Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: BKYmxxselbK5d4aBcblOwV9+Gsru4DKAMgdNrNnA6Cc=
Subject key identifier: D4:23:AB:1A:EA:6F:3A:E7:C4:54:84:E7:0F:51:66:53:A6:A9:1A:99
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019F916DCBE6B01F7057505D38E9249B20CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 1014
Signing time: Fri 24 Jul 2026 00:01:59 +0000
Manifest this update: Fri 24 Jul 2026 00:01:59 +0000
Manifest next update: Sat 25 Jul 2026 00:01:59 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: LdO2Dh/O5fLiL7/lOg10kDHsCrQ6lDzX0N05Fjb7OTE=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:cb:e6:b0:1f:70:57:50:5d:38:e9:24:9b:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jul 24 00:01:59 2026 GMT
Not After : Jul 25 00:01:59 2026 GMT
Subject: CN=d423ab1aea6f3ae7c45484e70f516653a6a91a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:e4:c4:a6:a7:be:73:bf:1f:6b:90:5a:56:
51:7c:d8:b9:fa:ac:bb:4d:1b:20:f4:60:60:9a:a5:
33:3d:c8:00:74:0e:c1:07:c5:36:3f:62:d0:c8:57:
32:bb:91:ea:10:87:c4:59:9b:15:f2:59:9e:c5:fe:
68:b0:5d:4f:52:e5:ba:69:20:d4:bd:2d:03:af:b5:
12:a8:a7:d1:68:d2:57:7d:6c:44:70:d8:a9:a8:d7:
74:eb:31:79:38:44:96:fd:28:57:f9:48:1b:03:ad:
40:e4:f0:95:77:3e:9c:09:b8:5a:89:18:52:46:b7:
ac:35:38:96:48:7f:37:bb:5d:20:c4:ec:6d:4d:2e:
62:18:1e:8d:d3:1b:7c:19:65:5a:b7:30:36:54:27:
d0:39:db:8b:63:f2:1e:19:5b:68:77:8a:bc:a0:da:
df:88:02:a8:3a:e2:77:68:1d:56:80:17:04:a6:38:
1f:d2:d8:77:cf:5a:a7:2b:92:f7:52:37:2b:64:0c:
b2:67:9c:31:96:c7:8e:a4:78:1e:77:02:61:40:cd:
9a:da:0c:54:f7:80:1e:85:d6:8a:f5:ed:19:fa:44:
0e:ce:f1:31:67:3c:e5:22:3d:ef:f6:e1:57:0e:c0:
c6:41:0c:92:83:cd:d8:fe:95:3d:3d:b1:da:0a:8e:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:23:AB:1A:EA:6F:3A:E7:C4:54:84:E7:0F:51:66:53:A6:A9:1A:99
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c2:1d:d3:e8:23:f1:f3:72:54:84:93:5e:b4:2e:28:0c:15:
a2:f6:d4:97:ff:ae:42:24:fb:5d:5a:1f:73:b5:2c:89:c3:23:
4d:8f:55:4b:83:48:f1:c5:ca:66:07:8d:20:9e:5c:0d:60:7a:
76:d5:c7:7b:8b:e1:7f:81:66:ff:7d:74:fe:2f:f2:dd:9d:84:
8a:0f:3a:38:13:6e:d0:4d:4d:ac:94:9e:ec:38:24:e2:2c:ed:
96:f7:39:01:74:e1:cb:48:80:2a:fa:48:d7:8f:0c:52:8a:56:
e7:b7:a9:53:64:56:4d:cd:77:89:d0:45:c5:1b:74:34:ba:24:
9a:f4:23:da:94:ba:ea:da:75:34:b0:25:90:26:f6:b1:d5:83:
d0:40:7e:37:42:8d:ee:86:2d:aa:42:49:e8:c9:20:5b:29:0d:
ed:49:a3:31:03:67:02:9c:69:db:4e:aa:6e:56:33:30:7d:42:
79:23:4c:65:10:25:ea:79:be:42:ab:90:c1:75:29:6d:91:af:
e4:c6:e1:f3:6c:91:61:6b:db:52:f3:98:48:bd:bc:88:ff:1e:
5e:8d:b1:ab:b7:0d:3b:10:7c:65:1e:fd:27:a7:c9:1a:36:33:
3f:ab:96:09:9a:f7:61:b0:e4:52:0f:96:19:92:40:bb:a2:30:
83:5f:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:38 2026 by rpki-client