Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: OqMRdTU0rcpLCIOe4gn+s/noLMqpl3JklRaaYjHLR7g=
Subject key identifier: 1C:85:D4:E3:D2:90:27:CF:04:30:B5:FD:E8:05:FE:E7:CC:60:22:77
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019F9323D497D68A5FEE4D6CD24DF939C377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 08:00:26 +0000
Manifest this update: Fri 24 Jul 2026 08:00:26 +0000
Manifest next update: Sat 25 Jul 2026 08:00:26 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: m/g5vIcLcvhcKYIF7ipkz6oYtcop3e+1JA1mEkEtJqk=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d4:97:d6:8a:5f:ee:4d:6c:d2:4d:f9:39:c3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Jul 24 08:00:26 2026 GMT
Not After : Jul 25 08:00:26 2026 GMT
Subject: CN=1c85d4e3d29027cf0430b5fde805fee7cc602277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:eb:36:e8:e4:cb:70:02:c4:da:7e:87:fa:
64:29:80:88:a1:9c:83:5f:1d:3d:c3:d9:21:81:7a:
48:0d:03:78:f6:02:d0:2b:21:0a:f1:31:3b:0f:d5:
9f:6a:ca:9b:9e:7d:74:c7:e3:74:55:2e:84:ee:2a:
93:ef:1b:2b:3a:ba:02:d8:68:df:f2:f6:08:af:a0:
ce:84:d4:5a:36:c2:d7:c8:28:6c:74:85:91:0e:a8:
75:a8:55:9d:82:54:67:7c:9d:1b:51:9d:7f:95:a2:
30:fb:dc:95:29:48:6b:63:5f:4e:37:e6:27:e4:d3:
3a:b4:59:5f:7b:11:04:89:cc:b7:3b:b1:a4:c5:3a:
2d:33:dd:e7:b8:76:6b:9b:c7:e3:df:6c:68:d4:d4:
35:e5:9c:8c:02:02:83:f4:af:83:f7:de:30:6a:e6:
d1:cf:42:e6:c3:f5:19:36:cb:96:cb:72:87:d0:1c:
4c:55:26:39:6c:d5:b5:da:42:1e:1a:d5:3a:1c:83:
55:d4:1d:2e:1e:68:29:00:1f:cb:d5:6f:6f:dd:82:
70:ef:9d:b5:03:5c:b3:3a:92:a9:1b:21:53:02:b8:
6c:7a:9a:14:54:27:ad:5d:ab:2f:ff:79:c7:1f:24:
b2:3c:42:49:0c:7c:be:a9:44:9c:7b:11:3a:49:0c:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:D4:E3:D2:90:27:CF:04:30:B5:FD:E8:05:FE:E7:CC:60:22:77
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:04:c7:a2:c8:d3:fd:a5:8e:82:05:ab:cb:5b:ba:60:7f:56:
35:3b:9c:13:f2:40:ab:c3:6b:40:75:65:9a:e2:c2:a8:1d:18:
2d:89:5c:98:ce:f7:45:47:0b:b3:8c:a6:74:52:b1:9e:cd:09:
a8:d4:ff:e1:8f:48:46:cd:4f:bd:04:db:13:38:5e:16:4e:10:
1c:19:98:5d:8f:e1:85:88:f9:90:0c:05:14:d4:e7:ba:10:19:
f7:61:5a:2e:ae:73:a4:9f:5f:ff:9b:53:81:de:04:45:4a:b4:
d9:88:c0:8b:cd:51:51:6d:5a:d6:65:03:91:35:b0:18:84:08:
66:78:e5:f7:ff:7e:29:55:f4:54:02:55:48:77:8d:bd:a2:4e:
aa:17:3e:74:ae:73:12:c8:34:51:5c:fb:38:4e:e6:ff:7c:5d:
dd:c9:28:f6:1c:ca:2e:36:50:40:79:7c:24:1e:63:f7:84:fb:
7d:0d:a5:a8:54:94:65:f4:4f:bf:09:e9:6f:ea:3e:9c:e2:20:
e4:94:80:d2:27:dc:ea:d8:f6:67:70:2a:c2:41:12:33:92:4a:
2f:2a:a2:d8:0f:e0:f9:f1:31:2f:1f:8d:18:c5:f0:33:79:30:
ac:3a:60:ca:93:e5:50:52:29:e4:76:55:4b:a0:93:2a:65:42:
65:d8:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:41 2026 by rpki-client