Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: A1/rCUDC7VKURIOedsWskBx/M8yRshD5FGKx1BVPeF0=
Subject key identifier: 7F:BA:B9:50:7B:31:D1:DD:29:9B:9D:7B:2B:87:32:2C:90:27:E6:1D
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019F92B6749C0D1F2788E11281BEC127E092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 06:00:58 +0000
Manifest this update: Fri 24 Jul 2026 06:00:58 +0000
Manifest next update: Sat 25 Jul 2026 06:00:58 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: G1wjbOQZlhFhHDq07/CxK0BzvH6ug+aYKfddw47LhAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:74:9c:0d:1f:27:88:e1:12:81:be:c1:27:e0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jul 24 06:00:58 2026 GMT
Not After : Jul 25 06:00:58 2026 GMT
Subject: CN=7fbab9507b31d1dd299b9d7b2b87322c9027e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:ca:b7:b0:54:4b:b0:40:13:87:6e:88:17:
d0:15:e6:51:90:88:1b:a4:68:0c:ed:f2:52:ed:f9:
34:f7:96:0f:4a:38:6a:73:68:91:c0:70:83:de:65:
d3:6f:90:e2:7c:54:be:69:c0:26:5d:3a:5d:fe:a2:
22:c2:b3:09:6d:d5:23:4c:87:47:df:21:3a:41:3d:
1c:41:42:a5:26:70:c6:d9:5b:bd:65:0a:86:ac:35:
e5:8d:ca:98:48:fc:e2:f1:29:6b:9a:72:8f:74:9f:
27:ce:7a:f8:e3:16:76:d5:9b:95:f7:38:69:1a:9a:
b0:a1:6a:23:59:dd:d3:8c:27:6a:e1:be:0f:74:83:
ac:1c:6d:37:1a:a7:ef:e7:b2:46:6f:12:df:eb:80:
fa:ba:cf:38:d2:30:93:46:78:68:18:82:7a:de:5d:
d7:a2:3f:98:a2:bd:57:7c:44:b1:37:df:66:d3:22:
80:62:67:3d:c1:a4:a6:3f:a0:30:7f:5b:82:26:61:
e4:c5:7d:67:a5:b0:fe:ef:94:c2:ce:17:0e:e3:55:
47:94:24:60:62:aa:e6:4a:e8:23:2e:a3:82:96:fc:
ab:7b:9e:99:5d:47:34:07:c5:fa:e1:22:c5:2e:8f:
8a:e1:7f:0d:df:4f:e1:c9:6e:c4:11:bb:cc:1c:fa:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:B9:50:7B:31:D1:DD:29:9B:9D:7B:2B:87:32:2C:90:27:E6:1D
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:19:9e:69:56:3c:9f:ba:ff:a1:fa:14:6f:07:db:c6:23:79:
67:0c:4c:b1:ab:0e:43:33:83:34:bc:29:88:87:3b:4b:87:1a:
f4:51:67:b7:a8:76:ad:75:ca:f9:73:c9:2b:16:b6:17:75:26:
f8:55:fe:42:5a:10:f6:89:03:c9:81:37:42:c5:a8:79:4d:15:
f2:09:ea:5f:0f:fd:61:9f:c6:c5:44:1f:a3:28:39:f4:45:af:
46:4a:7e:dd:ff:58:48:06:45:c2:23:e0:50:03:de:ac:1d:ea:
89:24:9a:d9:6d:9f:40:d2:1f:4e:81:e0:f1:b8:e2:05:a7:a8:
ae:15:9b:53:4d:8b:b0:92:c1:ab:2e:72:5f:09:de:5b:14:c4:
c9:87:78:4f:aa:32:e1:a5:9d:5b:4f:7e:e0:f7:15:6f:4f:28:
07:f6:64:fa:84:d5:89:04:1b:d7:14:a2:bf:e0:71:76:a3:b0:
63:29:42:e6:6d:d5:72:e7:6d:71:38:34:5f:af:b1:f2:39:f6:
26:01:fd:3c:b3:be:61:48:dc:b7:1e:06:1f:1f:2c:81:51:25:
44:e7:ec:16:b5:03:4e:c9:f6:22:26:7b:d1:01:17:68:0e:3f:
8c:b7:e3:87:34:b9:c0:f0:2b:5e:c6:98:bb:2b:f4:ee:d2:61:
f1:ef:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:07 2026 by rpki-client