Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: To7vSVnBX0EpHqvRVanDklDRUXEf2OTGfoAEY4UX4vc=
Subject key identifier: 87:F5:06:3A:99:46:22:16:8A:68:50:AF:DE:15:A7:1B:13:75:6E:71
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019CABD8FCBC7F98E1422F389AEAA8B96317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 08D1
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: WuIVR92cqZdcvUveM/41INCSMl+9lk8mDWp6YnB7cgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fc:bc:7f:98:e1:42:2f:38:9a:ea:a8:b9:63:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=87f5063a994622168a6850afde15a71b13756e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:59:54:28:c3:cc:0d:d4:d0:de:db:d5:f6:
58:16:38:b1:44:65:62:26:12:c9:1d:67:81:8e:fe:
99:a1:6f:ed:81:62:41:64:5b:3f:6c:65:02:28:74:
db:61:47:ef:f7:2f:60:c4:7f:ca:3b:f3:6e:84:af:
f3:5c:24:cc:f5:58:e2:b8:ba:8d:04:07:a8:9c:ee:
3a:aa:62:d3:b5:44:db:e6:fe:d7:1c:25:df:6e:40:
b4:96:86:33:67:54:be:fd:8a:8b:60:31:e6:0a:96:
4e:07:33:cb:9a:07:c6:f6:6c:20:0e:5b:4d:f4:39:
b4:0c:bc:28:a9:93:ab:a7:1b:b7:0d:42:81:83:e2:
93:92:f8:68:b3:ca:b6:6c:95:0d:48:e0:aa:a3:db:
03:d5:62:df:0c:c7:2c:31:8e:2a:04:56:4e:f6:1d:
46:df:8e:e3:4e:1d:d2:51:c4:c9:e6:12:bd:61:61:
68:a3:ef:f2:c1:51:eb:df:a0:aa:50:e8:e5:f1:9b:
c0:11:3f:04:6e:85:0a:d0:b7:b6:d4:6a:1e:49:1c:
0c:61:f2:ee:cc:9a:22:d6:d2:5e:45:86:af:2f:14:
1d:50:cb:d3:9a:e0:1d:ef:07:d6:05:7b:cb:c4:2c:
71:3d:4c:ad:34:5f:8b:0e:72:7e:51:8b:08:0b:56:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:06:3A:99:46:22:16:8A:68:50:AF:DE:15:A7:1B:13:75:6E:71
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3f:68:61:64:0d:94:ae:45:6c:95:da:3e:0a:bd:42:26:56:
0c:4b:a7:46:ee:aa:cd:cf:8c:f5:f1:f1:e5:cf:2a:71:6b:7c:
7b:8b:0c:67:e7:db:fa:3a:0c:0d:90:43:b0:60:3e:42:7c:2a:
e4:8f:93:bc:dc:bb:f9:e5:3c:ca:6b:eb:0e:1f:80:ad:54:73:
79:74:5a:50:9d:ba:69:f8:56:b9:72:54:b3:c4:f2:ca:4e:f1:
bb:de:a6:9d:22:22:a0:08:27:0c:0b:cf:f7:6c:d2:26:bb:8d:
4e:c6:a9:23:45:51:46:b5:d7:68:f1:e5:e1:a1:a8:c3:8c:f0:
8d:96:f3:c9:fa:de:87:ba:11:08:31:c1:e8:ea:88:33:b5:63:
f3:dc:b4:9f:cf:0f:2b:65:09:43:3c:b8:b6:b1:45:18:4e:4e:
d1:ee:12:9a:74:6a:2c:72:5e:b8:5c:2c:4a:0f:42:01:21:8e:
48:b0:75:24:3c:ef:24:c6:3d:cf:bb:7b:e0:26:31:e3:48:96:
b6:4d:69:07:81:c1:ad:b0:e3:8d:34:2c:31:f8:8b:f5:24:ed:
07:cf:80:3b:c3:bd:d8:2e:fd:8b:e4:7f:3c:0c:df:00:1e:8c:
4c:39:ed:ad:47:6c:cd:35:41:ba:ad:8e:5e:84:e0:44:59:8b:
0a:5f:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:36 2026 by rpki-client