Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: uFD2FRQfBZ01022JHQNo0qHrFZLh6A/AL84Kk06I4sg=
Subject key identifier: 6C:5B:B2:8E:2E:4B:7B:44:58:A8:78:AE:7E:72:A5:ED:F8:CE:19:37
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019CABA1D40FC644DB37263F826D52B18CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: JkzkgTeNsiUdwHh3+/V0f2FZR6uPpiTyPSuhDP/PpUE=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d4:0f:c6:44:db:37:26:3f:82:6d:52:b1:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=6c5bb28e2e4b7b4458a878ae7e72a5edf8ce1937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:f5:74:b5:34:03:e3:32:cd:b6:c4:e2:93:
88:0d:66:67:81:53:a7:65:c3:6d:45:ea:b8:8c:38:
af:31:53:2e:52:be:f1:55:71:96:7e:36:18:d5:28:
6a:2e:42:1f:bf:40:b5:6e:10:09:d0:d3:26:c5:36:
95:e1:db:b6:c2:b7:9e:7c:0a:ed:5b:68:82:37:a0:
4a:f6:e3:7a:3a:70:44:e4:04:98:42:0c:1e:b3:3c:
89:d2:5e:11:1e:55:b4:54:7d:f5:b4:0f:14:80:2a:
83:11:59:38:24:a6:79:2a:d8:70:3b:1e:00:f2:21:
65:60:1a:4f:6d:14:2c:df:4f:83:cf:60:0e:26:70:
eb:7b:8b:63:89:7d:39:f1:e8:c2:6f:c3:d2:b5:c9:
8a:e1:a9:42:11:d0:07:13:03:85:c4:f6:be:a4:33:
6b:1e:75:5c:c5:92:f9:89:65:2e:fc:e4:78:76:27:
84:39:eb:0d:fe:1c:67:97:23:21:c6:2c:8c:9d:d4:
db:d1:58:78:cf:3c:7b:70:6b:9e:de:f8:a0:6f:7e:
71:d0:a4:88:16:d2:b1:a6:61:54:21:3f:c1:7b:d6:
2f:22:18:bb:24:8a:c9:eb:49:f8:90:d4:ae:de:f0:
fe:62:7a:84:d8:af:79:31:0c:23:45:8e:72:74:e0:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:B2:8E:2E:4B:7B:44:58:A8:78:AE:7E:72:A5:ED:F8:CE:19:37
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f9:1f:a4:db:69:03:49:29:85:ba:bc:22:7b:dc:7c:0c:22:
42:73:34:b4:64:bc:b5:4f:00:a8:48:52:d9:c3:46:7d:3a:b7:
76:ab:f1:d4:09:75:50:da:77:70:b9:b8:88:e2:70:cf:03:ff:
df:0d:c1:b9:83:a2:b6:8e:a1:6a:07:6c:28:ee:b2:3c:e1:95:
01:b0:1a:dd:f8:1f:79:4d:b8:6b:46:ce:a2:83:bf:e7:71:61:
17:df:50:84:85:6b:78:c8:c8:6b:aa:c1:7c:6a:9f:eb:2e:6b:
d9:7f:4b:44:8b:8f:21:d9:25:33:2b:74:8d:06:61:24:84:e2:
d2:76:12:93:14:79:0f:af:bd:c6:26:71:c0:0f:19:be:a8:35:
bb:e9:ab:21:ed:9c:f2:8a:4e:f6:64:c6:6f:21:b3:b3:5d:66:
ff:fb:07:f1:66:c0:75:f4:15:93:6e:07:c5:cb:a8:83:0d:af:
99:b1:da:28:0f:43:be:ef:f4:ae:22:05:38:a8:9c:5f:72:43:
2e:0f:33:dd:c3:29:fc:46:c6:3c:00:f9:86:6b:78:d9:90:e8:
e6:e7:9a:b6:19:f6:77:86:fc:36:ef:1a:9b:26:4b:2c:df:b0:
93:54:8d:df:82:d4:1b:91:07:b3:8f:c0:db:34:e3:58:a4:90:
9a:09:9f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodQPxkTbNyY/gm1SsYzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0
ZGY4MDYwHhcNMjYwMzAxMjMwMDM1WhcNMjYwMzAyMjMwMDM1WjAzMTEwLwYDVQQD
Eyg2YzViYjI4ZTJlNGI3YjQ0NThhODc4YWU3ZTcyYTVlZGY4Y2UxOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJr1dLU0A+MyzbbE4pOIDWZngVOn
ZcNtReq4jDivMVMuUr7xVXGWfjYY1ShqLkIfv0C1bhAJ0NMmxTaV4du2wreefArt
W2iCN6BK9uN6OnBE5ASYQgweszyJ0l4RHlW0VH31tA8UgCqDEVk4JKZ5KthwOx4A
8iFlYBpPbRQs30+Dz2AOJnDre4tjiX058ejCb8PStcmK4alCEdAHEwOFxPa+pDNr
HnVcxZL5iWUu/OR4dieEOesN/hxnlyMhxiyMndTb0Vh4zzx7cGue3vigb35x0KSI
FtKxpmFUIT/Be9YvIhi7JIrJ60n4kNSu3vD+YnqE2K95MQwjRY5ydOBcVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxbso4uS3tEWKh4rn5ype34zhk3MB8GA1UdIwQY
MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt
OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx
LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfkfpNtp
A0kphbq8InvcfAwiQnM0tGS8tU8AqEhS2cNGfTq3dqvx1Al1UNp3cLm4iOJwzwP/
3w3BuYOito6hagdsKO6yPOGVAbAa3fgfeU24a0bOooO/53FhF99QhIVreMjIa6rB
fGqf6y5r2X9LRIuPIdklMyt0jQZhJITi0nYSkxR5D6+9xiZxwA8Zvqg1u+mrIe2c
8opO9mTGbyGzs11m//sH8WbAdfQVk24Hxcuogw2vmbHaKA9Dvu/0riIFOKicX3JD
Lg8z3cMp/EbGPAD5hmt42ZDo5ueathn2d4b8Nu8amyZLLN+wk1SN34LUG5EHs4/A
2zTjWKSQmgmf3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:09:03 2026 by rpki-client