Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: sKdSzFVYW73M/2OR71XKnKZQlVuB+p+3NlxKcXSu4DU=
Subject key identifier: CD:0D:9D:6B:1E:10:2E:85:A9:95:51:4C:B7:D5:5C:3C:B0:FE:9A:05
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019D2AE12D7EEFCBB6E98B3F44838A259DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 16:01:33 +0000
Manifest this update: Thu 26 Mar 2026 16:01:33 +0000
Manifest next update: Fri 27 Mar 2026 16:01:33 +0000
Files and hashes: 1: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
2: Ble-2DKUX-bI_pCO2COt4CKXa8c.roa (hash: CZIHpvsUMQoZP0t5OmkQjhg6lPLENkoG8ZqKq6OJf9Q=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: fuGIDyMGLh3JWbNluDWVpurnXjoNSP7jGRpLVkvolww=)
9: Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa (hash: bZNszqhnT3nG89SByGHQ2OOopVxYZGpnqUauM45GA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:2d:7e:ef:cb:b6:e9:8b:3f:44:83:8a:25:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Mar 26 16:01:33 2026 GMT
Not After : Mar 27 16:01:33 2026 GMT
Subject: CN=cd0d9d6b1e102e85a995514cb7d55c3cb0fe9a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:70:0b:70:3a:a6:ab:ab:27:a9:b9:fd:13:
ec:cf:8d:60:25:6a:94:1b:21:e8:99:c0:de:5c:a7:
00:49:f9:81:a9:2a:dd:a4:d5:41:5d:3f:1e:0b:1d:
0d:ce:69:36:1c:15:07:53:f2:1d:d9:b9:e2:3a:5d:
09:70:a4:97:be:46:64:f5:de:22:b6:60:fa:97:fd:
a5:f6:28:71:79:4c:5e:05:9c:6a:31:0b:c5:49:d6:
df:43:f4:c5:7a:85:86:1c:17:e0:f5:83:56:bf:80:
05:c2:07:36:5c:2d:c2:55:ec:aa:c5:c6:10:0f:54:
e6:c6:fc:d7:a6:fc:c8:75:8f:55:f4:70:34:6f:a8:
84:4a:fe:2c:4e:0e:f2:d9:3e:38:b6:01:a3:55:e5:
f2:31:af:5b:47:3a:94:05:0c:9d:b0:0b:8d:d8:77:
23:ec:83:41:7d:ef:fa:09:44:ed:ec:d8:b1:25:23:
7d:80:d8:af:23:4e:ed:a8:10:13:12:63:05:43:97:
c0:f5:7b:55:f8:13:14:30:02:8d:bc:6c:42:79:e4:
96:bb:64:37:c3:e3:82:15:44:9b:09:68:3f:e5:98:
7a:97:79:4c:ef:21:ac:84:b7:06:5a:0f:e1:40:30:
fd:3f:07:9f:ae:8f:51:68:79:56:21:3e:4d:dc:60:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:9D:6B:1E:10:2E:85:A9:95:51:4C:B7:D5:5C:3C:B0:FE:9A:05
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c1:a7:d8:b8:9f:91:6f:b7:06:19:48:ff:bf:6f:30:04:82:
fc:2d:10:c5:a4:92:25:46:0c:f9:41:ad:19:af:29:00:60:71:
a3:f1:41:2e:48:17:c5:04:64:0f:fc:80:8c:24:4e:92:91:b7:
e8:d5:4c:76:43:a6:49:28:b0:45:ff:6e:a1:1b:98:58:57:e8:
14:4c:39:fa:58:b2:07:90:17:b7:51:16:48:56:e9:7b:e6:8f:
b1:27:31:81:51:05:fc:28:89:b9:cf:4d:11:6b:29:50:cd:57:
11:07:e8:07:15:ee:c5:3e:20:d5:e4:7c:9e:4b:29:c5:30:15:
d8:91:ae:0b:b6:c4:59:c8:66:41:82:1b:9b:ed:0f:38:5f:b1:
59:3f:ba:1b:f5:2b:c4:60:ee:ea:9e:cb:94:2b:7f:92:27:ff:
37:ac:e4:27:27:72:6e:fc:d0:73:d6:32:4f:c2:5b:1a:8b:e9:
fa:35:bd:b4:b5:c6:bc:a0:6e:dd:2b:4b:f7:58:ba:6a:65:2d:
a3:da:27:f9:bc:04:fa:ec:83:eb:b4:5c:95:30:ef:c6:3e:6b:
86:bd:ea:71:2c:19:b7:62:40:d9:73:0e:fb:61:47:3f:ee:0e:
5f:10:9c:3a:0b:63:0c:54:6c:52:0d:bd:7e:84:3c:c5:cd:76:
18:c5:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:11 2026 by rpki-client