Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: vhTfs2U3YWTs/FE2JooAmKRcf5rsw51pt6vLmNFTNK0=
Subject key identifier: 69:3B:A5:E3:FF:0B:61:8B:FE:32:38:C2:C7:5F:99:FF:CB:72:1B:D3
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019D98F49C1AA70B4487DEE74F5876E4334E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 01:01:00 +0000
Manifest this update: Fri 17 Apr 2026 01:01:00 +0000
Manifest next update: Sat 18 Apr 2026 01:01:00 +0000
Files and hashes: 1: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
2: Ble-2DKUX-bI_pCO2COt4CKXa8c.roa (hash: CZIHpvsUMQoZP0t5OmkQjhg6lPLENkoG8ZqKq6OJf9Q=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: 1UANLpeZLKWwbOG86I1eTdANCre1zYg1aLYf33r6hDk=)
9: Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa (hash: bZNszqhnT3nG89SByGHQ2OOopVxYZGpnqUauM45GA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9c:1a:a7:0b:44:87:de:e7:4f:58:76:e4:33:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Apr 17 01:01:00 2026 GMT
Not After : Apr 18 01:01:00 2026 GMT
Subject: CN=693ba5e3ff0b618bfe3238c2c75f99ffcb721bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:32:9a:7c:b6:d4:9c:ca:30:58:8c:78:15:
29:b9:97:9e:1d:5e:c6:ad:fa:0f:f8:5a:2e:51:99:
cb:d6:2e:42:34:ce:40:91:8b:a6:55:4a:46:cc:7c:
20:7c:c5:f9:85:82:cd:d4:f6:23:e2:b1:8c:0d:ba:
f8:d9:71:24:5a:ac:f2:6f:39:a3:d3:4f:af:90:12:
5f:05:1a:ba:42:41:5d:ad:68:ed:10:82:43:86:99:
7e:12:c8:7a:42:41:d1:fb:50:a5:bb:8d:9c:7f:11:
8c:7c:ce:87:8b:6c:bf:81:18:f9:8d:58:9e:b6:ca:
00:15:1b:a8:e8:86:9c:a7:3b:6e:03:62:22:9c:af:
3b:7f:41:c8:1a:51:4a:8a:84:9a:b8:88:ab:bb:f6:
3e:eb:b1:78:31:3a:58:98:9a:a2:a8:07:83:28:b8:
6e:42:99:39:cb:b1:e3:19:1f:5a:33:a9:b8:de:0d:
d8:91:43:15:df:99:54:30:d4:fd:a9:07:fe:06:9c:
5a:1d:bc:61:80:57:ee:46:6e:d3:a3:8b:2f:93:74:
f8:17:93:76:56:c2:f1:8b:7c:5d:04:10:0b:6e:53:
8a:cf:18:00:a0:f0:d3:18:aa:d9:a5:88:89:e1:cf:
03:d3:dd:13:84:3f:fc:10:50:55:b2:29:86:ee:7c:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:A5:E3:FF:0B:61:8B:FE:32:38:C2:C7:5F:99:FF:CB:72:1B:D3
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8b:b7:31:c2:fa:6d:dc:bf:6d:21:8c:ba:7d:76:29:c7:59:
20:66:fa:bf:29:5f:38:26:c9:bf:31:38:91:23:f8:af:81:ef:
fe:b7:7e:79:5d:65:d1:e3:fa:06:46:fa:86:49:8f:ed:2b:70:
17:94:b8:77:3c:0d:80:ea:11:58:e8:2a:52:d1:7f:84:eb:63:
11:32:fb:8b:af:71:fe:a0:9e:f7:11:ab:6e:35:5c:37:4c:f5:
94:c2:1b:32:a1:ef:e3:d5:1e:77:4e:d9:e9:b6:10:fc:3a:23:
82:b3:c6:93:93:2f:22:35:a5:d9:af:f1:23:be:b0:05:96:51:
1a:05:97:fe:2d:71:b0:d4:e0:e7:f9:cb:2b:0a:ea:a7:bd:8e:
d2:22:9a:7f:8e:7f:a0:47:31:ed:4d:c6:e5:d7:ef:51:b4:11:
d6:fd:6a:8b:cc:d9:6f:96:eb:8d:2a:90:3b:e5:6a:af:dc:d8:
cc:64:b4:b8:6e:2e:51:be:9f:47:e2:c3:dd:ee:5e:54:68:64:
ed:61:68:2d:4d:7a:42:42:f5:4b:d3:77:a3:fb:3c:a7:46:9e:
78:49:5f:ba:45:72:56:07:21:94:2e:b2:c8:f3:d9:56:a0:16:
a7:de:44:98:f1:8d:06:f6:c6:06:1f:6f:1a:5c:9f:13:09:2e:
c1:25:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:51 2026 by rpki-client