Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: 1/VXJKzE9RyiZmII5TuS7bwGKbb8gK+rX2t93QawHWc=
Subject key identifier: 23:40:A5:36:84:21:9C:0A:A7:70:73:F2:0A:40:CB:5F:04:8B:AC:2D
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 019CABD9D95C6A9D08FA47433DC36DB5B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:46 +0000
Manifest this update: Mon 02 Mar 2026 00:01:46 +0000
Manifest next update: Tue 03 Mar 2026 00:01:46 +0000
Files and hashes: 1: HSWeI-pcXEHS_St9O3C8_Rn69wI.roa (hash: gjfAtgRKuT6ywaR0yaoqKznKuEzQl2e1Pp41NKZMoGQ=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: lMEVnl+BjG1D8oRTLmpRCAMaADH4ycfnVfvADUY47fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d9:5c:6a:9d:08:fa:47:43:3d:c3:6d:b5:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Mar 2 00:01:46 2026 GMT
Not After : Mar 3 00:01:46 2026 GMT
Subject: CN=2340a53684219c0aa77073f20a40cb5f048bac2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:d5:9a:ca:e8:6c:9c:f6:23:72:d0:13:6d:
3c:f6:6a:17:ce:21:83:7b:75:e9:67:17:bf:c6:53:
2a:17:6b:a8:63:db:d6:15:f6:54:ed:a9:52:e6:cf:
97:91:10:d1:cf:7d:8a:83:71:d3:a0:7f:ee:fc:3e:
88:73:c0:0c:29:b3:92:c3:85:4b:5f:8a:74:40:d3:
63:c1:88:6f:6f:32:24:5c:0d:95:0a:1f:b2:0b:4e:
e8:b6:12:a4:22:e2:ad:9c:98:b3:7c:4d:8d:3b:56:
34:59:39:51:d9:b3:f9:ab:82:d3:07:13:b2:bc:d4:
7f:f7:f2:a7:d9:83:ff:10:b6:4c:65:6b:c1:bc:df:
97:2e:a7:9b:5e:fb:45:d1:45:32:bc:85:37:1b:d7:
43:c5:88:8a:01:f5:37:4a:b1:cf:8c:d7:95:91:a9:
d7:b8:19:ec:9e:af:ee:e8:6c:bd:95:8c:48:0a:ce:
8a:5b:89:fc:a2:fd:14:90:3c:c9:da:59:fd:c7:17:
76:c5:5a:6f:56:af:33:48:33:ae:b7:c4:5e:20:26:
7a:30:2e:23:3d:01:db:03:ce:d3:51:e7:02:dc:5c:
3f:1b:38:a0:7b:e7:3e:24:5e:7d:2e:6f:e1:a4:88:
2b:69:d2:bd:1f:16:16:f5:08:74:8a:1e:d9:a3:db:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:A5:36:84:21:9C:0A:A7:70:73:F2:0A:40:CB:5F:04:8B:AC:2D
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9f:c8:00:7e:4c:ff:90:2e:ec:2c:6c:e8:0e:73:16:bd:07:
14:ee:af:78:b6:e1:c9:04:3c:6b:e7:8a:32:a7:2b:46:c5:65:
54:7c:1e:a8:53:87:dc:a5:c5:2f:8c:d4:0c:f3:2f:95:27:68:
93:9f:9f:db:f9:32:dd:26:2f:a2:a0:d7:11:9b:8f:39:39:e5:
16:8d:3e:6b:d7:35:71:71:b5:09:0d:bb:f4:49:f8:a2:d1:0d:
50:34:ad:84:70:3b:a4:74:08:d6:ad:52:5f:0c:0c:be:58:fa:
55:40:46:42:60:e0:11:26:80:ba:f3:5a:f5:c7:eb:6b:62:b3:
8e:9d:42:75:d8:59:6a:b6:a0:f6:db:5e:2e:c7:7b:1f:2e:13:
0d:41:b5:d2:55:bb:a8:74:af:12:21:39:50:8f:08:ac:10:b7:
98:e3:bf:5c:ea:1d:cc:b8:d4:e4:23:bf:b8:fd:d7:c9:34:ca:
f5:6c:d4:2d:d3:2d:f2:ee:36:76:cc:26:a4:af:43:14:5a:27:
a7:30:a2:64:28:66:ad:f2:54:51:da:24:b2:64:53:92:74:b7:
a5:65:84:55:f6:e0:24:ac:6a:65:8f:8a:18:51:4f:8d:4d:15:
e8:fc:5f:68:ba:be:c3:15:cd:43:42:6b:05:75:69:d3:0e:0e:
40:90:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:19 2026 by rpki-client