Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: qhX2mX29GPBNVAAPgr9wn1F45PRDmU45JeEpcg5nU6I=
Subject key identifier: 69:DD:1E:FB:CF:A9:4B:F6:BC:96:7F:14:4A:4C:6E:4F:2F:BF:AE:97
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019CAB347C21E1B99DC4891B4FA79F1355A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: yZkrwhc/2Q8Lo/jHMF/FIHi6R2AWwndUOj3WZAZBtBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7c:21:e1:b9:9d:c4:89:1b:4f:a7:9f:13:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=69dd1efbcfa94bf6bc967f144a4c6e4f2fbfae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:3e:84:df:48:11:11:84:37:40:46:16:fa:
61:a8:13:48:5e:86:3a:48:63:5f:03:8c:69:db:5e:
93:b4:00:c3:82:aa:ae:aa:93:d8:f1:9e:fa:3b:46:
27:83:5c:fd:06:52:04:be:c0:fb:29:94:18:2a:09:
c2:18:9f:32:2c:5e:53:20:3e:a5:db:8d:e7:07:87:
b4:8b:50:da:dd:61:b9:03:77:c1:c3:3e:5b:83:82:
50:7f:11:9f:88:99:fa:ab:5c:5f:12:7c:2e:64:f7:
ff:69:c1:64:08:bc:1b:26:f3:e6:2a:f3:ae:b1:62:
32:a4:a7:6a:df:9d:d9:8d:cf:f2:94:89:29:a1:95:
f7:4a:ef:63:7b:9e:5d:fc:63:5b:66:1d:da:3b:e4:
a5:bf:ce:f9:cc:a5:d1:d2:f9:56:ab:15:42:c4:eb:
6a:e9:11:c0:28:28:ca:5b:76:31:56:48:f5:4b:00:
86:a7:3d:df:6a:6e:e6:e2:68:c1:8e:f3:ed:6c:56:
10:96:d7:41:2c:aa:3c:47:bf:29:fd:3c:67:f1:3d:
c1:29:74:77:1a:86:ba:90:9a:3f:5a:76:0b:1a:2d:
17:15:00:2d:38:85:b0:83:cb:1c:0d:1e:ee:d0:cc:
f0:fd:d2:a4:d6:08:c8:50:5d:bb:23:00:17:01:a4:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:1E:FB:CF:A9:4B:F6:BC:96:7F:14:4A:4C:6E:4F:2F:BF:AE:97
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3d:56:ff:23:06:de:dc:d6:00:d7:98:03:3a:30:93:0b:09:
7b:85:0b:50:99:8a:f4:46:0f:8e:ee:c0:34:69:67:2e:2e:0c:
fc:b0:4f:ee:47:cf:bb:da:50:b8:86:24:1a:d1:76:c8:d4:97:
f9:26:b3:e4:d2:b3:68:0c:13:7b:9f:15:0e:c0:de:2c:14:a1:
9e:7f:15:14:87:25:94:c3:8c:00:97:01:59:8d:f8:00:57:69:
9b:5c:84:c8:5c:20:5c:6b:c9:2e:a1:2d:b2:b9:41:6f:e6:f4:
90:99:d6:fa:82:4b:01:d8:22:7a:ad:89:ff:ef:10:5a:7a:b3:
72:70:1b:f0:06:1f:af:b9:e6:c3:04:17:b9:02:9e:2d:ca:40:
31:62:81:c1:ae:9a:6a:61:1e:60:b7:65:22:cd:e5:6b:be:14:
05:b8:4f:bb:c0:42:fd:d9:02:e9:a5:c9:f6:22:3c:c5:b4:88:
64:68:9e:cc:8d:10:b1:84:7d:ef:87:ad:9f:dd:32:03:f5:91:
af:d8:56:f2:a2:aa:ff:d8:3a:99:bc:d0:fb:87:d5:78:58:32:
56:9d:fa:f9:d0:61:ad:c1:e0:f8:65:0f:a3:61:34:f7:42:36:
36:e0:e7:a2:32:0c:80:82:f8:ad:3a:b5:fe:a2:0d:a4:58:58:
24:60:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:40 2026 by rpki-client