Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: vDwztVjmLru88taDnNpxvJF1XoX+llmzqCXBSOq1hXQ=
Subject key identifier: 20:C1:30:95:55:EC:7C:C5:3D:4F:D4:D0:4E:43:3C:56:52:37:0B:DF
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 019DA378D1E9F51D940DEAACFC8C05B30E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:37 +0000
Manifest this update: Sun 19 Apr 2026 02:01:37 +0000
Manifest next update: Mon 20 Apr 2026 02:01:37 +0000
Files and hashes: 1: E5C4exhWtkl2R0P0jcBmSGj62IA.roa (hash: v3ldouDK+c1K5y1d3zxuU90wd9bVHuPJX+81IT9PodY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: S422yFgcp/JodtZ8E3+Zi2mbOevvVa1SLlfc5d5cU1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:d1:e9:f5:1d:94:0d:ea:ac:fc:8c:05:b3:0e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Apr 19 02:01:37 2026 GMT
Not After : Apr 20 02:01:37 2026 GMT
Subject: CN=20c1309555ec7cc53d4fd4d04e433c5652370bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:a1:93:cb:0a:d8:c7:88:52:65:f0:53:91:
d4:a8:3f:f1:6f:89:55:aa:66:65:c2:9e:7b:73:e4:
33:51:12:d9:24:dc:31:81:fb:a4:ce:3a:8e:4e:2c:
bf:0b:65:54:0e:96:97:89:62:13:e4:8b:4d:e4:a9:
76:1a:db:00:f0:f8:1e:30:4c:cc:81:4e:c7:27:4a:
86:a5:34:11:a4:f6:5a:e5:49:5f:9e:ea:95:64:29:
3e:04:09:df:0c:43:40:8e:27:9b:0f:1f:fc:45:a5:
4a:c5:d2:9f:0a:7e:25:e2:b2:6c:d1:72:52:d0:64:
ff:48:48:a6:3b:cf:84:4d:f3:6a:de:a8:20:84:e4:
1b:b7:1e:67:c6:c3:45:2c:52:76:5a:5c:3b:a3:9c:
16:69:07:f2:80:ec:b2:35:90:2d:86:58:fc:04:00:
c8:49:33:4c:79:1b:a6:96:e1:cb:0e:c0:78:85:7f:
38:f1:ae:d7:6b:e9:64:e5:37:99:e9:90:1d:46:db:
f2:da:9f:7f:0f:df:24:25:43:5e:90:df:04:1d:59:
56:97:f8:fc:63:dd:18:5b:b3:88:30:22:a0:14:08:
2c:86:39:50:31:2b:4a:32:f6:65:ac:7b:f4:91:97:
0f:12:a7:ab:23:6f:83:f5:c6:d3:32:2c:fa:10:25:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:30:95:55:EC:7C:C5:3D:4F:D4:D0:4E:43:3C:56:52:37:0B:DF
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d1:ac:65:4d:8c:74:1e:bf:59:2b:8f:2d:c9:57:60:5b:7e:
51:f8:93:72:5d:94:e1:af:18:79:64:66:74:ba:aa:eb:e3:2f:
93:fe:4e:a1:49:fa:c8:5a:fd:00:d0:c8:51:24:36:1e:19:a8:
f6:f8:f3:92:a8:d6:48:25:f1:d4:5a:0d:dd:4c:ec:f4:bb:40:
e8:79:34:d2:3b:e8:b4:40:e6:ec:79:4c:7e:35:5f:20:17:c3:
a0:62:de:df:a1:7d:41:af:74:98:41:13:3c:fb:2b:cb:ea:d9:
01:62:80:eb:4f:97:49:54:45:fe:34:29:fa:cf:76:e4:f5:ae:
84:28:e5:8c:ac:2f:30:d6:50:55:cb:4c:89:9a:6c:db:b1:03:
64:34:7f:29:8b:20:c4:48:de:5d:5f:d4:d3:92:3c:cc:be:cb:
ba:d3:8b:de:88:f2:46:89:70:87:73:7b:68:c3:7f:b5:e8:3d:
37:39:34:34:a0:ee:a2:49:79:37:7e:35:a0:6a:46:7d:03:a5:
b8:f3:b3:a9:14:6b:00:fb:8f:fe:a1:81:98:fc:81:23:9d:3d:
0c:30:e9:29:57:2a:59:b9:7b:cd:fc:29:8e:21:84:ed:fa:62:
78:9e:57:ea:cc:38:8f:86:d8:21:93:5d:fd:d6:6a:fa:72:2a:
9d:be:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:52 2026 by rpki-client