Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: W8GZrJdN5G+k/NjU56oVLrUN+yiS/AGt3mIrIPrG6RA=
Subject key identifier: 9F:19:B7:5A:0C:5C:E0:2B:23:A1:B6:EA:BB:D4:9A:07:AB:4C:EE:C4
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019ED386CC533D286D24EABD787ED7C80DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1967
Signing time: Wed 17 Jun 2026 03:01:27 +0000
Manifest this update: Wed 17 Jun 2026 03:01:27 +0000
Manifest next update: Thu 18 Jun 2026 03:01:27 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: fr6+5Sz+8K75EwgrEOF4NOFrb/XCxMjgb59U0yKlILc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:cc:53:3d:28:6d:24:ea:bd:78:7e:d7:c8:0d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jun 17 03:01:27 2026 GMT
Not After : Jun 18 03:01:27 2026 GMT
Subject: CN=9f19b75a0c5ce02b23a1b6eabbd49a07ab4ceec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:55:35:17:5e:e8:75:72:db:2c:5b:20:de:
e5:0e:f3:44:63:32:bd:11:fc:8a:20:4f:19:40:6e:
b1:60:e8:f9:c1:91:d9:9c:c8:2e:54:91:1c:5b:51:
e0:e6:1d:91:68:e9:a0:55:40:c6:8a:16:09:bf:74:
81:a9:d5:2c:0c:46:02:02:cc:d4:b7:32:b4:f9:d0:
8d:36:1e:ba:91:73:cb:cf:c1:fd:ff:fd:51:5c:f7:
f5:13:9b:87:e1:9b:e7:b7:af:00:81:fd:1b:3e:f6:
27:ac:8a:88:4d:4e:9e:f2:16:2e:a2:0b:b8:c5:8c:
e4:b8:73:ff:5e:8e:73:fa:f6:36:ec:c0:c7:f7:3c:
4d:49:61:5d:8d:87:4b:f7:be:2f:45:4a:d0:34:2e:
b2:ce:6f:c4:40:5b:7d:ad:d4:ad:fe:df:e7:76:a9:
af:58:3a:a5:d8:7f:62:5f:d1:13:13:f3:8d:54:6a:
46:61:3a:df:3b:7e:96:d9:f5:f1:49:d1:11:59:83:
dd:6f:18:f3:3f:1b:7e:be:e1:dc:28:db:9d:c6:06:
1c:f0:a2:4a:97:71:fa:f7:6c:dd:f5:55:80:dc:9f:
8d:8f:e4:c0:61:16:13:23:86:91:fb:10:0b:a9:ff:
f7:88:cb:35:2f:be:38:1c:d7:16:78:a2:70:d2:eb:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:B7:5A:0C:5C:E0:2B:23:A1:B6:EA:BB:D4:9A:07:AB:4C:EE:C4
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:69:5e:9c:65:9c:dd:c6:75:4b:c2:ba:12:f7:6c:e7:dc:
54:5b:c7:da:55:97:4d:e5:4f:66:be:db:1f:e8:9e:87:b9:a2:
79:0e:86:f7:72:3c:ff:9d:95:60:a2:d9:e6:e5:0e:22:63:e5:
72:ea:2d:41:eb:a1:0c:ba:f8:ec:10:a1:22:67:26:14:5d:b1:
28:f7:16:e1:d6:5f:4d:ef:70:56:ff:7b:e9:b4:7e:57:58:1f:
83:af:1c:f6:78:d2:9e:25:90:c7:11:ba:61:f1:01:09:12:8a:
82:89:bc:7c:9b:cd:53:3d:d1:bf:ba:07:bd:70:3b:58:69:3c:
61:ce:b8:d0:96:06:c5:63:9e:1e:d4:27:dd:b6:7e:09:58:0c:
19:3a:bb:40:7c:31:03:5d:12:64:3b:35:43:1e:a8:10:81:7e:
bd:ed:46:ad:eb:a5:37:0d:0d:8a:83:73:94:dd:e1:e3:6e:98:
f7:ff:03:d0:40:c2:11:6b:d4:0e:8c:5e:ec:2f:46:5e:93:a0:
23:dc:f9:83:a2:20:9d:d9:59:8c:da:70:18:42:cb:76:a9:a8:
98:33:f0:77:31:a9:ff:67:dc:e5:7d:fc:ed:ef:6f:be:82:8f:
e2:58:bc:fd:62:a3:f1:f5:7d:72:d4:d2:64:6f:9c:6b:a5:20:
86:86:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:14 2026 by rpki-client