Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: lHTgLNAINZA7cSwOfAOGdKjBuOz+XxdHNP+sp4Vha2Q=
Subject key identifier: 2E:10:D6:D1:04:32:82:23:EF:32:80:FE:D9:D8:03:46:DE:DF:79:60
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019CCA1A460B5AF27A93FD17BA66C7E0CE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1859
Signing time: Sat 07 Mar 2026 21:00:45 +0000
Manifest this update: Sat 07 Mar 2026 21:00:45 +0000
Manifest next update: Sun 08 Mar 2026 21:00:45 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: 2lSVr8hJBro8cYcMosiU2xKO/uuSkKsOw6q55LVvsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:1a:46:0b:5a:f2:7a:93:fd:17:ba:66:c7:e0:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Mar 7 21:00:45 2026 GMT
Not After : Mar 8 21:00:45 2026 GMT
Subject: CN=2e10d6d104328223ef3280fed9d80346dedf7960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:80:af:3a:59:49:6a:6b:81:8e:7b:d0:0d:
33:78:3d:bc:26:55:48:7f:5a:5a:dc:a1:43:52:59:
76:71:12:fb:77:42:a6:69:7f:4b:5d:4d:a1:c8:3e:
a5:aa:4c:e1:db:e3:d5:e0:32:08:75:35:86:2f:b3:
44:a4:5b:8e:a9:b7:23:a9:a6:b4:e4:45:fd:b5:a6:
ae:9b:43:96:ca:91:a4:95:53:5f:5b:43:93:0f:81:
65:ba:fa:4a:4a:5e:e4:61:3a:bc:81:e1:0a:94:63:
27:9c:b5:94:f6:0c:1b:5a:b4:71:06:00:dc:63:17:
f0:6b:ec:b5:fd:75:e4:ee:a7:0a:dd:53:8b:29:8e:
35:1e:d1:90:46:11:ed:6e:56:d1:53:75:b4:5d:71:
53:1b:d8:c8:5a:0e:18:8b:70:67:0e:2f:76:b7:fb:
ce:7e:f8:fa:ed:df:82:1f:80:58:cf:78:cc:d7:6a:
aa:7e:21:21:a7:4e:b6:c5:26:eb:e5:bd:aa:68:93:
77:6d:02:e5:7f:be:79:41:b8:0f:69:b5:d7:36:b0:
98:b5:98:69:65:2e:5a:e1:a2:f0:e6:30:52:fd:f2:
e1:0c:56:ed:8d:22:ce:ea:a5:09:4e:27:7d:61:df:
22:50:41:6b:93:56:39:58:d0:6f:1a:e2:60:59:d8:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:D6:D1:04:32:82:23:EF:32:80:FE:D9:D8:03:46:DE:DF:79:60
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:17:83:9a:4b:49:1d:59:6f:1c:61:6f:40:39:17:8f:11:e7:
c2:75:8c:d8:20:58:ef:20:9f:62:b2:a1:30:48:26:cd:99:7d:
c8:7f:c9:ca:5b:e6:5f:e2:a2:85:72:72:b4:9c:3c:63:b4:82:
47:ce:6a:d7:d4:f7:31:47:68:a7:03:e5:c8:df:27:7b:ea:22:
86:3f:ab:8e:17:95:9d:6b:67:cc:8c:fd:75:32:09:e5:e8:f6:
bf:95:c9:ad:d8:5d:ea:7d:d6:e7:d2:87:7f:9f:4e:e5:3c:8e:
5f:bd:82:94:d5:bf:62:c6:5b:58:29:0d:c2:12:25:3b:24:cc:
e5:c8:08:77:02:12:09:65:d4:9a:69:2e:e0:5f:fb:10:b6:28:
dc:c4:bf:a4:b5:cb:77:0b:83:d1:81:0b:20:37:50:f3:95:3c:
c9:dc:8a:62:83:d5:97:89:81:ba:e0:18:49:cd:96:d0:d4:fe:
50:ac:5b:ae:51:55:a5:b3:df:9a:a7:7c:18:81:46:1c:a1:e6:
1b:b7:11:a9:24:dd:fd:b8:c1:99:17:d7:f0:01:97:b3:af:c5:
fd:4b:89:a4:08:1d:f3:61:36:ac:fe:6b:3e:00:e4:3d:ac:6b:
78:73:54:aa:89:14:fb:c1:dc:e0:8a:50:8f:98:8b:18:42:b5:
7e:ad:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:04:18 2026 by rpki-client