
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: KOIwmXGD+sfViqj9PB2RLjcSSq+j4N7CnN4OYvuv3Qw=
Subject key identifier: 08:7E:C7:D1:C6:2D:E6:33:D2:97:65:A5:2E:53:2B:0C:7B:BB:44:50
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019F91A42986191BD40729F927551E0187A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1A18
Signing time: Fri 24 Jul 2026 01:01:22 +0000
Manifest this update: Fri 24 Jul 2026 01:01:22 +0000
Manifest next update: Sat 25 Jul 2026 01:01:22 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: hGiOAejfUuvSzhOrbIQcrVGzyhOkQkKd2H7i7pSYsw0=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:29:86:19:1b:d4:07:29:f9:27:55:1e:01:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jul 24 01:01:22 2026 GMT
Not After : Jul 25 01:01:22 2026 GMT
Subject: CN=087ec7d1c62de633d29765a52e532b0c7bbb4450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:42:23:0d:1e:15:fa:e2:c3:52:33:0b:b5:
14:6e:a3:3f:4c:70:93:31:d3:f1:7c:bc:da:ed:de:
ae:b1:89:64:86:1b:b5:57:a9:ec:10:db:d1:9a:62:
11:e9:ec:1a:71:2e:23:cb:96:68:6d:06:93:aa:8d:
87:8d:12:7a:63:e1:34:88:6e:5f:9b:c6:bd:4b:c6:
e8:7e:6b:2b:bc:03:4a:b6:62:a7:6e:df:da:ef:15:
07:8e:ef:54:4b:eb:49:1d:7a:29:2a:6c:f4:99:60:
78:06:58:f6:a8:28:8d:83:0c:67:57:e2:a0:6a:78:
23:7c:f6:b7:d8:90:25:86:9b:fe:29:79:c4:40:99:
5d:22:dc:f0:c6:f8:4f:a6:c0:23:62:88:7c:5f:31:
96:8b:88:ac:c3:18:96:f9:53:62:ef:9e:62:1b:2d:
9f:9b:64:ea:1c:19:5e:7d:88:11:cc:50:c6:45:a6:
7a:b3:a9:ae:87:e2:91:0c:04:b9:29:4a:3d:fa:74:
2f:ca:e0:cc:58:c1:e8:a9:fe:bf:7a:64:2e:22:69:
14:03:e8:ae:38:30:51:46:92:cb:68:46:80:44:3d:
2e:c4:4c:38:c2:06:f6:aa:bb:83:84:58:a6:e5:e7:
44:34:d6:d3:51:3d:3a:3b:1a:cd:57:27:f7:22:a7:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:C7:D1:C6:2D:E6:33:D2:97:65:A5:2E:53:2B:0C:7B:BB:44:50
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:09:d2:d9:73:e5:58:5c:86:4a:a3:7d:80:56:1e:df:de:59:
8e:6e:3f:cd:0b:d7:0a:06:c6:26:6d:2b:18:be:b0:40:76:c3:
45:56:da:f9:ba:3c:a3:d5:c3:6a:ad:57:dd:67:d3:81:4c:17:
47:7d:4e:0e:05:0c:90:60:20:ae:e8:d1:14:b3:21:cd:5c:37:
15:ca:61:d5:76:87:9c:0c:e1:12:3c:da:0d:d3:06:52:a3:53:
90:fb:c7:96:d3:12:db:4d:20:cc:89:a4:4a:21:55:e9:0e:90:
40:fb:1f:1d:b5:0c:03:d7:c6:f1:77:d6:7f:a0:20:39:85:da:
ae:ed:8f:2e:30:80:8e:01:0f:b5:e6:28:d8:74:b1:1c:f8:54:
58:80:e8:a5:b9:75:2f:87:74:de:67:d9:cd:d6:15:a5:e0:16:
7a:b6:26:88:48:c1:53:96:06:47:5a:9e:7d:27:53:e1:ba:7b:
2b:fc:55:8c:d8:e5:f9:09:31:9f:45:6a:2c:ae:a4:7b:98:67:
18:d8:1c:4a:ce:93:32:4f:a7:f4:bf:c5:62:fe:b4:d6:32:9d:
77:97:c4:07:b3:99:18:d4:12:39:b4:3f:76:45:67:28:87:67:
aa:e1:82:61:59:be:2d:73:d0:64:87:14:09:97:1e:39:9c:81:
37:5e:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:32:23 2026 by rpki-client