Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: /F/6O+Wg3Y7O05N4InPOVrRxiIywkt8zeUY4cwLIFIk=
Subject key identifier: 94:3E:06:3C:18:33:00:AA:E5:70:81:9E:E2:DA:C0:43:67:0D:D2:8E
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019D999986712533AF8FC195749B3915740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:08 +0000
Manifest this update: Fri 17 Apr 2026 04:01:08 +0000
Manifest next update: Sat 18 Apr 2026 04:01:08 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: SsGKNMaDuFO6YfZq/Xi2MErbE87pUZWNOOP0PtVz3Cw=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:86:71:25:33:af:8f:c1:95:74:9b:39:15:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Apr 17 04:01:08 2026 GMT
Not After : Apr 18 04:01:08 2026 GMT
Subject: CN=943e063c183300aae570819ee2dac043670dd28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:44:c0:c0:c7:56:03:5d:3c:b4:dd:11:42:
27:01:a5:eb:8d:c9:8b:56:16:47:43:b5:67:f4:17:
5c:1d:a0:38:78:44:46:11:db:96:e7:85:77:d5:42:
d2:50:14:01:58:89:f9:08:b0:37:93:4b:4c:ad:1f:
cd:57:9b:2e:a9:29:db:9f:37:d3:da:23:56:7c:b0:
42:15:26:25:57:62:8d:5c:f2:87:9c:64:40:d7:0a:
19:b7:f1:f5:d1:b3:26:8f:4c:74:51:a3:db:63:07:
ef:d8:2d:a1:ee:25:d0:cf:56:e1:ad:a7:fa:54:66:
9b:9d:d0:bd:c7:4d:c0:16:8d:66:04:b9:94:42:29:
a0:57:65:ae:7e:b0:a0:71:03:5e:a6:48:53:93:5d:
df:f1:e7:2f:ab:27:55:93:43:95:60:ec:34:ba:a4:
35:6e:ac:82:d1:79:aa:f2:52:24:a1:35:df:12:e1:
fe:15:71:71:30:bf:7b:2b:4b:9e:3d:16:20:c3:02:
02:c7:f5:be:b1:fd:86:48:31:4b:55:64:54:2c:6f:
3b:18:02:97:30:12:d7:af:32:5f:bd:eb:81:cd:e1:
5d:9f:ec:5b:06:03:da:2d:70:c3:ec:b9:a9:3f:1b:
3f:b1:6f:5d:c4:78:22:ed:08:5f:b7:c4:78:9b:44:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:06:3C:18:33:00:AA:E5:70:81:9E:E2:DA:C0:43:67:0D:D2:8E
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:94:0e:8d:85:f3:7c:62:16:50:84:b8:bd:85:46:e8:5d:
a5:73:28:b8:a1:09:78:16:59:32:1b:fd:2f:63:3f:56:d3:d4:
13:aa:5b:0e:ab:9d:f4:00:2b:62:f8:b5:db:eb:e2:a6:7e:0d:
2e:b5:22:24:ce:99:f7:5f:74:45:7a:07:43:89:19:8d:0f:0f:
f3:f6:66:b2:9b:dd:47:0b:27:e8:d4:23:d7:cf:3f:b1:58:27:
a5:c9:00:74:1b:c0:ae:d3:5c:b5:ed:f1:5f:a1:cd:1d:85:ca:
43:10:1b:5e:1c:dd:fe:11:b0:65:7b:6b:ec:91:22:3c:aa:70:
1a:64:82:04:7c:62:cb:ca:6c:ee:cb:c2:50:29:0d:5b:72:68:
cf:db:d1:e7:4c:af:74:69:c3:bd:af:7a:92:ae:56:a8:a9:f6:
6a:ab:70:dc:5d:cf:ef:0e:bc:db:da:4d:75:1b:cb:f8:c5:d4:
2e:1f:d0:52:f4:76:fa:14:44:99:8f:59:4b:2b:4e:06:0c:91:
fc:88:a2:43:bb:18:d9:0f:b2:95:3f:91:32:09:cd:5a:cc:2a:
05:76:88:19:0e:bf:d4:f2:cc:8e:a8:4a:eb:34:ed:1c:13:95:
e4:28:c6:6a:0b:7c:de:38:df:de:35:1f:fd:31:f8:5d:5c:2c:
47:56:2c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmYZxJTOvj8GVdJs5FXQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw
YTM0YjIwHhcNMjYwNDE3MDQwMTA4WhcNMjYwNDE4MDQwMTA4WjAzMTEwLwYDVQQD
Eyg5NDNlMDYzYzE4MzMwMGFhZTU3MDgxOWVlMmRhYzA0MzY3MGRkMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf5EwMDHVgNdPLTdEUInAaXrjcmL
VhZHQ7Vn9BdcHaA4eERGEduW54V31ULSUBQBWIn5CLA3k0tMrR/NV5suqSnbnzfT
2iNWfLBCFSYlV2KNXPKHnGRA1woZt/H10bMmj0x0UaPbYwfv2C2h7iXQz1bhraf6
VGabndC9x03AFo1mBLmUQimgV2WufrCgcQNepkhTk13f8ecvqydVk0OVYOw0uqQ1
bqyC0Xmq8lIkoTXfEuH+FXFxML97K0uePRYgwwICx/W+sf2GSDFLVWRULG87GAKX
MBLXrzJfveuBzeFdn+xbBgPaLXDD7LmpPxs/sW9dxHgi7Qhft8R4m0QRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ+BjwYMwCq5XCBnuLawENnDdKOMB8GA1UdIwQY
MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt
YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh
LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/KUDo2F
83xiFlCEuL2FRuhdpXMouKEJeBZZMhv9L2M/VtPUE6pbDqud9AArYvi12+vipn4N
LrUiJM6Z9190RXoHQ4kZjQ8P8/ZmspvdRwsn6NQj188/sVgnpckAdBvArtNcte3x
X6HNHYXKQxAbXhzd/hGwZXtr7JEiPKpwGmSCBHxiy8ps7svCUCkNW3Joz9vR50yv
dGnDva96kq5WqKn2aqtw3F3P7w6829pNdRvL+MXULh/QUvR2+hREmY9ZSytOBgyR
/IiiQ7sY2Q+ylT+RMgnNWswqBXaIGQ6/1PLMjqhK6zTtHBOV5CjGagt83jjf3jUf
/TH4XVwsR1YsZg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:28 2026 by rpki-client