dd:eb:
e1:b8:79:fd:09:61:3e:15:26:b6:ad:d8:ed:25:c6:47:75:a3:
b8:e5:ab:35:96:2b:cf:10:ec:ba:e0:13:5f:84:54:9c:b3:aa:
c6:05:bb:5c:71:75:89:8f:25:2b:bc:48:a4:c5:d8:c1:e1:4b:
01:6f:1a:8b:7f:6b:96:a7:94:97:fc:6c:56:f5:02:40:fb:62:
0d:b5:0f:3d:9f:7c:51:eb:75:bf:2a:af:32:44:44:4a:ef:bc:
69:7c:67:64:b1:39:8e:a7:6e:51:85:c7:94:c5:8f:ec:c7:2c:
06:bc:3b:fb:78:6a:22:c8:cd:0f:70:2a:58:13:d6:97:c8:e4:
31:f5:1c:d2:2b:0a:4a:6a:f1:5c:4e:ea:42:dd:9f:cb:b7:78:
22:57:bb:55:dd:f4:4e:f6:1c:77:bb:83:8b:77:19:4e:f4:69:
56:c0:2d:36:c2:ba:8a:a1:df:0e:d0:de:eb:66:fc:61:b0:37:
43:c3:99:43:ce:3e:32:80:80:89:0a:b6:73:09:3e:f9:fe:e3:
b3:d9:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:18:45 2026 by rpki-client