Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: IdoeKIloqHlj4WzYE/l8CY9uKXwQTd/GduLtoqMb5fg=
Subject key identifier: BB:86:D4:CD:96:1C:FE:CF:2F:2B:B0:FF:3B:AE:9C:81:57:EA:AB:5E
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019D9B8753541888CA2F581DFBE2D35BF3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1914
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: 6HFZqocQgM6Tvjt5SVa1d-JKQro.roa (hash: R7CY28+/1QGV8imQwHhXvvPJh8Q9cCcEUd0a8h48WvQ=)
3: 9ZsiVUbUX5W-ZMCVQPzYEB1xBz4.roa (hash: PbpoXyAV/0b2z6QlVsi46fCFIAuuq0DUJ5Bw/Cp89FU=)
4: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
5: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: urjaL06oJKkbg0GhJU0mwg/7TSBrYQ+FQaVQQemvKkY=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: inl3oK6KntOVTBjF2QtajgW1paQ.roa (hash: hSh/MkCdcKj7PpJEVgb25px7FEs0jeNWgRrerofSRCY=)
9: kB2FkBaRUfAJi-1yxcUFgqy84f8.roa (hash: EfQ4Aw8Q7Tcem9htNsAj6y3hOE53qNPfdKYIzWgsVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:53:54:18:88:ca:2f:58:1d:fb:e2:d3:5b:f3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=bb86d4cd961cfecf2f2bb0ff3bae9c8157eaab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:fa:30:50:a4:68:df:96:bb:10:0b:6e:14:
43:1d:4f:1d:2a:85:2e:03:24:e4:57:bb:3f:a1:1f:
dd:a3:82:ad:fc:c0:97:67:c8:92:6f:c7:03:cd:1b:
47:c7:e9:dd:2f:fd:ba:c7:95:d5:7c:ae:43:3c:67:
bb:49:fc:03:b5:62:a1:88:38:c4:25:d4:51:ed:8c:
73:06:43:34:6c:7e:85:be:c2:9d:23:85:68:2c:f1:
d8:89:52:f4:fa:d5:75:f8:86:80:2f:ea:95:91:75:
d2:c3:4c:cf:84:85:16:7c:0f:57:ad:08:60:c5:ab:
ab:7d:84:6b:b2:ad:1d:33:3c:18:66:4a:88:52:4e:
ae:57:42:b9:5e:f0:7f:cf:59:2a:cb:a2:2e:24:ce:
85:91:2f:29:8b:e1:91:bb:8c:b7:69:5c:03:e7:a3:
2f:88:98:20:d0:5c:e8:8e:1c:f3:19:96:ad:f4:fe:
22:8b:99:af:20:18:ba:4d:d3:54:f8:31:c5:c8:ed:
3e:d6:14:9f:e7:0b:92:e1:e2:ab:50:1f:e8:cd:dd:
af:04:18:31:d2:f1:61:18:c4:3e:a0:47:7b:08:cc:
c8:93:14:be:04:07:be:fa:2d:46:f0:81:4d:0c:08:
63:80:db:00:e2:ff:15:9b:70:5c:7d:38:91:f2:a5:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:D4:CD:96:1C:FE:CF:2F:2B:B0:FF:3B:AE:9C:81:57:EA:AB:5E
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b9:84:25:aa:f3:18:05:76:72:bd:17:6d:d0:7f:9b:ca:fd:
32:f7:db:72:a8:93:59:a8:e8:cf:8e:83:65:75:cd:01:4e:55:
88:f5:01:4d:62:0f:1e:2e:25:af:00:ab:c0:60:7d:29:31:16:
f6:4f:77:bc:4a:f8:b3:06:e5:2e:70:b1:d9:a7:2d:95:1b:fd:
eb:58:95:f6:4d:00:f5:ae:47:f6:70:df:38:b5:a6:ce:1d:bb:
be:69:f3:3a:09:e9:87:99:64:79:5b:d8:eb:b5:97:19:6b:cf:
58:32:6a:4a:2c:04:7b:1b:25:c0:64:89:7e:4f:46:fa:16:fe:
9c:0f:9e:09:5c:43:fe:5b:3a:34:35:d0:d1:22:25:a0:41:f6:
c1:05:69:1f:81:5c:dd:4c:7b:71:68:1b:99:93:76:98:a1:86:
16:38:7f:66:81:cf:46:10:4e:cc:67:c8:ec:40:c3:f2:e6:17:
61:d8:30:cc:8c:69:30:f0:d1:fc:29:e2:b3:e2:0e:16:9e:6e:
b8:f4:0b:d5:42:7e:8b:f1:1b:7d:ab:25:91:1d:21:03:b2:b5:
99:7e:f1:db:4b:50:b5:42:76:bf:55:3a:13:4f:4d:ec:aa:7d:
d8:73:93:ee:9b:b0:0d:87:e2:4b:8e:f2:5c:2a:39:fb:0c:2e:
c9:e7:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:18 2026 by rpki-client