Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: Vs88f59zbVo6lwg49UpWvllWPg1ui/Bj4n8U614WkPI=
Subject key identifier: 58:64:28:65:39:FB:5E:77:6D:4B:41:7F:5F:E5:16:7E:39:57:36:89
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019FAA888DD48ADAB406F0E7B6D01550668D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0A5E
Signing time: Tue 28 Jul 2026 21:01:43 +0000
Manifest this update: Tue 28 Jul 2026 21:01:43 +0000
Manifest next update: Wed 29 Jul 2026 21:01:43 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: UXYF0NKlTcoUopjEBfotavbAhbcZuqgFIY7B0Z0l4WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8d:d4:8a:da:b4:06:f0:e7:b6:d0:15:50:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Jul 28 21:01:43 2026 GMT
Not After : Jul 29 21:01:43 2026 GMT
Subject: CN=5864286539fb5e776d4b417f5fe5167e39573689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:49:7a:bd:c8:00:2a:3c:69:6c:b4:a5:e4:
d7:8e:d8:9b:e3:1a:af:a6:8b:ad:12:d8:0c:37:57:
95:1a:02:c6:51:16:02:e7:79:a6:3b:5d:ce:0c:81:
01:92:51:1c:79:ac:5b:af:df:86:fa:e5:c4:bc:2f:
67:b2:20:fc:72:7e:8d:5c:0e:63:62:8e:85:d1:9a:
bf:25:57:a7:8b:43:0b:4e:e9:b5:da:45:32:63:32:
77:9c:e5:3c:72:13:ef:e8:10:fe:68:f7:fa:ae:f0:
ba:ad:04:f9:e8:ba:c3:be:17:4c:ca:f8:4d:42:2d:
73:ef:1a:84:aa:62:32:f0:1a:b8:ea:67:42:36:7a:
d9:ef:3d:29:8d:40:d8:92:b5:59:3e:19:6f:31:23:
9e:0d:5a:52:a4:33:ea:2a:c7:01:ef:02:8e:a0:ea:
19:d2:48:8a:31:57:f1:d4:52:ab:6c:5a:e5:23:66:
61:58:34:0e:2d:6c:a7:b7:8b:4e:79:47:cc:08:53:
48:7b:df:43:8a:a2:34:fb:d7:ce:6f:41:52:02:74:
9b:ae:2a:18:30:9d:77:ac:1b:56:6b:7f:4d:84:c3:
a2:c7:45:40:60:ef:64:e3:3a:3c:57:ad:65:88:a6:
23:61:65:57:e2:a3:83:e9:56:8b:b7:fe:e0:f9:13:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:64:28:65:39:FB:5E:77:6D:4B:41:7F:5F:E5:16:7E:39:57:36:89
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:77:5b:ff:dd:dd:b4:88:54:d6:ca:83:45:4a:61:23:83:76:
ee:3b:ab:70:f6:56:20:36:6d:4e:1c:2b:16:27:8e:12:68:23:
ba:fe:5c:26:13:7f:c0:40:58:88:85:08:9c:26:8c:b6:43:87:
4a:69:80:16:23:dc:12:f9:85:6f:5f:89:b9:a4:89:96:48:83:
77:bd:6d:6b:48:04:c0:3f:57:1e:eb:c6:dc:73:63:1d:82:cb:
63:57:7c:b8:ec:2b:20:0c:d6:52:7d:29:ac:d8:fe:6f:dd:e3:
f1:c7:1b:be:69:bf:e2:53:ea:0c:81:bc:36:8c:c0:6a:08:87:
f7:7f:78:72:51:a2:4e:a2:4d:cd:9f:bb:b1:be:8f:aa:d0:6d:
20:e4:6e:57:d4:4f:80:8f:7f:68:cf:ba:cc:89:e3:b4:ee:99:
71:29:6d:71:ae:cd:51:ab:fb:68:c1:41:ff:04:11:0f:cf:42:
00:7c:80:bd:5d:93:69:96:b1:6c:61:53:6f:55:b1:05:78:da:
bd:eb:a6:11:43:3d:21:d8:a4:49:ec:c6:7e:ac:b3:78:d5:7e:
9f:02:83:a4:8b:97:d8:13:48:71:fe:67:10:68:e2:f7:55:fe:
28:f3:bb:ac:6b:a3:dc:fc:d9:ab:f1:dd:03:85:6b:26:c4:66:
f9:77:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:09 2026 by rpki-client