Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
File: ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft (raw, json)
Hash identifier: xLzZuDOr9F514EYIrLMnG/EgrhE7Zl4Z95fcFSTZJZM=
Subject key identifier: 9E:45:D1:35:13:40:A4:7E:BF:DF:E0:93:0F:F2:D7:BA:8B:18:99:06
Authority key identifier: 66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
Certificate issuer: /CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Certificate serial: 019F916D5AF11889562F51B506637BD78D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:30 +0000
Manifest this update: Fri 24 Jul 2026 00:01:30 +0000
Manifest next update: Sat 25 Jul 2026 00:01:30 +0000
Files and hashes: 1: 5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa (hash: QUgenxmjnt6hLRphe+QYqG3ci12uKtkz5r9TvSluXps=)
2: ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl (hash: 45JCGLMCwzjlLxgsunEV98pGsN37hbCk/zr9h63yoJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:5a:f1:18:89:56:2f:51:b5:06:63:7b:d7:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Validity
Not Before: Jul 24 00:01:30 2026 GMT
Not After : Jul 25 00:01:30 2026 GMT
Subject: CN=9e45d1351340a47ebfdfe0930ff2d7ba8b189906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:04:99:65:cb:22:ff:c1:49:90:d7:49:a1:
6d:67:e0:e5:7c:e5:3a:05:0d:ec:75:1a:64:af:a5:
fe:58:b8:f3:7e:c8:a7:d1:2d:a5:84:e5:28:1b:7e:
2f:46:07:eb:31:a6:9f:d7:24:cf:f5:91:49:a4:2e:
33:3e:eb:3b:59:5a:54:bf:17:64:09:e9:1c:d6:4b:
e1:54:89:ce:49:52:b0:18:d8:99:a6:96:21:bb:17:
7a:b9:26:12:9f:b4:4c:9f:ad:e6:0d:9b:20:3b:70:
55:24:3e:72:92:7c:67:5e:16:d2:ea:9a:d9:45:80:
7c:e1:f2:2c:5b:5b:96:ff:59:f5:86:cf:98:18:c2:
4e:6d:3b:60:b7:13:bf:c6:b7:3a:9d:05:b0:b8:7e:
19:4f:4a:cf:bd:46:fd:84:af:0e:80:39:cb:55:db:
61:ff:c6:4a:4f:2e:63:ee:66:60:be:e6:2b:92:99:
b0:a4:45:07:d8:0b:b8:35:27:95:57:97:36:57:9f:
5f:e9:79:5e:50:26:e2:71:e2:5f:8e:23:a4:55:c2:
70:c8:b2:ae:d8:aa:f7:d3:0d:90:4c:b0:8b:c4:61:
25:ca:e3:7a:2f:72:dc:48:c8:71:94:6e:bc:87:a5:
f6:88:bd:97:12:b4:86:e8:fc:36:57:bc:a1:96:91:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:45:D1:35:13:40:A4:7E:BF:DF:E0:93:0F:F2:D7:BA:8B:18:99:06
X509v3 Authority Key Identifier:
keyid:66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:30:36:08:ae:18:d5:92:b7:89:7a:33:7f:cb:a8:61:22:
49:db:7b:a6:63:6c:f4:33:e7:3f:74:62:39:64:f5:e9:5c:7a:
25:ab:f4:fd:0a:72:3d:3f:35:ac:5b:78:06:b7:34:ef:11:53:
c5:35:7a:c7:06:e6:48:54:e0:30:c9:12:4d:b9:c8:be:b7:f7:
1d:84:72:b6:9b:6f:6b:86:0f:b7:bc:32:e4:3d:bc:a1:c5:92:
f2:fd:47:97:cf:0b:cc:5b:12:af:03:30:6a:ce:10:ad:d3:d9:
62:7b:76:1f:59:aa:c0:b5:5a:84:4f:af:04:bc:55:55:4e:cb:
7d:be:6e:c4:18:4b:de:32:dc:c3:8e:f0:d5:9d:fa:fb:67:ee:
75:78:17:f3:36:eb:8b:f7:c9:40:1c:6e:ea:d8:fc:63:94:b6:
69:8a:e0:cd:6a:9b:c5:95:55:f7:2a:04:7d:61:f8:4b:9d:42:
46:d2:5d:1d:3b:c8:fa:4f:de:81:6b:42:0f:66:13:71:a3:1f:
bb:e6:b4:59:63:11:c5:b0:d4:dc:8b:8b:cb:a9:cd:0a:20:ee:
8b:14:f7:2f:f7:10:ba:ea:7c:f8:ca:13:7b:14:56:31:68:01:
69:e8:9a:e2:e2:44:9c:53:81:8c:3b:d8:fd:2a:28:3a:f9:fa:
a5:50:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:43 2026 by rpki-client