Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: 5Y4NnHL8CQN/XwJI64JqIjAj5rULyKTHDP5Z8OdSyE4=
Subject key identifier: 34:BA:02:63:0B:3E:8A:99:9D:58:23:9D:4D:0C:8C:D8:3A:93:92:2F
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019D2771BAEA8429AB50971A30CB739814C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0ED4
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: luD4+SioOtSNfJyynzBi25/KaGOAybcZB1pOCbuwuG4=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ba:ea:84:29:ab:50:97:1a:30:cb:73:98:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=34ba02630b3e8a999d58239d4d0c8cd83a93922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:12:f5:7d:58:f6:02:51:97:3b:59:e0:5e:
b4:69:68:64:1f:b8:cb:94:14:fb:10:2c:03:26:b7:
34:7c:5f:db:ff:c4:76:48:21:fb:90:d3:ed:e1:23:
41:fb:b5:63:8e:69:a1:19:3e:ee:ba:d9:3b:e8:b3:
10:fe:54:2b:1f:a3:55:e7:90:f6:d0:59:21:14:de:
d0:2a:dc:79:e8:45:b5:bd:28:f8:ce:e2:6f:2e:a6:
77:5a:e2:ea:43:67:fa:f9:5e:8e:c5:34:8f:ec:2a:
85:9c:08:99:cc:c9:d7:23:02:a8:73:d8:fd:87:ed:
31:27:19:47:c2:cd:0e:4f:83:69:8b:4f:12:db:4d:
96:b2:a6:16:12:65:fe:66:7d:87:c7:cf:70:f8:e1:
08:91:cb:30:56:3d:f3:e1:81:a8:f2:02:1f:b1:e6:
12:f2:16:98:e7:1a:60:09:9e:b6:ff:e7:66:a9:4c:
b0:dd:3a:38:b9:da:5b:67:0d:d7:10:12:7d:42:87:
e1:59:da:cd:4f:4a:ee:a9:90:01:08:9b:68:95:39:
9b:4c:bf:be:98:e5:2e:d3:96:d6:87:fd:4d:e9:cb:
87:58:44:59:7b:84:97:1c:15:c7:7f:78:b2:5e:ec:
dc:13:01:56:00:2d:39:ff:a9:2b:53:19:72:56:9b:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:02:63:0B:3E:8A:99:9D:58:23:9D:4D:0C:8C:D8:3A:93:92:2F
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:e5:86:ae:da:0f:cd:45:4e:20:e1:ab:75:41:03:30:c5:
5e:b9:5d:53:40:4c:34:34:13:8b:ce:48:08:16:bf:53:74:7a:
a7:eb:48:1b:5b:cf:5c:b0:d6:7d:69:3f:01:53:b0:f3:79:f1:
1a:23:1f:1c:7c:c9:de:00:7e:91:79:0f:d8:75:21:41:d2:b6:
fb:79:22:8a:cf:25:80:a6:4b:7a:c4:30:52:af:f9:00:f9:97:
04:2e:25:ae:43:a9:33:88:3d:96:63:bf:15:60:ba:13:f6:6d:
f5:67:13:ad:27:3f:26:f2:7d:2e:1a:da:ff:b0:08:bb:2f:e3:
d6:28:54:a5:18:20:39:b4:89:50:83:40:28:58:6c:06:29:0c:
d4:52:f9:ad:99:ce:1e:d9:cb:84:bb:57:fa:00:7e:90:6d:79:
9c:40:b0:46:ed:f9:03:64:75:80:e7:f6:97:b4:06:bd:89:a2:
87:06:ba:b1:88:03:80:b8:b8:c8:bf:ac:59:08:fb:a4:08:0b:
d4:c8:d8:1e:cc:a8:76:55:4c:a4:b7:9a:ed:ac:33:4a:fe:81:
4a:a8:59:11:a6:ed:64:72:7e:a5:b5:3a:03:21:0d:10:7c:77:
e1:97:7e:5f:3f:de:84:4e:1b:53:28:d2:5b:fa:f3:d0:b9:a3:
46:36:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:42 2026 by rpki-client