Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: Us2N3PlXuf4OWmfl0nCaZyayBucpzSsekGMKxgJPzYY=
Subject key identifier: DF:1F:4E:E9:B8:71:2A:C8:A8:C6:52:4C:FE:DE:73:6A:9F:9A:5B:C7
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019FAC3F30158A67A7AF9EB3825DE2167CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 05:00:49 +0000
Manifest this update: Wed 29 Jul 2026 05:00:49 +0000
Manifest next update: Thu 30 Jul 2026 05:00:49 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: Tr2NvOmO21M6bdx0OlVb1RlUo3BXRFhpeBhKb1vmgoo=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:30:15:8a:67:a7:af:9e:b3:82:5d:e2:16:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Jul 29 05:00:49 2026 GMT
Not After : Jul 30 05:00:49 2026 GMT
Subject: CN=df1f4ee9b8712ac8a8c6524cfede736a9f9a5bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:95:a0:1f:90:7a:e3:8e:e0:85:2a:70:09:
2e:57:32:71:19:c5:1a:51:c7:17:23:cd:81:8b:56:
d4:ae:db:44:a7:57:50:4b:f3:9e:20:64:51:41:41:
2c:33:1c:2b:2d:3e:13:03:c2:71:c6:98:b9:c0:11:
f6:d9:bf:a5:cd:1a:81:32:37:62:c1:3f:36:cd:a0:
ef:73:2f:7c:fc:64:d2:31:b5:a9:e9:83:4e:08:fd:
c8:3a:85:d3:28:90:d1:9f:a4:b3:1f:25:01:3b:71:
d9:e5:7b:da:9d:95:d1:f6:17:15:39:cc:d7:4a:b5:
f6:9c:aa:9b:1a:92:6a:08:f2:3a:2f:8f:cc:16:aa:
62:0f:e5:cf:95:e8:e2:b6:f9:b1:6d:f2:85:5b:19:
cb:fa:a2:48:72:55:2c:40:40:7b:18:72:3f:0e:c0:
38:c9:92:ac:b9:19:b0:a5:0e:97:2d:d6:e9:e5:8c:
ba:c8:8a:53:fe:d6:72:ee:37:30:a9:31:23:38:41:
0e:06:95:4a:e8:c8:60:84:98:8f:6e:a1:49:1a:ca:
5c:07:14:e8:3c:cd:6e:af:cd:25:3c:4c:93:90:98:
d2:3a:ee:1b:3b:4a:12:1e:6c:c3:37:08:08:33:cf:
e7:ca:7e:de:bf:78:b3:32:90:e8:fa:f8:b7:cd:5d:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:4E:E9:B8:71:2A:C8:A8:C6:52:4C:FE:DE:73:6A:9F:9A:5B:C7
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:45:bb:04:6d:ff:7a:97:8d:6a:3e:1c:ae:6e:44:e8:02:bf:
4e:f0:db:c3:5b:85:7e:90:21:c4:15:aa:d1:bb:68:39:6e:63:
8b:b7:21:0c:26:08:9e:ba:79:8e:7a:2a:a9:d0:f9:56:c5:83:
a4:96:10:c2:f7:c1:42:51:b6:90:4b:33:c1:d8:27:80:e0:ef:
5d:9c:f1:8f:c2:c3:d6:b2:02:5e:01:2e:a4:08:fd:99:20:79:
b0:ec:31:e4:ee:19:fb:24:0e:fc:cb:46:7a:5e:2f:d6:d0:28:
09:73:c1:4c:6f:61:ae:40:ea:40:f3:0b:0b:43:9a:4f:0e:b6:
47:be:08:ac:8b:b3:a0:5d:f4:44:84:ac:69:5a:f0:74:64:70:
38:1e:a6:74:d7:9d:17:ad:df:d4:6a:0f:ec:8b:17:9a:72:77:
16:6e:17:a4:61:af:f2:92:0e:a1:dc:cc:7a:18:85:2d:11:26:
96:63:00:91:66:be:ad:c1:3a:9b:d6:61:a8:fb:5f:f2:c6:3d:
09:82:c5:33:bc:a6:5c:1a:92:55:b2:66:00:33:9c:5c:5d:1d:
90:9a:b2:59:6a:71:72:aa:c8:b0:b5:b0:c0:ea:94:12:cc:42:
e2:a2:8f:b8:ee:f3:17:49:98:23:0b:9d:78:0d:5a:ea:12:2c:
e1:63:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:28 2026 by rpki-client