Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: SMoNjXaNJ7mEnZnYqDtnYJ74Df9Ygp+TQ5UwCZ902sE=
Subject key identifier: C2:46:0E:FE:59:23:25:EC:6E:60:5A:31:98:9C:8A:2C:DF:61:D5:7D
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019E30A97C0725CEF19FF1D5216379B2041F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 191B
Signing time: Sat 16 May 2026 12:01:13 +0000
Manifest this update: Sat 16 May 2026 12:01:13 +0000
Manifest next update: Sun 17 May 2026 12:01:13 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 08IganeICC+Kiwqn6fC24wYX0qWHkDA6INGUl1etaCc=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:7c:07:25:ce:f1:9f:f1:d5:21:63:79:b2:04:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: May 16 12:01:13 2026 GMT
Not After : May 17 12:01:13 2026 GMT
Subject: CN=c2460efe592325ec6e605a31989c8a2cdf61d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:01:97:91:48:51:e5:a0:03:99:f9:50:4d:
ff:09:ae:98:5b:80:86:ee:b3:0d:75:71:54:25:ea:
f3:a1:52:83:f0:62:24:ce:00:d7:e2:5d:af:16:49:
1a:56:00:9b:ee:6c:15:c3:7d:49:6a:e3:4f:01:03:
6d:ab:ea:08:f9:11:45:ab:62:df:50:4a:88:bf:b0:
10:b4:fc:f5:d0:e2:0b:1d:cc:fa:e6:71:1a:9a:10:
06:73:a8:e4:b3:90:df:3e:78:28:29:67:2c:b8:51:
9e:78:56:a3:b8:5c:99:51:7e:35:ea:bc:c6:9d:5e:
c8:4a:03:9a:39:1d:60:70:49:18:b5:e6:87:80:07:
75:89:1c:97:47:cb:1b:78:80:fd:24:30:84:ac:d5:
ec:27:03:a6:3f:c6:7b:dd:7d:3d:b8:24:94:dc:4b:
72:bf:48:0e:5d:b8:86:96:27:b7:e5:df:79:a5:0c:
69:2d:98:2d:67:40:12:b2:6a:4e:b6:a3:89:dd:5b:
17:37:06:bc:81:aa:45:4b:d4:86:40:0c:0f:00:ac:
28:13:81:3f:65:07:1b:d4:5e:1d:4c:26:30:04:2a:
da:1e:83:76:83:5f:51:4f:44:1c:30:b5:fa:9b:90:
3d:dd:69:41:5a:60:68:71:aa:31:90:91:57:69:87:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:0E:FE:59:23:25:EC:6E:60:5A:31:98:9C:8A:2C:DF:61:D5:7D
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a0:a8:8b:e3:87:04:31:60:5d:a4:18:38:24:06:4b:9c:70:
f4:2a:2f:64:16:9a:76:6a:3c:dd:7e:89:04:7d:88:dc:51:6e:
40:4b:b9:c3:f7:d4:cb:60:38:63:1b:b7:e1:ff:c5:12:47:2e:
c8:53:e7:78:15:5d:97:5f:83:20:91:20:42:b3:8e:53:62:d0:
41:d9:e3:10:da:13:e4:dc:bc:d4:de:d4:18:89:d2:a1:39:34:
8a:09:e8:62:b6:ab:e9:cc:f2:47:fe:3e:45:08:87:98:05:67:
8d:85:3d:1a:b7:6a:f5:a2:a0:8a:57:96:04:66:b5:f1:d4:be:
25:ea:5e:89:19:04:f9:47:63:41:16:2d:37:c7:00:f1:75:9b:
ac:f4:42:47:ab:1d:8a:c8:2c:73:98:d7:a5:fc:a5:8a:be:fa:
dc:90:04:ec:6a:4e:d2:06:63:06:6b:38:07:2e:3e:8d:d9:29:
8e:d6:c5:6c:25:0a:18:fd:c4:79:7f:e8:99:b3:b6:c1:cc:a6:
7c:2f:9b:bf:9c:f1:ad:bf:56:4a:78:da:7b:bd:ac:6a:c4:33:
92:d1:0f:8a:20:16:3a:fa:b7:3e:e3:a7:4a:59:cf:1c:ed:16:
3a:24:6f:f1:9c:9f:f7:f5:e1:67:5a:64:73:96:ee:d6:1d:1f:
a9:f2:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:17 2026 by rpki-client