Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: hcPh2+lDMNY6kv0c/CG5GxX8VJfzGcvvKjKqf/7ruNs=
Subject key identifier: BC:4F:02:C1:31:C0:6C:D9:31:2D:B4:11:5A:6C:64:C7:F3:D8:78:5D
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 01A0D7CD8D348FF419E297F6AD24FCAB7608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 10BD
Signing time: Fri 25 Sep 2026 09:02:47 +0000
Manifest this update: Fri 25 Sep 2026 09:02:47 +0000
Manifest next update: Sat 26 Sep 2026 09:02:47 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: bQUsieX/thwMQvHjWR+c+n/WhUcwjEOfKbISuzphE20=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:8d:34:8f:f4:19:e2:97:f6:ad:24:fc:ab:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Sep 25 09:02:47 2026 GMT
Not After : Sep 26 09:02:47 2026 GMT
Subject: CN=bc4f02c131c06cd9312db4115a6c64c7f3d8785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:f9:5d:66:23:13:ba:aa:6e:78:70:f0:85:
4a:9b:23:93:0e:bc:1a:52:e8:c6:43:c8:54:a0:06:
00:92:18:70:df:d8:61:92:76:87:1e:0a:42:14:ff:
0b:0c:b9:91:04:df:7e:1b:df:5e:42:0d:8f:c9:63:
ab:db:60:f1:65:1b:e7:e0:2a:6c:ea:4e:f4:b2:f0:
24:3b:8b:48:95:e9:13:70:db:ca:1c:b6:fa:7d:6a:
f1:e6:2a:c1:6b:99:1e:dc:fe:a2:1d:ea:e1:d7:b2:
b8:c4:14:52:9e:ca:2d:7c:1e:c5:45:78:a9:23:44:
6c:49:1c:32:12:70:3d:6a:8d:3e:d2:ce:20:f0:13:
f6:6b:c5:a5:c7:d8:47:fd:93:1e:26:ef:7b:58:1e:
fa:be:b0:e7:0e:96:58:10:10:b5:56:5d:b5:bb:f7:
23:11:2c:e6:32:3d:3f:da:16:04:27:8d:60:5a:a8:
51:f6:ba:72:f4:01:9a:f7:2e:55:f3:2e:5e:e5:20:
e5:2d:e5:27:14:2e:f3:bc:07:54:8e:b3:51:d9:86:
70:ac:74:e0:4d:de:52:a8:f2:97:21:91:ed:2c:1a:
04:44:99:b5:a0:15:62:29:78:38:13:90:4c:88:f0:
42:a9:f2:ba:34:80:e8:ef:1e:b9:5e:42:68:33:0b:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4F:02:C1:31:C0:6C:D9:31:2D:B4:11:5A:6C:64:C7:F3:D8:78:5D
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e4:8c:ff:aa:78:5f:80:d8:4d:59:fc:85:6d:34:ae:ee:42:
ad:f1:99:e8:3a:f6:26:61:a7:57:be:05:c2:ac:47:ea:06:40:
aa:df:11:6b:b7:39:80:60:88:b9:85:84:b0:1f:c3:26:a7:72:
d1:ed:76:ac:29:48:f9:0a:38:1e:5a:88:11:cf:4d:c2:20:de:
d0:04:c5:98:c2:f5:78:b4:38:20:1c:35:54:46:19:77:66:2b:
ad:ff:d5:93:ee:71:fb:7b:c4:0d:7e:3a:e7:c0:75:26:50:94:
9b:b0:0a:cf:95:c3:86:de:b6:4d:89:05:ab:22:c1:95:3a:0b:
96:6a:ff:62:78:80:8c:4e:dc:7b:06:cb:91:8a:4c:47:a8:53:
e0:81:4b:22:bd:28:bf:8c:8c:7e:e5:f3:7d:08:55:31:97:40:
37:f9:13:c2:a4:45:6b:48:a8:fa:bd:2d:b4:57:98:3d:b9:07:
86:c4:90:47:58:70:f6:55:4b:b6:6b:09:77:d2:0c:d2:69:9c:
bf:32:d2:d4:91:30:55:dd:7a:c6:78:52:01:60:45:96:28:06:
b5:9c:52:fa:50:b9:c6:6e:38:cc:a3:a3:a9:f9:f0:ba:2b:97:
10:91:2b:5c:1a:30:da:27:25:89:0d:3a:3d:db:6e:d9:9b:fc:
ed:aa:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:07:22 2026 by rpki-client