Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: x/YcQO1iuYo0e1zhPm3JYDdiz5m3OI1QDXQL4Ow+Chc=
Subject key identifier: 1C:80:15:04:81:29:66:75:AA:1E:58:C8:A1:05:BE:55:4F:2E:D1:50
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019CA9EAE4C1ABACFEA7E5D7D62051C706DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0E93
Signing time: Sun 01 Mar 2026 15:01:09 +0000
Manifest this update: Sun 01 Mar 2026 15:01:09 +0000
Manifest next update: Mon 02 Mar 2026 15:01:09 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: WeWf5+xbUdzj5IbdWWvEpaXX7j2RPSP2IrarCP5P3ok=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e4:c1:ab:ac:fe:a7:e5:d7:d6:20:51:c7:06:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Mar 1 15:01:09 2026 GMT
Not After : Mar 2 15:01:09 2026 GMT
Subject: CN=1c80150481296675aa1e58c8a105be554f2ed150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:e7:b0:73:a8:b6:f7:ad:e5:43:dc:26:86:
cc:5d:63:33:2e:52:e3:38:c6:11:dd:a7:2e:5a:a5:
78:71:58:9f:3b:3e:4d:9c:fb:fb:f9:b8:c5:f9:97:
19:18:93:1d:88:1b:b8:8d:c7:74:2a:fd:f7:25:97:
09:bd:b2:24:5b:f8:bc:b9:57:08:1f:dd:d1:01:16:
e9:f5:68:1d:0b:55:57:0d:4e:69:44:ba:92:11:24:
e8:83:16:ec:ee:f5:a7:7b:9a:1b:71:1b:0d:4a:74:
e2:0f:6d:bc:3d:03:15:b9:7e:97:16:a0:9f:f9:86:
63:da:58:e5:e7:75:ea:ce:c7:cf:85:be:b4:e3:d8:
51:d1:45:ec:cf:73:f4:fa:32:be:ff:96:9c:9f:55:
3b:28:b8:65:0a:b5:bb:a0:9d:37:8a:9c:5a:64:8d:
36:fd:b6:75:de:3b:11:3f:75:49:20:1b:f1:78:aa:
2f:42:19:56:c2:d8:4e:9b:96:32:af:e8:2d:e7:7e:
5a:42:26:e3:c5:fe:8d:93:77:2b:db:7a:8d:0f:36:
b9:eb:7c:33:ef:8d:f2:23:aa:84:c5:02:5a:7b:a5:
48:37:a9:78:e6:2f:57:cd:6c:a6:19:11:6a:fb:df:
ad:35:0f:41:87:89:9f:38:a7:4b:0c:e1:ec:ea:17:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:15:04:81:29:66:75:AA:1E:58:C8:A1:05:BE:55:4F:2E:D1:50
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:d0:e0:f5:e1:14:39:31:83:8f:f1:5f:48:3e:ad:5d:5f:
dc:54:88:45:b5:c9:15:0d:ee:c1:05:59:ca:56:5c:45:6c:b3:
2d:a0:10:a1:4f:22:53:8b:82:1e:3d:87:e4:cb:b1:6a:ee:d7:
6f:b0:f5:28:ac:2e:5c:ec:cc:16:dd:ab:ed:d7:71:12:1c:91:
71:26:37:51:80:47:1a:29:49:94:54:5f:16:a9:db:0a:70:40:
d2:3f:ca:72:b1:a9:4a:22:2c:e6:26:52:1f:7f:03:e3:c9:cb:
a9:80:d2:c7:79:c5:3c:40:b0:2a:98:7c:4f:bf:a1:21:97:25:
e9:79:70:3a:9a:80:51:47:28:3e:7f:f4:81:49:6b:f3:f5:b7:
39:97:5f:9f:89:04:a6:5e:59:cd:bc:41:1b:41:2e:92:c8:7f:
df:3d:da:15:86:b2:d8:d3:5d:0b:4d:cb:3e:09:05:d6:ea:9b:
46:30:de:63:f0:b3:9b:4f:41:8a:63:45:29:00:8d:eb:db:3b:
a5:02:02:b8:7e:48:f0:d7:a3:4e:5d:44:31:ab:e5:13:53:2a:
1e:08:57:01:9e:65:a2:58:b7:11:08:47:97:d4:53:e4:32:cd:
56:1f:af:c4:cc:95:e5:79:49:c1:5a:c3:29:c5:4c:e3:32:ab:
fa:eb:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:20 2026 by rpki-client