Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: eHDn/bWBg6/jc6hbJaCdGMwPMho5kL5tb9wpSc/Akqo=
Subject key identifier: E7:6E:77:AA:62:39:F9:A9:5C:27:BE:BD:F2:1F:04:89:C9:AD:36:EC
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019E9B847CBA4B1BC8124477B32A721ECAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 194A
Signing time: Sat 06 Jun 2026 06:00:11 +0000
Manifest this update: Sat 06 Jun 2026 06:00:11 +0000
Manifest next update: Sun 07 Jun 2026 06:00:11 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: yRNgV7MhCZHWbvvVTe7c8xmlXYTTB/s2znUmuBjdX/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:7c:ba:4b:1b:c8:12:44:77:b3:2a:72:1e:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jun 6 06:00:11 2026 GMT
Not After : Jun 7 06:00:11 2026 GMT
Subject: CN=e76e77aa6239f9a95c27bebdf21f0489c9ad36ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:35:bd:33:d1:a9:24:d7:b7:d7:18:69:b3:
69:7b:24:50:26:30:8c:c6:44:15:de:3b:3f:de:47:
f0:75:01:dc:a0:e2:8d:04:24:ef:f3:dd:42:74:3a:
4e:bf:48:27:64:d1:06:af:be:cc:f8:90:f2:75:97:
12:1e:75:9f:3f:73:67:7d:71:bd:3d:ad:35:71:38:
43:03:4b:ff:c5:cc:7b:f0:ca:f5:d7:82:17:91:6b:
52:af:4e:f9:1e:d0:68:eb:08:65:ca:a4:66:ab:6c:
1d:8a:f7:f6:79:66:17:47:c4:7f:d8:0d:be:c8:be:
0e:fd:63:6d:c5:c5:62:c3:2c:b1:04:57:1b:6b:99:
61:87:11:1e:8f:d0:31:18:b6:0a:59:64:08:f2:11:
b4:ce:7f:e4:6b:8d:1e:01:91:12:fe:f9:92:30:4f:
f9:a6:a3:4b:a2:81:14:74:6d:1c:63:f2:1e:c0:60:
d7:56:a9:0a:5f:87:53:1e:cc:c6:08:ff:f8:06:5f:
90:0d:33:42:5b:4d:94:ec:fe:e9:1e:93:26:fc:12:
39:f4:ad:71:85:01:65:19:fd:76:a3:88:e5:f3:9f:
4f:2c:59:a5:04:fb:8f:e9:61:a4:a4:ef:45:b6:61:
05:f5:68:ac:d0:53:c4:7f:01:b5:a9:51:29:27:45:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:77:AA:62:39:F9:A9:5C:27:BE:BD:F2:1F:04:89:C9:AD:36:EC
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e6:52:b1:fa:0d:bf:ae:1f:fa:59:e3:5b:f4:f2:8a:e3:bc:
53:2c:87:54:3d:e7:fc:04:49:66:c5:e5:8c:27:37:b0:c7:c4:
1f:3c:e6:9e:4f:5b:a0:35:ae:b6:34:68:dd:3a:66:a8:99:e2:
a7:f4:f1:1c:89:4a:48:7a:97:32:2f:bc:9a:9a:fb:04:dd:bc:
d6:f0:ee:b9:b6:ac:ca:43:24:e3:02:72:ec:77:2c:fc:9a:09:
f5:bd:b2:a4:a4:9c:f1:ab:ce:c1:a2:19:f2:07:83:10:38:f3:
69:22:4f:04:de:7f:0e:33:ca:d4:89:bf:1b:6c:11:96:8f:81:
ea:55:33:af:be:c1:4f:3c:39:62:c6:9c:de:64:1f:a9:aa:e8:
31:54:35:a7:20:ff:3a:7e:95:7b:22:f1:53:8b:79:e0:d6:0a:
38:a8:0d:6a:5b:85:ce:8d:6b:a0:fb:b0:36:1c:9a:6f:f7:9c:
b4:8b:22:d2:97:11:b7:7e:fa:c3:37:65:ee:59:84:6d:3c:d2:
cf:66:0f:99:a9:2b:60:a4:4c:53:e0:d1:12:aa:22:fd:86:c8:
f8:b9:6f:fd:1d:ad:b8:1f:b4:c3:dd:08:82:5d:24:8b:97:0c:
65:76:3a:ca:7d:25:a7:7b:74:49:a3:0d:05:ce:bb:d8:fa:03:
5e:0a:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:57:48 2026 by rpki-client