Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: Ze95MP35NO5qbPLKzYiaZRJ7NfsmcRO5h6E8uFFeg3w=
Subject key identifier: 4E:99:F8:E6:9F:90:A2:EB:E2:5E:0C:84:14:20:E1:F6:51:61:F2:50
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019E1ED9B388EA882B4E3D476DBF60090949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 01:00:44 +0000
Manifest this update: Wed 13 May 2026 01:00:44 +0000
Manifest next update: Thu 14 May 2026 01:00:44 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: hzwhSDzw7eQUAI6r5W9jYU0veq8+9DEPq5i0O5WkJAU=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b3:88:ea:88:2b:4e:3d:47:6d:bf:60:09:09:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: May 13 01:00:44 2026 GMT
Not After : May 14 01:00:44 2026 GMT
Subject: CN=4e99f8e69f90a2ebe25e0c841420e1f65161f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:25:d9:61:aa:f9:f3:b3:94:56:08:0c:b6:
c2:57:e0:53:83:ab:ef:e8:98:79:29:42:2b:61:22:
bc:2b:8b:bf:d1:d0:53:a5:8d:0b:fc:4b:83:5a:92:
f0:6b:03:18:b2:4f:1d:30:67:95:b7:5b:c0:62:3d:
bf:74:27:a0:ba:cc:af:11:cd:df:65:9c:83:b6:8f:
e0:a0:ab:c4:fd:bc:df:0a:c4:8b:b5:9c:e1:46:8d:
d8:03:4d:f7:63:cd:6c:83:16:95:e1:27:8b:82:8f:
24:7e:61:1e:5b:10:07:83:a1:a4:a2:c1:4c:5b:f9:
5f:19:28:a9:04:ec:23:89:34:31:e5:d7:28:5b:33:
bb:4b:66:84:25:3a:cd:a2:ca:36:17:50:42:f3:e5:
e7:c9:b5:c5:97:89:1b:26:85:97:cb:f1:c5:01:b3:
36:29:1f:b3:f0:91:57:ec:cb:09:2f:6e:cf:9a:c4:
b7:60:87:00:4e:ed:88:71:23:62:49:85:d4:2c:86:
a0:d9:a8:d7:02:66:ab:3a:e5:37:4d:b6:f6:e6:46:
29:d6:d0:4c:8d:fa:26:d5:ae:23:07:9a:83:27:01:
b3:60:3e:ee:ba:5c:ff:52:c0:8c:8d:d8:cb:51:38:
3a:1c:43:56:b6:10:00:91:59:ff:ad:60:10:76:24:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:F8:E6:9F:90:A2:EB:E2:5E:0C:84:14:20:E1:F6:51:61:F2:50
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f8:26:2e:7e:95:13:d0:3c:20:09:bf:05:22:7b:fc:a6:ee:
6f:5f:b5:89:ee:53:6e:96:f8:4d:2b:bb:9f:76:9b:f2:75:18:
c6:41:1e:78:56:d5:91:ac:9e:ff:00:61:41:b8:11:04:c4:4d:
d4:83:95:5a:f2:55:8c:43:45:f1:62:8f:11:cf:6f:49:cd:70:
86:ed:5d:30:76:c5:7a:e1:1e:60:9c:cf:41:1b:6f:23:a7:25:
50:ad:de:83:0d:98:a2:37:a4:3d:73:c2:86:a5:12:8b:9a:ed:
a6:3e:81:3e:28:f4:21:57:26:a2:7d:d8:f9:67:6c:89:06:3d:
15:b9:e4:fe:0b:97:50:64:82:74:4b:42:2b:59:15:0d:de:b5:
fb:e5:50:88:7f:19:5d:a4:3f:da:ce:c5:76:89:b5:ed:95:48:
36:2a:0e:1a:04:9d:62:f1:44:e4:2e:ce:51:8a:b2:86:3b:5a:
a4:15:5b:e6:34:c5:58:fd:3b:91:8a:a9:8a:97:81:ce:5c:62:
d0:5f:b2:bc:98:91:a5:58:3d:68:2f:66:11:ce:4c:c9:89:41:
c3:11:70:4a:8f:83:65:cc:4e:8c:ff:9b:ae:3a:ea:c8:a8:2e:
13:c6:03:3e:9d:04:a5:3c:fb:36:8c:32:8d:4d:27:5a:8e:06:
15:c1:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:58 2026 by rpki-client