Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: 9064LM0GWtAZmwh31Kf2Lu9JkV2IKdPHVxZSR4aVARI=
Subject key identifier: CB:0B:C1:AC:7B:A7:73:4F:80:55:2D:97:80:ED:6B:41:BD:46:C9:36
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019CAC0FE39E10A4A48098C570B28054DC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1898
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 4DsLaVyeff+QkVXHgML5lI+e33f73fL+CkbDhXydOCw=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e3:9e:10:a4:a4:80:98:c5:70:b2:80:54:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=cb0bc1ac7ba7734f80552d9780ed6b41bd46c936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:af:4f:30:2b:1d:67:04:45:e6:35:51:50:
e2:d6:a2:cb:d0:fb:50:40:16:42:44:75:93:da:19:
5f:1b:d2:5e:d5:02:a7:20:9e:20:bf:aa:00:74:50:
e0:13:cc:7e:e7:e3:b1:d8:05:d9:2d:f9:c8:60:1e:
9d:57:e2:89:9c:57:ee:31:6c:5f:cd:d6:96:90:22:
a7:22:91:cf:da:58:15:f7:78:88:3b:64:25:4f:ab:
95:e8:9a:90:c7:67:0b:e1:19:73:df:35:6f:ca:e2:
69:54:da:79:ee:53:e6:cc:4b:6d:11:95:e6:a4:1f:
65:4a:4f:a9:7a:3a:22:55:ae:66:4d:ad:09:35:d0:
e1:e2:9a:80:64:a3:dc:88:11:45:3c:64:ab:a6:14:
15:23:74:e4:e4:26:12:9a:e6:0c:73:cf:68:db:3c:
2a:06:00:03:e0:3d:bc:15:4e:eb:c9:a3:71:9a:ac:
e8:93:64:cb:03:03:bc:29:7d:de:a6:b3:c8:22:d0:
e9:6f:73:0e:68:cd:ea:b1:ed:73:30:75:fc:af:d4:
8c:fc:89:3d:b9:44:34:b6:2c:63:54:fe:6d:2a:8e:
cc:f7:7c:66:70:d4:00:b1:c4:c6:91:a8:0d:60:a7:
dc:66:16:c0:f1:f6:41:b1:73:5c:02:df:58:c3:b9:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:C1:AC:7B:A7:73:4F:80:55:2D:97:80:ED:6B:41:BD:46:C9:36
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0f:23:62:b5:2b:7a:9b:37:4a:79:9b:17:eb:12:4f:13:c5:
75:c5:c7:c3:4d:63:31:b8:fc:90:c7:e8:43:dd:72:59:07:3d:
7d:89:58:6e:0b:d3:95:4b:ab:bc:56:23:de:d5:1c:7c:3e:57:
0e:43:d5:39:64:fc:3d:70:2d:b4:3d:f9:3c:14:4a:f1:35:c7:
8e:cd:00:84:6a:c8:be:01:82:5e:66:9e:7b:40:fd:49:a5:8f:
31:ed:15:38:65:85:84:db:e5:e9:28:b6:e4:37:46:b0:88:90:
36:6b:83:15:d3:5f:51:82:a0:8f:99:c0:5b:6f:79:9a:a5:c2:
fd:60:7f:bc:a0:d1:2a:dc:3f:89:4d:b3:31:93:06:ba:0e:38:
df:a4:1e:94:82:a2:30:bc:ee:8d:e0:c4:87:74:da:fc:94:a7:
89:fc:42:0d:a4:22:16:d8:42:68:49:22:77:12:55:76:2b:8d:
68:53:c9:07:02:48:e7:4b:03:3b:bb:09:d8:e1:b2:ec:34:a7:
1b:3b:37:c9:1b:f3:b1:1f:ad:8c:9a:ed:8a:69:b1:f3:da:67:
da:81:6a:8e:2d:0e:f2:d1:40:81:fd:a6:cc:22:f6:fb:8d:1f:
4c:a0:62:2f:19:75:e0:2f:ef:77:07:ae:5a:17:b8:26:ce:3d:
04:8d:93:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:41 2026 by rpki-client