Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: LkqKYGRCAMrhn/cNpm7IXxzh0jBRctJsAbndpallbpo=
Subject key identifier: 59:F8:69:31:DE:68:75:D4:2E:3E:A2:68:C8:55:87:C6:1B:A8:11:E2
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019D29299D06CAA1733AAF36C58F2DB285DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 08:01:26 +0000
Manifest this update: Thu 26 Mar 2026 08:01:26 +0000
Manifest next update: Fri 27 Mar 2026 08:01:26 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: GW+s8sJWTpkWHjVD/iTTamc9DK0oAs104Z6bMi2wDUM=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9d:06:ca:a1:73:3a:af:36:c5:8f:2d:b2:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Mar 26 08:01:26 2026 GMT
Not After : Mar 27 08:01:26 2026 GMT
Subject: CN=59f86931de6875d42e3ea268c85587c61ba811e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:26:3c:d0:f3:d2:6f:03:ae:56:ce:42:46:
45:53:05:85:f2:f5:ac:e1:92:66:d1:43:c9:ab:9a:
6b:a7:e2:8c:15:8f:c4:3a:d4:06:33:80:d4:97:ce:
39:03:7a:34:03:84:85:61:ac:9a:c0:4a:ce:de:ef:
23:cd:e7:22:cc:d6:d4:32:be:b6:51:49:7b:ef:35:
91:7b:99:ba:e7:94:71:ac:e3:13:0b:08:df:24:ec:
5c:6c:a3:50:e0:80:18:a3:b0:8f:b7:df:28:41:70:
e0:05:da:86:88:99:f8:f2:70:ae:b7:6a:3a:fb:a5:
97:b4:33:7c:a4:24:33:ad:8e:74:6f:67:12:65:f3:
e4:19:24:43:a6:3e:34:63:55:77:2d:30:53:12:c0:
ff:2c:99:b0:af:87:b1:a9:d3:c2:61:26:a7:a9:ec:
fe:ab:a7:12:14:43:a3:14:73:f1:95:57:35:4d:a6:
49:37:05:f3:83:d1:17:cf:6e:95:f7:39:5c:78:34:
7c:f6:ec:85:bf:d7:2e:fa:82:6b:da:91:6e:ae:64:
70:1d:d2:76:1e:d3:0f:c0:8a:b1:cf:fb:ea:f6:da:
c8:62:09:07:c7:8a:48:04:50:7e:78:17:f0:cc:b2:
14:a2:6a:57:7a:37:67:3a:9a:3c:f8:5b:2c:6f:5d:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F8:69:31:DE:68:75:D4:2E:3E:A2:68:C8:55:87:C6:1B:A8:11:E2
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:97:2f:c8:ab:81:fc:37:61:06:4b:55:c6:93:93:52:87:
58:f4:9b:44:63:44:d6:d0:21:de:95:4d:89:73:68:15:c1:65:
4d:12:cf:3a:e6:a0:60:69:57:4a:fc:c4:d7:a9:bb:fb:e8:a2:
ce:cf:cb:53:45:25:1d:77:80:aa:de:e4:07:fa:42:0c:85:ca:
60:5a:d5:94:a7:12:33:f3:f0:d9:ef:0d:f5:44:64:c0:42:ba:
bf:a3:01:91:66:c0:49:a7:d9:bb:33:8b:7e:2b:45:b2:20:9b:
f6:c1:9c:64:99:1c:58:c3:86:7e:ed:f7:e4:33:dd:68:04:a5:
93:f3:96:60:1e:92:ac:29:35:f3:73:dc:cd:b4:78:6b:15:35:
8b:74:e1:be:17:14:72:32:8b:38:1d:f2:9b:8c:49:6d:20:45:
cd:19:6c:ad:e2:72:d3:71:5b:b9:eb:45:b3:44:26:8f:44:2e:
bb:56:98:7d:21:03:00:26:a7:2a:bc:95:63:ac:89:d2:53:07:
24:0c:cf:8a:01:a6:0c:a5:1e:d6:79:5a:65:74:1b:65:f1:27:
0c:f0:4e:ed:29:88:fd:5e:a7:b1:2e:36:39:07:6c:b1:14:d7:
81:5c:d2:3d:73:30:8a:76:33:a1:9d:41:b9:99:ed:6c:6c:ea:
80:a0:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:28 2026 by rpki-client