Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: 2gSNqRyKlRjzMRwk+bR2Zr6O17zcdntupmQrfZrOCPc=
Subject key identifier: ED:F0:CC:E7:0E:36:E4:D7:A7:80:D5:0C:7A:B7:B2:19:FC:86:26:1B
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 019D258349235B018CAA64FE939968C20B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:54 +0000
Manifest this update: Wed 25 Mar 2026 15:00:54 +0000
Manifest next update: Thu 26 Mar 2026 15:00:54 +0000
Files and hashes: 1: HSWeI-pcXEHS_St9O3C8_Rn69wI.roa (hash: gjfAtgRKuT6ywaR0yaoqKznKuEzQl2e1Pp41NKZMoGQ=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: I9do4zObyYJGaqd8NKFdjX0b0vuNWFwZyBHsujPCWms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:49:23:5b:01:8c:aa:64:fe:93:99:68:c2:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Mar 25 15:00:54 2026 GMT
Not After : Mar 26 15:00:54 2026 GMT
Subject: CN=edf0cce70e36e4d7a780d50c7ab7b219fc86261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:80:2f:3f:9c:32:de:af:09:77:aa:4e:24:
02:6f:bd:25:51:a0:7a:68:d0:ff:29:dd:84:ca:6a:
d6:b4:e0:b1:a3:bb:c3:46:66:71:a8:1a:c4:73:98:
3d:35:c7:53:70:0d:12:06:b7:66:b1:87:de:8d:46:
3f:00:13:ca:3a:62:3f:ed:50:98:6b:6e:b1:b5:38:
2f:05:14:49:10:a2:f9:f8:81:d5:c0:23:c1:0c:73:
72:e8:ab:7d:68:27:ae:b3:fe:c9:23:d4:c8:bf:e4:
83:95:83:8c:6f:7c:6e:2a:84:a5:4a:99:e6:bc:db:
da:59:1e:5b:96:39:19:76:3c:7c:d5:db:3a:7e:86:
32:b4:14:55:cf:bd:f2:0b:b9:33:7b:c9:12:af:13:
be:dd:bc:82:ee:e6:43:00:0e:db:cb:c0:42:63:08:
f4:62:54:5d:ec:18:fd:b3:73:c9:2d:10:80:7f:64:
01:bf:af:29:dd:5b:2d:87:0a:a8:c3:88:c5:9a:8f:
9c:86:9d:2c:4d:af:68:f1:48:65:f3:3a:cd:12:d4:
1b:5e:0c:ba:9b:de:39:d5:40:3c:6f:6b:1e:b5:61:
93:84:1e:eb:32:90:ba:98:e2:9f:64:cb:ae:a0:98:
b5:05:5c:0d:87:a0:9b:d6:1e:14:d7:d6:62:84:09:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:CC:E7:0E:36:E4:D7:A7:80:D5:0C:7A:B7:B2:19:FC:86:26:1B
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:84:56:d2:a8:d0:9c:5c:cd:2d:37:ec:89:36:0d:b9:84:e0:
6f:84:36:04:03:0a:3b:63:23:41:25:1c:16:22:f2:35:b5:a8:
0b:8b:d2:bb:c9:b1:d6:af:ea:8a:5b:92:86:7e:a8:9b:2e:1f:
58:1b:e1:f9:be:dd:bd:2b:cd:62:f2:dd:52:26:7a:61:e2:3b:
1e:d2:c2:6f:a0:ed:62:66:6c:59:87:c0:0d:53:03:46:0c:44:
56:46:c6:bb:a1:8a:c9:9d:a8:f3:3d:0d:ab:28:b7:9d:bd:45:
23:b9:3b:48:11:2c:48:c3:5f:2c:78:8e:83:2b:79:af:54:b6:
29:b1:43:bd:e4:d2:2f:3d:65:af:a5:43:b3:a2:39:57:94:11:
0b:54:b8:a4:1e:0a:bf:b4:15:54:25:5a:e1:ae:da:c2:99:4d:
a6:8c:42:f7:c0:c3:ad:d4:d4:80:1b:ca:c9:7c:a8:10:c4:d0:
11:d2:9e:46:1b:e4:8d:d1:7d:ff:e6:d2:51:60:50:94:ab:bb:
bb:8e:df:a7:eb:7c:2e:cf:90:f7:7a:9d:cd:d0:bb:8e:b6:ab:
87:9f:d8:b3:06:08:83:fe:a1:06:de:3a:07:e4:96:0a:b3:db:
b8:2d:5c:97:26:da:42:2d:c2:2f:58:8c:bb:e6:43:ff:04:f0:
3f:1f:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:04 2026 by rpki-client