Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: BYL0tXVZtoEq5+zwkK6b8EwAUtBFHB+2Jt8S2aWD5B8=
Subject key identifier: D2:81:6A:98:6C:58:4B:F6:76:A8:7F:16:20:9F:E2:B8:95:6A:85:62
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019FAABED2E602188117C9004F69AEE8150B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 22:01:00 +0000
Manifest this update: Tue 28 Jul 2026 22:01:00 +0000
Manifest next update: Wed 29 Jul 2026 22:01:00 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: oLedmfCbNybtbXncFB74FopOOaalbxAVFtuOPcH0xII=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:d2:e6:02:18:81:17:c9:00:4f:69:ae:e8:15:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Jul 28 22:01:00 2026 GMT
Not After : Jul 29 22:01:00 2026 GMT
Subject: CN=d2816a986c584bf676a87f16209fe2b8956a8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:f7:9a:f0:65:7c:28:8f:41:f6:ec:8a:c1:
3c:6b:ef:0a:6b:8e:81:e0:2a:d2:0f:ef:f5:38:72:
d5:5a:17:97:83:e7:aa:d2:95:81:8c:91:d4:ce:02:
e9:b3:3b:dc:72:e4:17:27:76:58:71:11:58:3f:f7:
10:ca:eb:26:9e:f4:b8:ff:2a:24:04:3b:68:59:a1:
55:da:04:4b:51:38:60:a9:a3:97:70:18:e5:68:c4:
0a:02:1a:ae:7f:38:79:a7:d9:cd:68:62:7d:9e:49:
e6:a4:1b:a8:57:6f:8e:0b:85:c9:e6:a9:01:fa:06:
4a:0c:04:f8:23:1c:81:a8:9c:8e:15:2f:5b:ab:ef:
39:e1:91:4d:5b:c0:6c:ab:03:e0:c4:9c:24:ce:0c:
06:97:8d:f1:4e:c5:45:23:d8:f7:74:05:f3:07:d2:
21:de:c1:1f:5c:0a:80:4e:db:09:67:a0:37:1a:d9:
22:4b:b4:0f:d7:7a:bd:b2:49:a3:dd:25:c9:a6:62:
99:33:e1:0c:dd:36:f4:4d:ee:62:3c:e9:ee:b5:5a:
e0:37:03:cc:f9:5b:15:45:58:fd:18:2b:5e:9e:e8:
0e:5d:16:b1:10:b0:89:eb:80:1b:8a:06:61:c3:de:
95:4d:d9:dc:82:e2:3a:df:91:25:24:a1:73:38:ef:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:81:6A:98:6C:58:4B:F6:76:A8:7F:16:20:9F:E2:B8:95:6A:85:62
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:8b:24:31:02:49:70:4c:33:79:6c:d7:fb:e5:87:5b:ac:
5f:02:46:d7:f5:44:5a:c6:39:9f:2f:b9:22:a3:5d:01:3e:9d:
56:9b:73:7b:93:82:29:79:c1:29:92:4e:42:3c:ab:37:24:75:
ef:4c:08:b0:ba:54:b9:5d:d3:3d:29:98:81:d0:a4:53:6b:dd:
15:e1:05:a4:eb:69:a1:01:b5:b8:8b:f2:81:20:47:14:ed:77:
be:31:a7:30:fa:c8:2f:49:ab:ac:79:70:d6:3e:9c:6b:e7:f1:
c8:65:b6:da:4b:f5:39:3c:fd:ca:e6:6f:c8:de:5f:0c:4c:31:
99:40:fc:2b:1f:a6:c2:e6:db:bc:5d:6d:8f:7e:78:5e:1f:49:
07:62:2e:f6:5a:9c:16:39:83:0c:6e:67:1c:c0:22:19:07:8d:
e3:b6:0f:8e:c0:6e:67:91:24:75:21:ae:79:f2:3e:ef:9d:4b:
82:28:2f:b5:8c:e1:f2:94:6e:b1:d8:60:6c:64:05:b7:47:9a:
ae:d2:57:6a:6d:85:e2:89:96:71:fe:26:9b:56:d5:41:4b:d9:
cb:af:41:38:ba:96:f3:3e:fa:84:f1:0c:8d:cd:9a:f5:bc:b5:
0c:24:91:8f:a0:d8:f6:c2:36:d3:c8:31:04:ab:6a:0d:23:86:
67:55:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:45 2026 by rpki-client