Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: +ef7icTh9wxZRjuhWUQvglGfsJC3l9sRaAvwYzJZsLk=
Subject key identifier: 2F:C6:C6:58:AD:33:F6:17:3F:50:EE:01:AF:71:42:49:CD:02:09:D6
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019DB1D8E417A38C5A0D6EE4AC2EC510113D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 18D1
Signing time: Tue 21 Apr 2026 21:01:14 +0000
Manifest this update: Tue 21 Apr 2026 21:01:14 +0000
Manifest next update: Wed 22 Apr 2026 21:01:14 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: TX9PbKX1Ax5qPx7p4s/a443V442hfiHGj2Ap/4511/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:d8:e4:17:a3:8c:5a:0d:6e:e4:ac:2e:c5:10:11:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Apr 21 21:01:14 2026 GMT
Not After : Apr 22 21:01:14 2026 GMT
Subject: CN=2fc6c658ad33f6173f50ee01af714249cd0209d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:54:6e:a2:69:25:7b:a3:ab:6c:04:6c:2b:
bf:3c:b5:fb:f1:4f:f3:5f:67:07:80:d4:a0:7e:48:
20:c2:f9:7b:2e:d6:7b:bb:68:ec:1f:19:ca:74:f6:
28:da:cd:54:d1:95:ba:db:bf:72:5d:da:c1:30:3d:
c5:6f:4f:ff:a6:d4:e7:1d:9c:98:84:a1:c1:77:9b:
ce:9e:5d:8d:19:f4:38:7f:06:24:f7:dd:94:37:6a:
c4:dd:d2:f1:0f:47:68:6d:98:db:20:63:09:98:0e:
2c:64:23:f1:38:63:7f:d2:16:8f:2f:cb:84:55:9e:
0b:e3:fe:d7:99:7d:2b:de:b4:da:5b:be:12:4c:49:
4f:77:8c:08:15:af:77:a9:6e:22:47:3b:ce:55:e7:
55:61:1f:b1:31:e7:44:86:1e:05:2b:82:6b:15:3c:
57:fa:2c:c0:f8:ee:0d:9d:01:14:c7:a9:d8:92:76:
e4:f3:07:4e:09:c0:bf:9d:d8:d1:86:97:42:e0:59:
d7:50:e1:e7:81:b5:d2:2c:af:9b:b8:4f:e7:eb:5d:
bb:4f:b2:a4:fb:88:69:49:17:73:84:ce:9d:85:9b:
e0:36:a7:ad:f1:52:fc:40:29:70:d8:cf:d2:a8:28:
be:f4:1e:e3:a6:91:ad:35:e5:d5:56:1b:ea:a5:61:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:C6:58:AD:33:F6:17:3F:50:EE:01:AF:71:42:49:CD:02:09:D6
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:05:8e:c5:1e:ec:ac:e8:42:72:e5:12:d3:12:01:a5:69:ba:
18:b8:8f:f9:19:c6:35:c6:15:f6:d2:dc:95:ca:63:88:1c:1f:
30:9e:b2:82:d8:8c:be:8c:10:e6:04:81:1f:77:e6:9e:eb:86:
48:f4:05:8e:60:3c:a6:55:d9:73:ed:0c:96:c5:d8:63:0b:26:
de:4b:98:07:de:ac:21:bc:3b:19:8b:d7:f1:82:16:df:d3:63:
34:e0:d6:98:ce:44:92:cf:d0:c3:69:50:b3:df:10:0d:34:4e:
00:0a:5e:a6:10:08:65:f6:12:24:23:b4:ad:bf:e3:91:b5:5c:
81:3f:b5:f2:f1:e2:84:b7:9d:6f:60:ec:b0:7a:99:5f:ed:c1:
27:ac:ad:8a:d7:d5:94:cb:cd:f3:43:f6:86:9e:3a:7e:4f:4b:
fc:7c:d1:af:62:21:68:4d:9e:a3:15:97:b8:20:6e:96:d6:be:
88:88:ac:bd:34:88:57:87:ca:10:c4:f3:95:9d:87:ef:2d:dc:
64:7b:07:eb:7a:8b:02:1a:5e:cf:71:35:2b:13:ac:3b:7b:fd:
66:2a:66:3e:11:c2:e9:fd:1a:1f:78:22:5d:a5:c0:ed:e3:1a:
47:bc:27:c5:a9:eb:f8:86:7d:a1:d4:72:41:c1:33:8a:c4:1c:
96:cb:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:24:21 2026 by rpki-client