Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: v0aTpZeLGBdTq4/CKU6LytqUtJ63e+YI698vzPVwUC0=
Subject key identifier: BB:C4:1A:09:D6:9E:DE:43:4E:6D:61:7A:5B:0D:7F:76:F7:5F:FB:40
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019FAA8826AF0FAEF3E6A08A9A9A25EED7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 1021
Signing time: Tue 28 Jul 2026 21:01:17 +0000
Manifest this update: Tue 28 Jul 2026 21:01:17 +0000
Manifest next update: Wed 29 Jul 2026 21:01:17 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: pCwkwu+tuT2JsdwotsDxxQOQFMi77txpvyKbKllqv4w=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:26:af:0f:ae:f3:e6:a0:8a:9a:9a:25:ee:d7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jul 28 21:01:17 2026 GMT
Not After : Jul 29 21:01:17 2026 GMT
Subject: CN=bbc41a09d69ede434e6d617a5b0d7f76f75ffb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:a1:b3:61:f3:fc:80:13:d8:7e:0d:29:58:
fb:50:ba:ec:da:b6:9d:61:3e:40:b0:cd:a2:ce:b6:
b3:77:d7:b8:0f:97:4b:ca:0b:9f:f8:56:99:ed:4c:
35:97:19:99:02:4b:2a:5c:5d:3b:e0:61:18:18:8b:
ac:dd:83:b4:fa:f2:6d:fe:9d:ab:f1:1c:2f:95:da:
f0:2b:c4:6e:56:7d:69:2c:72:be:06:a9:93:d3:6f:
65:a3:56:f4:62:ef:48:4b:0d:9e:02:3a:d4:00:57:
7f:71:9c:6b:01:4b:ad:42:5a:c0:b7:07:6b:0f:c1:
ce:da:90:25:aa:6d:ed:e9:c2:44:cc:42:28:16:e0:
b9:c9:89:02:7c:35:7e:56:5f:76:e8:41:79:8d:37:
9a:3b:2a:db:d3:7e:5e:85:80:a7:57:94:d5:4a:a0:
6f:6d:0a:9d:c5:a1:69:e0:10:eb:13:ae:2b:07:f3:
11:a9:ca:9a:1f:99:75:c8:78:11:a1:a3:74:9a:93:
93:b9:c8:79:13:76:c9:ff:d8:11:25:64:98:3a:28:
ef:dd:98:c5:df:d3:f3:02:82:bb:aa:2b:3b:79:b5:
3f:5e:ed:23:51:3a:be:10:6b:e1:52:79:b4:77:d8:
be:7c:03:25:39:20:1e:49:c1:78:87:38:d9:2a:67:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C4:1A:09:D6:9E:DE:43:4E:6D:61:7A:5B:0D:7F:76:F7:5F:FB:40
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:19:bd:55:31:6b:e2:a9:93:8b:75:19:7e:ec:ef:87:b4:
93:7f:fc:6d:93:3f:2b:24:d2:37:63:cd:b8:04:fd:8e:6e:77:
54:a3:42:ff:ee:21:74:d7:d2:40:f3:fb:e6:bd:c9:0b:c0:f8:
c5:38:43:73:06:7b:3f:10:9e:8f:63:93:5c:2b:67:66:56:80:
72:96:0f:e1:fc:4f:1c:c0:76:68:07:53:3d:9a:10:b4:40:e6:
03:b1:bb:83:22:83:a5:6e:4b:ca:64:77:e9:61:3a:48:58:e9:
6e:55:61:94:a0:d6:8b:63:21:b5:5e:fe:ed:c7:a6:e8:b5:5b:
f1:92:5c:06:c0:a0:ca:ff:7c:74:07:cb:72:94:3d:9e:de:d4:
ef:47:44:63:a0:91:0d:8e:ab:8c:4c:2b:d3:96:42:6f:e2:30:
b0:98:eb:dd:6c:90:f5:f3:2c:f3:df:a1:79:0d:60:13:29:ef:
3a:50:4c:05:e0:8a:af:0b:9e:05:75:0a:a8:f4:c8:1d:fb:f2:
bd:54:16:63:9b:c2:93:e6:ed:b0:a4:48:84:ed:f6:6e:dc:1f:
98:4b:75:ab:40:74:cc:68:25:00:30:b6:a5:aa:5c:1d:3e:48:
0a:ae:c8:4a:7a:82:f0:5c:59:99:b8:d7:5c:44:49:a3:8f:c4:
68:0a:8b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiCavD67z5qCKmpol7tf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDFmOGZiNmFkZDI3MmI0NmM0MDZiMTg4NWM5MzI5NWIx
ZjRiOGMwHhcNMjYwNzI4MjEwMTE3WhcNMjYwNzI5MjEwMTE3WjAzMTEwLwYDVQQD
EyhiYmM0MWEwOWQ2OWVkZTQzNGU2ZDYxN2E1YjBkN2Y3NmY3NWZmYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqehs2Hz/IAT2H4NKVj7ULrs2rad
YT5AsM2izrazd9e4D5dLyguf+FaZ7Uw1lxmZAksqXF074GEYGIus3YO0+vJt/p2r
8RwvldrwK8RuVn1pLHK+BqmT029lo1b0Yu9ISw2eAjrUAFd/cZxrAUutQlrAtwdr
D8HO2pAlqm3t6cJEzEIoFuC5yYkCfDV+Vl926EF5jTeaOyrb035ehYCnV5TVSqBv
bQqdxaFp4BDrE64rB/MRqcqaH5l1yHgRoaN0mpOTuch5E3bJ/9gRJWSYOijv3ZjF
39PzAoK7qis7ebU/Xu0jUTq+EGvhUnm0d9i+fAMlOSAeScF4hzjZKmdTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvEGgnWnt5DTm1helsNf3b3X/tAMB8GA1UdIwQY
MBaAFGbR+Ptq3ScrRsQGsYhckylbH0uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDkt
YTU5ZDEzNTBkZWVjLzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDktYTU5ZDEzNTBkZWVj
LzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBwZvVUx
a+Kpk4t1GX7s74e0k3/8bZM/KyTSN2PNuAT9jm53VKNC/+4hdNfSQPP75r3JC8D4
xThDcwZ7PxCej2OTXCtnZlaAcpYP4fxPHMB2aAdTPZoQtEDmA7G7gyKDpW5LymR3
6WE6SFjpblVhlKDWi2MhtV7+7cem6LVb8ZJcBsCgyv98dAfLcpQ9nt7U70dEY6CR
DY6rjEwr05ZCb+IwsJjr3WyQ9fMs89+heQ1gEynvOlBMBeCKrwueBXUKqPTIHfvy
vVQWY5vCk+btsKRIhO32btwfmEt1q0B0zGglADC2papcHT5ICq7ISnqC8FxZmbjX
XERJo4/EaAqLeA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:24 2026 by rpki-client