Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: oE8JiElbjgsWE0eDin55WW0SWxHTMReENbf2sez5rC4=
Subject key identifier: 28:CE:8A:AE:48:2D:B8:7D:31:89:69:67:89:DA:5D:7A:B2:7F:2B:C6
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019FAABE817B5F6378AC1ECA14DD2BE8E168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1A25
Signing time: Tue 28 Jul 2026 22:00:39 +0000
Manifest this update: Tue 28 Jul 2026 22:00:39 +0000
Manifest next update: Wed 29 Jul 2026 22:00:39 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 4jCo2JhhRMwoC0XNQliTc+zXngjPQ1k0lBJkQ4V54hg=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:81:7b:5f:63:78:ac:1e:ca:14:dd:2b:e8:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jul 28 22:00:39 2026 GMT
Not After : Jul 29 22:00:39 2026 GMT
Subject: CN=28ce8aae482db87d3189696789da5d7ab27f2bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:14:b6:01:a5:75:a5:da:64:8c:7a:e9:64:
6c:27:2c:c0:eb:4b:fd:08:f2:5d:13:51:65:41:da:
86:80:cc:81:0c:16:90:af:3b:a8:79:64:7e:dc:14:
a4:e3:f7:5e:74:3b:75:72:c5:fe:95:35:79:2e:4c:
d3:6a:37:57:9b:4b:95:1b:ee:fb:07:3e:48:bd:94:
26:41:ab:30:0b:91:5a:3d:df:18:e4:c1:d2:d9:62:
58:93:39:f4:3c:6f:0a:97:fd:a0:ad:c0:4c:8b:c8:
fa:17:dc:b4:34:2e:f1:ea:27:23:15:37:1f:eb:60:
76:fc:c8:f8:a3:f6:21:89:17:5e:42:50:06:41:07:
66:8e:03:ab:3b:b3:83:cf:90:f4:0e:3d:fa:05:9a:
89:4a:97:ab:76:aa:fa:61:b4:2f:86:53:dd:ab:12:
34:84:e5:16:6c:1b:86:5a:f6:6f:4d:20:d2:55:af:
94:d5:b7:99:bb:91:92:3e:c2:b1:ce:5a:02:ac:10:
06:ed:2c:a6:ff:fb:1a:9a:f5:ed:b7:0a:35:9c:bc:
57:73:50:16:7e:44:fb:ad:b8:fd:9a:23:3f:bb:cd:
74:1d:ea:0c:d6:db:ec:50:2b:bd:23:49:dd:da:0c:
06:c0:cc:0a:a5:fd:77:33:e8:e9:84:da:73:98:e7:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:8A:AE:48:2D:B8:7D:31:89:69:67:89:DA:5D:7A:B2:7F:2B:C6
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:ea:83:73:f8:84:3d:bd:4a:67:ef:3b:82:1d:5a:ed:b7:
91:76:97:b0:48:0f:ee:75:22:8b:f8:0d:cc:9d:1d:2c:b0:16:
1a:73:16:8b:31:dc:3e:94:dd:5b:56:b2:f9:eb:54:40:0b:07:
92:ce:46:d8:f4:55:a3:b9:de:57:a9:4c:83:c2:68:d1:66:57:
ac:91:a7:90:26:2c:3e:e4:ca:05:e1:9a:e2:03:ce:af:9c:a7:
03:59:cc:46:30:a8:2d:4e:fb:c4:a8:ce:a7:7d:0a:07:7d:df:
2f:02:47:c8:a6:99:a7:7d:16:66:83:96:0d:f5:69:62:17:03:
de:98:0d:80:c3:99:11:3f:3e:cb:ef:35:66:1b:5c:54:c8:ea:
c4:87:72:fd:51:48:52:0f:d6:1e:3b:4c:71:04:de:21:4d:7b:
19:b7:a3:bb:37:ef:6c:cb:e0:97:96:3c:b0:05:27:d1:01:12:
43:53:8d:ef:77:77:e5:7f:ad:95:9d:ef:a9:57:cf:45:a6:37:
cf:e6:e3:18:d3:08:26:cf:53:bb:77:be:6a:df:e6:38:2d:f6:
3d:b2:6f:f8:29:13:2a:32:d4:c0:62:4b:6b:7d:62:e0:09:0d:
de:eb:ab:8a:e8:7e:0e:63:a1:b8:3d:28:85:a5:33:63:61:9e:
15:07:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:38:46 2026 by rpki-client