Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json)
Hash identifier: mjJU8ue1sLtDkzM5oCNBXEtWelUSzEXhh3Y5GaOuMNE=
Subject key identifier: 6D:E0:74:A9:BE:D6:24:95:2D:09:D7:46:A6:4B:EC:50:6C:C2:03:2A
Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99
Certificate serial: 019D25F14999E842C2E924618756F04C7A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
Manifest number: 01C1
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: QQpsEiaZUMJcsy9cTX6k1Jb6JpbLOAxSyPXHb/zl4jw=)
2: mf_AZ1vDsnNkv0nHtoE1T2hjIH4.roa (hash: gw1fT/9xJl2DFpGmxI3jrXwIRs8KgcauR0afwI0ggNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:49:99:e8:42:c2:e9:24:61:87:56:f0:4c:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=6de074a9bed624952d09d746a64bec506cc2032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:5d:82:a1:3b:40:07:04:c4:e2:da:37:a3:
5d:82:a5:f2:b6:2d:3e:44:93:e5:7d:bc:bc:ed:7e:
24:1f:10:6c:8d:46:d6:49:22:0a:d3:52:c4:e4:0b:
b9:67:52:b1:d7:0d:e0:af:59:ee:62:2f:5f:02:7e:
41:13:c4:54:7b:dd:00:b2:17:bf:cc:43:b1:83:64:
b0:f6:ea:5c:29:9b:b2:31:31:6a:0d:30:d1:51:f7:
9c:35:e7:8b:c6:86:c0:a4:a0:a8:a3:c2:37:0c:eb:
d4:4e:2a:0b:81:fc:c4:1f:6a:1f:fb:f1:85:67:98:
8f:f8:73:6f:dd:a9:a3:ef:6a:b9:84:e5:f3:f5:97:
30:89:aa:85:e1:21:29:02:94:43:e1:db:f4:60:64:
50:33:44:43:dc:fa:8b:31:8f:14:96:fe:49:87:60:
bb:21:0b:1d:de:a2:9a:a7:6d:cb:2b:ef:d4:76:a5:
7d:04:0b:37:88:78:3b:29:2e:ed:fa:30:9c:0d:0d:
50:ec:46:d4:19:b2:e9:d8:74:67:5a:7f:e3:6f:65:
5d:f4:ca:a8:61:88:de:4e:24:7e:da:00:a7:59:53:
53:8e:89:cd:53:59:60:33:b5:02:1b:36:24:12:cb:
62:a8:6a:46:6d:12:09:02:aa:16:23:31:df:22:3e:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:74:A9:BE:D6:24:95:2D:09:D7:46:A6:4B:EC:50:6C:C2:03:2A
X509v3 Authority Key Identifier:
keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:55:5b:6e:a3:0c:4e:46:0c:9f:5e:a4:e0:48:fd:23:0b:
cf:2e:e6:27:76:53:83:7f:49:98:fd:54:6b:e8:f5:e1:68:b5:
a3:71:08:85:0c:ad:2a:17:6b:3b:91:65:b5:fc:d4:b6:d1:9c:
a5:cd:66:fe:2a:ca:63:75:e7:cb:5d:0d:a1:eb:fb:26:18:b0:
6e:36:76:55:b4:f4:75:92:63:7c:bc:51:87:f9:48:c7:4f:77:
d2:c3:7e:83:06:db:88:46:d4:3e:e4:09:df:26:2b:5b:94:56:
eb:56:e8:20:52:93:50:26:60:d8:44:47:94:6d:e3:10:13:c4:
45:b3:38:60:f0:d3:9b:5e:c5:04:46:bb:71:c7:7c:04:86:d0:
54:d6:a0:fc:25:b2:49:68:b7:43:71:81:ff:24:7d:86:36:af:
35:83:c2:10:90:4e:a0:a7:87:c0:76:98:ab:4d:55:ae:ca:1c:
05:79:92:55:52:b0:d0:e6:fe:01:5f:93:f9:f8:46:6b:72:a6:
91:1d:23:88:4f:e7:08:ca:b1:37:77:b0:dd:20:f9:05:da:d6:
a3:05:60:ef:51:10:33:8c:22:4c:20:bb:56:0e:55:de:65:aa:
ef:20:b1:62:c1:93:1f:b5:d4:0a:c6:45:97:28:24:1a:b2:e6:
f9:1a:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:20 2026 by rpki-client