Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: afa05GZ+AnbcC9jmnJYH3Nwva2zpg7DIHbqsQOE9bmM=
Subject key identifier: EA:D7:9D:B6:EC:EC:D3:29:B5:18:1A:8B:0A:3C:0E:D4:7D:7F:7E:0E
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019D2996DEA8FC486937BD73388B3DF266E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 18D9
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: MxH/devihMhBg32G8GWcV+2VPVx5pwGA7XKE2zb/7J8=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:de:a8:fc:48:69:37:bd:73:38:8b:3d:f2:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=ead79db6ececd329b5181a8b0a3c0ed47d7f7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:34:09:53:a6:e2:38:c1:1d:5f:80:bd:b6:
a6:c1:21:e6:a7:26:21:02:18:bf:c5:e2:24:dc:72:
95:1e:94:23:c4:24:3f:36:ce:a8:0d:3d:2b:03:d5:
d8:44:f6:f8:34:d6:1b:cb:66:24:77:9c:a6:ab:be:
63:ff:f2:02:de:2a:c7:99:df:a3:8e:59:34:bc:77:
aa:a7:20:08:09:3a:34:b9:5f:49:2c:67:10:c6:0c:
69:aa:87:66:0c:ff:cd:66:b6:36:d5:a3:eb:78:b3:
9a:01:2a:a3:01:cb:cf:02:92:bd:f2:e2:e6:00:da:
1a:13:9f:75:c8:87:79:1a:f6:c3:09:ab:2b:44:17:
77:66:0d:4e:cc:8c:47:77:08:ba:a3:38:da:b2:2b:
5c:bb:b4:5a:2a:2d:20:b6:7b:de:b4:63:d7:74:77:
6c:78:96:27:8e:74:28:1b:34:03:5b:f5:72:e2:4f:
4c:2c:7c:3f:d6:84:2f:87:5b:c2:c5:1b:19:b5:f5:
cf:b2:35:ec:e1:b4:f2:71:6e:b0:c4:f8:18:2c:2f:
c6:c1:cf:65:84:7b:c5:21:74:16:34:50:b0:31:4b:
6e:d6:dc:37:32:3b:2b:98:17:8e:06:c2:fa:51:62:
e8:62:19:e5:1d:9f:9b:e6:ef:97:98:45:65:a4:b9:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D7:9D:B6:EC:EC:D3:29:B5:18:1A:8B:0A:3C:0E:D4:7D:7F:7E:0E
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a8:de:6a:ac:a4:35:de:4d:be:72:c3:a5:06:be:7e:37:4f:
4d:cd:77:e3:a0:f5:ea:5b:83:d3:cc:a3:3c:76:c6:bf:14:e1:
d0:fe:84:92:fd:4f:2a:7d:98:5c:e3:23:42:73:cc:f5:b9:36:
5a:20:22:c1:3e:d1:ba:93:cf:9d:47:cb:59:bf:f2:dd:b2:db:
c1:c4:43:19:f6:44:53:f6:42:f7:92:a2:74:74:cc:4d:f2:cc:
04:e3:d3:1f:fb:3d:13:f6:7a:1d:87:e3:3b:4f:13:3d:03:3d:
d5:3e:15:37:26:44:c4:3a:d9:19:45:de:51:dd:7d:19:60:1c:
53:9d:57:01:55:b8:78:85:a3:68:ee:a6:dc:2d:bc:59:fe:e9:
bd:01:cb:d1:1e:9a:b5:b4:d7:09:11:3d:4a:26:b8:d7:f0:41:
45:7b:53:8d:90:f6:58:ef:99:e2:73:e7:19:04:2f:f7:59:c4:
48:9a:e7:2b:fb:64:e2:23:47:11:3e:a8:a3:14:72:54:f7:7e:
03:f2:b5:be:d5:12:3f:e4:ea:bf:b4:2e:0f:81:36:56:6e:69:
1c:8b:87:7a:f6:7a:9b:a5:16:28:9f:9d:0b:48:73:04:4d:af:
f7:c0:73:af:6f:07:a9:a0:62:ad:ff:b0:a5:28:fc:aa:f6:b7:
a3:eb:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:18 2026 by rpki-client