Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
File: 421ZT1_jgr7Czo46Majyjm2XwB4.mft (raw, json)
Hash identifier: WhjAK/1NJgo1min0PO6Swp6slEv08thZTyto8Rue+4E=
Subject key identifier: 57:35:54:F8:07:43:8F:83:8A:6E:DF:AA:FD:C6:9D:03:DC:DD:01:72
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 019F8E34CDF7ECF1B71338A361A62684E512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
Manifest number: 66
Signing time: Thu 23 Jul 2026 09:00:52 +0000
Manifest this update: Thu 23 Jul 2026 09:00:52 +0000
Manifest next update: Fri 24 Jul 2026 09:00:52 +0000
Files and hashes: 1: 421ZT1_jgr7Czo46Majyjm2XwB4.crl (hash: Gqr1suPq+4mMbWodTB3hinQA5YnNrrtyoAWM34eFxac=)
2: 4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (hash: eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=)
3: rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa (hash: gCYbQwWeJazWuKam4wgBrsfYsq8VV5PKDsC6OZTN4xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:cd:f7:ec:f1:b7:13:38:a3:61:a6:26:84:e5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Jul 23 09:00:52 2026 GMT
Not After : Jul 24 09:00:52 2026 GMT
Subject: CN=573554f807438f838a6edfaafdc69d03dcdd0172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:d8:ae:2e:f9:0f:fd:8c:f4:51:bb:23:90:
5c:11:cb:ab:fc:4d:b9:9f:c2:cf:0a:e4:af:6b:f2:
00:df:22:07:eb:f7:66:f7:d8:89:fa:08:f8:0c:2b:
59:67:03:5d:e0:15:04:6d:73:bf:3c:f3:12:ca:d6:
f9:cc:18:91:ba:35:ee:f5:7f:e7:31:18:57:9e:17:
bd:a2:75:b7:6c:9e:90:89:a1:3d:6d:7c:af:e7:e5:
2d:b3:55:0b:32:00:55:20:f8:af:eb:2b:b4:0d:2a:
f1:f8:bf:76:aa:60:95:1a:30:d8:4a:4c:10:66:84:
32:cc:27:49:b7:13:63:57:e7:1e:e5:9d:4b:d7:5f:
de:61:a1:88:31:a8:b9:27:4d:57:d4:c9:7b:e4:bd:
b4:fd:80:92:f4:1c:b2:80:82:ce:f6:5d:09:fd:9c:
41:6c:68:69:4e:16:88:df:c7:b8:a7:76:3a:30:d0:
c5:91:da:27:26:24:14:4b:16:51:00:b5:f7:32:b2:
ae:2f:b1:0b:9a:01:7e:c2:37:eb:f3:07:68:cf:c7:
d5:cc:b1:c9:13:19:21:65:68:94:a8:35:04:07:67:
37:21:3c:2e:91:0d:e3:ff:b3:62:ff:64:7d:43:29:
e6:44:fa:21:18:03:3a:74:fe:12:fd:1b:ce:a5:f2:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:35:54:F8:07:43:8F:83:8A:6E:DF:AA:FD:C6:9D:03:DC:DD:01:72
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:c7:b7:bf:dd:8e:84:7d:d4:e7:1d:f9:e2:80:1c:e6:ac:
47:a2:77:73:76:0c:eb:c7:1d:d3:78:61:0b:8e:c1:9e:db:db:
b5:de:b3:ab:ac:e5:6e:cc:80:c0:a8:20:60:73:e8:a5:3e:1c:
bc:f5:64:41:d5:42:a5:62:db:d8:88:a0:68:59:c3:43:49:02:
71:69:29:c0:e1:ad:49:b5:44:48:19:dc:8a:ee:1c:dd:d7:29:
0b:58:04:5f:ba:d8:ed:e5:1e:fc:64:93:94:90:36:33:62:7f:
4d:2f:53:e8:0b:7b:68:06:f6:f2:cc:9b:d0:e9:7d:16:19:54:
a6:57:86:fb:98:94:ca:fa:f6:a1:97:f2:f5:af:d2:6c:f6:5c:
e7:6b:6f:f7:18:b0:c5:d7:65:7a:99:a6:5b:e6:97:8c:f9:2f:
dd:ed:e7:9d:7a:8b:c3:8a:74:7e:ca:32:5d:0a:2b:24:b8:5c:
08:ff:b4:e3:57:3b:a8:51:94:c3:35:85:a0:e0:ad:6a:e6:e2:
6b:da:90:9b:2e:79:9b:66:17:03:14:8d:e9:88:b6:4c:cf:2b:
82:17:d5:1c:6b:51:0a:a6:a1:de:51:30:46:a0:04:55:57:79:
2f:9a:ae:6d:b1:75:a5:84:5c:53:8a:cd:c1:86:b5:4d:0a:c1:
f2:66:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:40 2026 by rpki-client