Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: rxJR2IyAgKpe9/4CkXppIAC27Odv0ni4xKyoPjVNzr8=
Subject key identifier: 48:D1:60:86:4D:6E:55:71:F0:1F:F7:ED:FF:BC:39:C7:4C:DB:69:F0
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019F91A3A327400FA95C5B3C4828FBB0385A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 01:00:48 +0000
Manifest this update: Fri 24 Jul 2026 01:00:48 +0000
Manifest next update: Sat 25 Jul 2026 01:00:48 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: pJ3Ay2Lb/dTHjEOJ5hH+otVozF/eNtIyXDiIpWWYD00=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:a3:27:40:0f:a9:5c:5b:3c:48:28:fb:b0:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Jul 24 01:00:48 2026 GMT
Not After : Jul 25 01:00:48 2026 GMT
Subject: CN=48d160864d6e5571f01ff7edffbc39c74cdb69f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:8e:76:d7:18:e3:33:20:3c:fe:d9:eb:4f:
54:c3:5a:19:c4:d9:de:da:56:83:f7:a6:97:94:9d:
4d:11:68:fa:79:54:bb:3a:c2:40:56:72:63:da:c9:
eb:f0:dd:52:60:13:8b:0b:62:df:bb:0f:88:ca:e9:
fc:7e:e3:ad:2f:3e:6a:04:f4:a0:8f:dd:a9:86:f4:
6b:00:0a:2d:3c:e8:48:40:88:86:e3:e0:25:c5:fd:
7a:ae:8a:33:18:4c:d2:a1:48:2f:dc:e6:42:f9:a5:
d3:b7:a6:14:8d:83:cf:ea:95:e6:a4:a9:f1:15:21:
02:49:89:c1:a9:34:53:48:27:6a:d9:68:7f:a8:51:
3a:55:c1:fc:ca:b3:69:3a:78:a3:33:0b:41:f3:26:
aa:8d:94:a0:22:77:5e:a3:5a:03:bc:c0:54:e2:5b:
3a:d4:1d:f8:18:b9:ad:4a:e9:67:5d:3e:75:0e:b9:
37:5f:7e:eb:68:2f:39:5e:8b:4a:22:ea:4f:3c:87:
4b:5c:49:d2:f1:50:71:48:62:69:ce:5f:41:44:b1:
16:61:a0:fd:ee:85:a7:8c:d8:9a:66:e2:20:84:db:
7c:a5:9f:39:8b:52:5e:e0:86:29:f7:62:42:ed:01:
13:d3:c6:d4:93:a7:20:da:aa:23:6c:0a:0d:68:38:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:60:86:4D:6E:55:71:F0:1F:F7:ED:FF:BC:39:C7:4C:DB:69:F0
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:65:d9:35:5a:22:e0:3d:07:6f:0b:47:f5:82:53:61:86:dd:
92:11:48:b5:fd:b0:5d:e1:b8:e3:c4:e6:18:7a:ec:a4:ab:68:
54:1c:d7:cb:eb:97:27:4c:44:75:92:d3:25:cd:7e:b6:1f:29:
c2:c7:dd:53:94:42:c2:c7:7d:e1:7c:e7:92:f7:19:15:eb:c6:
e7:b9:7b:93:78:6b:27:d0:17:e3:97:5d:46:50:3b:25:c7:23:
5a:57:23:12:2c:40:55:ac:36:db:b2:8d:31:6a:60:61:39:f0:
85:5b:c6:f8:ff:76:0e:dc:05:44:11:4b:19:5d:38:be:1d:ed:
c9:0d:2c:c2:3b:2c:f5:31:2a:ee:6d:1a:67:43:c1:08:0a:fd:
80:3f:12:d0:a4:b1:94:bd:66:bc:da:fd:a9:94:a3:c5:6b:fc:
6f:6c:e1:13:87:ec:bb:73:d3:33:40:be:27:48:07:79:44:fd:
be:45:33:51:c0:e6:63:eb:3b:44:aa:77:6e:8f:f4:93:2b:8d:
84:5e:19:61:79:db:44:b6:0d:6b:62:29:eb:92:e6:b8:32:58:
e6:f0:92:ae:5a:5d:26:a8:03:58:36:d8:dd:92:16:29:cd:59:
45:f8:99:6a:21:34:1b:a9:59:21:6c:34:97:42:2f:00:f4:ce:
66:a2:09:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro6MnQA+pXFs8SCj7sDhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw
YTM0YjIwHhcNMjYwNzI0MDEwMDQ4WhcNMjYwNzI1MDEwMDQ4WjAzMTEwLwYDVQQD
Eyg0OGQxNjA4NjRkNmU1NTcxZjAxZmY3ZWRmZmJjMzljNzRjZGI2OWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyruOdtcY4zMgPP7Z609Uw1oZxNne
2laD96aXlJ1NEWj6eVS7OsJAVnJj2snr8N1SYBOLC2Lfuw+Iyun8fuOtLz5qBPSg
j92phvRrAAotPOhIQIiG4+Alxf16roozGEzSoUgv3OZC+aXTt6YUjYPP6pXmpKnx
FSECSYnBqTRTSCdq2Wh/qFE6VcH8yrNpOnijMwtB8yaqjZSgIndeo1oDvMBU4ls6
1B34GLmtSulnXT51Drk3X37raC85XotKIupPPIdLXEnS8VBxSGJpzl9BRLEWYaD9
7oWnjNiaZuIghNt8pZ85i1Je4IYp92JC7QET08bUk6cg2qojbAoNaDiswQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjRYIZNblVx8B/37f+8OcdM22nwMB8GA1UdIwQY
MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt
YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh
LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGXZNVoi
4D0HbwtH9YJTYYbdkhFItf2wXeG448TmGHrspKtoVBzXy+uXJ0xEdZLTJc1+th8p
wsfdU5RCwsd94XznkvcZFevG57l7k3hrJ9AX45ddRlA7JccjWlcjEixAVaw227KN
MWpgYTnwhVvG+P92DtwFRBFLGV04vh3tyQ0swjss9TEq7m0aZ0PBCAr9gD8S0KSx
lL1mvNr9qZSjxWv8b2zhE4fsu3PTM0C+J0gHeUT9vkUzUcDmY+s7RKp3bo/0kyuN
hF4ZYXnbRLYNa2Ip65LmuDJY5vCSrlpdJqgDWDbY3ZIWKc1ZRfiZaiE0G6lZIWw0
l0IvAPTOZqIJ3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:52 2026 by rpki-client