
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: BEV6FAfXhZX2Rxan0gTGITjUzPYUyFs9+xAj9t+N5go=
Subject key identifier: 34:36:33:6E:3D:69:C4:58:E0:82:BD:1A:54:D2:82:28:3D:9D:41:F1
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 019D277286B5AEE4D5A212DA19F54ED6FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 1881
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: b7Rm0I+sZOxdWo9ZxFVtFJOfSC/wUCs0uk2DPF+EDaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:86:b5:ae:e4:d5:a2:12:da:19:f5:4e:d6:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=3436336e3d69c458e082bd1a54d282283d9d41f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:38:96:30:4d:c3:b2:8b:71:e4:ed:4a:96:
d2:92:bf:5e:c9:9b:bc:22:b2:9b:87:77:28:b6:fd:
b3:2d:1d:ad:95:3f:ff:40:7d:29:d0:96:58:fd:b7:
57:5a:af:b5:55:be:60:b8:f0:02:bf:ea:9d:56:f1:
e6:a6:7c:93:d0:0b:8d:04:a8:22:a4:ba:cf:e6:05:
80:c2:68:14:23:55:ea:87:6c:18:0a:18:bf:1f:7b:
15:b8:bb:60:f9:4f:56:f3:a6:20:29:6e:9a:42:5c:
ef:7a:08:4d:1e:99:17:93:55:e2:2a:33:0a:8a:f1:
ce:a7:99:1a:d1:e3:67:d7:df:69:30:f9:11:d4:10:
c1:7c:14:6b:b1:80:0a:56:04:bc:63:34:fd:78:34:
75:bb:83:66:92:09:db:48:39:ac:ff:22:71:90:ae:
c9:dd:55:11:83:b5:d7:54:51:45:ee:a4:40:d2:fd:
a8:8b:d6:b2:c1:0c:c2:af:f5:41:e9:f8:3b:9f:4c:
6d:8e:de:09:45:33:a5:ba:cc:b6:00:b6:88:73:04:
5a:11:f7:8b:76:1f:77:70:c2:0d:24:a7:28:86:12:
cd:c2:cd:aa:6f:6c:bb:42:38:c2:7e:cd:74:4f:fe:
d7:c8:39:53:7a:63:09:bc:96:f4:da:6c:3d:ed:37:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:33:6E:3D:69:C4:58:E0:82:BD:1A:54:D2:82:28:3D:9D:41:F1
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:f4:6e:cd:80:a9:e0:41:97:a2:81:a6:c4:06:e2:c6:02:
e4:22:f1:65:f5:b0:59:e3:24:74:70:2c:be:5e:56:f4:ca:4a:
58:12:bd:12:0f:54:c5:08:28:25:d3:d5:4f:57:c3:04:21:6c:
04:23:a3:67:a3:50:2e:3a:c3:1f:16:ce:81:89:63:63:19:42:
02:25:74:2b:34:a6:ef:9a:36:67:7a:ac:30:92:21:30:9a:b2:
37:85:e2:2d:24:9f:94:f8:ba:15:31:6f:91:09:a4:1d:99:d3:
63:36:f1:bd:28:f5:3a:e5:6c:56:1c:ea:fa:5e:82:af:e8:1a:
17:fe:30:fd:bf:77:12:77:20:7f:c9:8e:97:5b:64:b5:cb:7b:
2d:52:99:b9:2a:40:11:b5:db:c2:be:07:da:f6:72:9d:31:4a:
b1:c9:18:fa:90:7a:e6:49:83:b5:b4:f9:6d:07:62:c1:2b:61:
f0:50:3e:28:67:63:d1:c1:15:88:be:70:d8:99:07:8c:97:57:
90:ea:3a:41:22:31:8b:b0:b6:97:45:f8:e5:83:8f:66:80:6a:
98:f9:1c:30:e3:de:fe:c7:c6:69:e0:53:c5:48:7f:71:6f:41:
43:f8:5a:2a:1f:7b:c0:73:b8:b8:de:71:fd:ac:7b:8c:4c:0f:
50:fa:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:15 2026 by rpki-client