
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: a2rbYTiOq4G2sYFmuHRpA0pNiJ0g4B6G23u2jMLwofU=
Subject key identifier: 15:9D:DC:3A:47:EC:A7:0F:7C:77:AD:E3:3E:E6:29:17:C8:15:C9:32
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019FACAD27802F2F02865BD95828E5E10E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1A26
Signing time: Wed 29 Jul 2026 07:00:56 +0000
Manifest this update: Wed 29 Jul 2026 07:00:56 +0000
Manifest next update: Thu 30 Jul 2026 07:00:56 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: ztzngFsIw9lOcxHLaYWTApofjHKvkC22BYWZRBZqLY8=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:27:80:2f:2f:02:86:5b:d9:58:28:e5:e1:0e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jul 29 07:00:56 2026 GMT
Not After : Jul 30 07:00:56 2026 GMT
Subject: CN=159ddc3a47eca70f7c77ade33ee62917c815c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:9d:7b:dd:52:e0:91:15:41:45:69:ce:1d:
14:59:68:bd:bb:d1:7b:04:8f:70:0f:5e:96:aa:b6:
d3:98:eb:b5:c2:a4:52:30:8e:05:d0:58:19:c6:59:
73:6a:b4:0e:63:99:ef:97:ca:96:8b:12:38:6e:d5:
ef:a6:19:58:8f:40:c1:e6:1b:40:4f:7b:1a:93:62:
a6:e4:84:31:48:39:76:ed:c5:6e:79:b4:61:96:b5:
ff:ba:24:a0:f0:3c:22:4a:9d:b1:43:f2:1c:15:f6:
25:54:fc:8d:e2:0a:27:02:5e:57:47:01:c6:89:ce:
dc:d4:28:66:09:02:40:08:e6:7d:c9:91:51:76:c9:
54:04:2b:66:6d:44:d6:a9:af:df:c6:0c:64:d4:e6:
e6:bc:98:41:ed:51:fb:b9:e4:0c:86:67:98:e9:e2:
12:b8:fd:8f:5d:49:ad:16:c4:5a:4e:82:02:da:0a:
ed:e4:21:04:59:7c:47:92:e3:df:60:8f:1f:5c:e0:
4d:03:5a:9b:23:cd:1d:cd:84:e9:ad:50:a0:54:b7:
99:2d:6b:65:2c:7b:4e:67:90:c9:44:db:11:17:54:
a2:47:73:08:89:e8:22:4e:c4:27:16:45:44:8a:e1:
b2:6f:68:f7:93:23:ee:68:7e:29:8a:3f:1e:aa:3e:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9D:DC:3A:47:EC:A7:0F:7C:77:AD:E3:3E:E6:29:17:C8:15:C9:32
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2f:ef:1a:be:54:d0:a6:2c:85:d3:d0:25:66:90:fc:c4:e4:
f3:92:d6:a9:a3:a9:3a:84:c8:5a:c1:93:ff:f9:a3:fe:63:56:
f9:dd:e3:a5:ce:59:11:2f:49:14:a0:53:ae:c5:e1:4d:c1:b4:
5e:2a:3e:c6:d5:d5:98:f8:19:2f:30:5c:a0:b3:e2:92:96:73:
14:36:32:0e:c6:ba:16:31:66:a0:d6:09:97:dd:fa:d3:45:5f:
d6:a4:ae:46:27:a1:a2:99:e7:cc:cc:b9:f7:b0:e9:fb:55:de:
ce:b7:61:97:da:61:d9:a2:b3:23:d5:4a:f2:cb:34:d4:15:e8:
e0:bd:9d:c9:0d:5f:c6:09:9c:77:40:bc:46:0a:fd:84:00:46:
7e:8f:0d:12:5f:80:b7:b6:d0:0d:da:29:be:83:e4:05:08:f4:
ac:66:a1:d7:df:33:d5:6b:c7:36:99:12:0f:5a:ac:07:94:35:
03:68:ea:88:8d:69:81:5d:23:4d:91:34:26:c1:35:5f:7e:c0:
4b:9d:a6:17:ec:e7:9f:59:fb:e6:1b:3f:9a:de:b1:e0:cd:b5:
85:de:97:3a:fe:ef:a6:a7:a9:42:27:ed:8c:6a:b1:fc:ee:bd:
ce:2f:48:fe:32:7d:d0:4b:23:78:fc:57:20:e2:2a:d2:ca:62:
f6:3e:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:36:17 2026 by rpki-client