Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: OqyVuFwdNmBB9WC+SiTPvUAXRZGhYudOYoN06FHVuog=
Subject key identifier: 5F:21:1D:04:3D:56:C6:E9:23:A3:CB:DA:25:4C:F6:64:A6:CA:33:34
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019F91A4485E9B1F939366661CD82AFA08E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 01:01:30 +0000
Manifest this update: Fri 24 Jul 2026 01:01:30 +0000
Manifest next update: Sat 25 Jul 2026 01:01:30 +0000
Files and hashes: 1: 60T19wa2SlM3ZiPayRZ2n1NrApw.roa (hash: aMzkAP/cDxiHQ9vf70ws51PtkVu4/Z7Zz2jP+ZQUqas=)
2: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: KsSx7HAIG8UiPo_9ox9BjV2Oltc.roa (hash: pCu9vg3wAa4MKzkAnOhHwcvZiyujnFlJ5yjYXEI6nsA=)
6: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
7: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
8: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
9: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: gaxe8SZYdVM1aicWa0uYmjzJvDYlLUJwr5r1aRlbzh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:48:5e:9b:1f:93:93:66:66:1c:d8:2a:fa:08:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jul 24 01:01:30 2026 GMT
Not After : Jul 25 01:01:30 2026 GMT
Subject: CN=5f211d043d56c6e923a3cbda254cf664a6ca3334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:32:00:5b:7b:05:50:3a:79:27:53:65:d5:57:
55:74:62:76:fb:94:ce:92:fb:da:f2:08:45:a5:a8:
11:8d:6c:6c:65:fa:4b:70:8e:eb:47:08:fa:75:4c:
f9:d1:15:8c:0b:e9:dc:6c:77:64:44:66:17:5f:97:
54:01:f9:05:a1:0b:fc:e2:f7:3f:f3:97:a9:75:c2:
1f:32:79:37:6e:8c:05:af:ab:c1:0d:67:2b:7c:7b:
55:a6:18:12:1f:9f:88:7f:9e:f1:d6:c4:fb:64:2c:
54:5f:db:57:0f:63:7b:71:b6:48:16:e2:30:e4:96:
dc:be:cd:b9:55:f8:c1:1f:a2:5d:ec:04:f0:19:41:
78:10:92:0b:a6:cb:6e:63:32:dd:11:7d:5f:7a:de:
1b:e1:77:1e:8c:e2:63:ca:ce:f0:cd:8c:7e:2c:11:
77:99:1f:e4:6f:a7:11:da:3f:47:18:71:13:63:c6:
3d:61:a0:17:c4:36:70:12:69:74:e4:a1:12:bb:d4:
56:69:ef:92:66:45:4f:0d:26:dc:75:df:d7:ad:36:
11:1b:bf:42:4f:6b:2f:29:ea:d3:0b:9e:f5:e6:ae:
eb:31:bb:c1:dc:44:bd:05:0f:59:1e:90:96:dd:3d:
ac:70:89:50:15:c6:84:c5:b8:0e:74:a8:29:7c:f7:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:1D:04:3D:56:C6:E9:23:A3:CB:DA:25:4C:F6:64:A6:CA:33:34
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a1:da:5d:49:35:cf:5a:e1:41:ae:16:e6:b5:05:61:d3:e0:
8a:84:1f:9e:d2:5c:71:f2:12:e9:1b:99:f7:1e:c2:a3:af:e8:
19:ac:bf:e7:e0:76:be:4d:00:a0:f0:48:44:55:87:80:6d:86:
25:ad:29:32:53:52:db:d7:ac:ff:eb:54:02:0e:63:d0:e7:fa:
45:49:ea:f1:c7:22:c5:e0:45:d9:2a:e5:dd:1b:c6:72:34:c3:
9c:22:39:62:d3:f1:be:17:9a:b6:bd:30:5b:96:ad:44:9b:38:
87:d7:35:34:42:c1:9c:ac:ba:36:e7:12:8d:84:7c:88:32:76:
40:20:62:02:54:f2:b6:da:19:58:61:f3:ea:52:55:8d:b7:9e:
b0:aa:a9:0c:0d:e2:f1:07:5f:32:3c:f5:f1:96:18:f0:b4:0b:
3f:15:ab:31:ac:cb:f3:2d:63:59:60:79:4d:5f:74:42:0e:c0:
eb:03:46:02:fe:15:2b:53:ab:43:e3:38:59:65:53:b9:12:13:
b8:56:c2:f2:dc:96:b3:48:d9:81:cd:c3:44:ae:2a:b4:0d:bb:
de:f0:17:56:24:fb:c5:1d:70:98:29:3d:14:ce:cd:dc:f6:68:
d9:3a:d6:af:69:c5:37:e5:4c:5b:69:37:9a:b0:da:6a:b2:87:
99:1a:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:58 2026 by rpki-client