Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: uMiHPENSPd8+Tbx+0oDfSrzf1fGisq1+kumhHEYk9Mk=
Subject key identifier: AE:63:24:32:A2:EE:BF:92:3A:9F:E5:99:C0:8D:FC:75:B2:94:05:00
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 019EC2C95358E64013D1C54F79BB05907FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0FA9
Signing time: Sat 13 Jun 2026 21:00:34 +0000
Manifest this update: Sat 13 Jun 2026 21:00:34 +0000
Manifest next update: Sun 14 Jun 2026 21:00:34 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: m5KfB9B1Ya91QGC3GgsqY4kurDIhX03ujqtOcOQLA5Q=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:53:58:e6:40:13:d1:c5:4f:79:bb:05:90:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jun 13 21:00:34 2026 GMT
Not After : Jun 14 21:00:34 2026 GMT
Subject: CN=ae632432a2eebf923a9fe599c08dfc75b2940500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:1a:d2:06:b4:f5:a4:56:f2:0d:11:13:55:
c8:a3:58:fa:fc:42:70:28:82:b9:23:78:0c:eb:7b:
a3:fe:75:74:20:3f:1a:c2:da:dc:f2:9b:4b:a9:42:
8a:87:47:e9:01:9b:06:d3:b3:19:19:d9:1c:d5:56:
3e:04:19:a9:22:95:26:52:0d:5a:7a:2f:81:10:0c:
ff:bb:13:eb:f5:88:a7:6b:67:26:7b:68:e5:0d:b7:
80:92:b8:11:9a:0e:55:19:e2:93:09:c2:2a:c3:a0:
2c:57:6e:cc:1e:d0:17:f5:8e:c7:84:24:b5:fb:24:
d4:ec:b7:00:0a:98:d3:ad:95:5c:b1:25:a2:3d:bb:
84:40:c5:c1:44:82:24:4e:67:fc:88:5d:4d:f1:40:
42:a8:d0:29:eb:80:06:5a:28:80:dd:f8:51:aa:a9:
28:b9:2c:8f:6e:98:40:6e:36:75:2b:40:34:93:76:
a0:0e:cb:cf:8c:82:27:1c:32:59:4a:d3:79:d6:2f:
cb:02:37:10:85:c5:cb:c4:61:54:dd:f8:e4:1c:a4:
e2:fe:f7:40:8a:96:a7:ff:8d:2a:ec:4b:7e:eb:7c:
df:b1:e2:e2:a8:70:1c:56:d4:12:78:fc:89:36:27:
12:14:d6:a8:22:69:c8:13:c8:85:8b:2b:3b:cb:f2:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:24:32:A2:EE:BF:92:3A:9F:E5:99:C0:8D:FC:75:B2:94:05:00
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:82:5e:a8:da:1a:92:2f:21:f3:8a:a1:62:79:82:4a:ea:2d:
d3:5e:0a:ec:45:bb:20:b9:75:43:cb:fb:a0:58:05:87:22:05:
75:bd:8e:e4:28:3c:7c:86:2e:2b:d9:29:74:09:e6:e3:19:39:
48:df:72:55:1f:0b:52:89:77:41:db:34:4b:c6:8c:bc:7b:f2:
b6:05:9a:f3:4d:15:a5:fa:5f:b6:1d:6d:bc:70:4c:92:34:52:
39:83:20:2d:4b:73:da:1e:53:68:f6:45:47:0e:16:ab:f1:68:
a8:19:85:57:e5:35:84:47:a8:9b:5e:cc:ba:a2:18:59:10:78:
3e:8a:c4:76:e9:58:ae:d8:38:42:eb:3a:96:9b:9e:fb:0b:30:
53:79:c7:8e:5e:78:4a:f0:b3:d4:75:5f:c4:3b:1b:7f:f2:a4:
4b:37:99:2d:26:ed:1c:38:d7:05:78:70:d8:6b:5a:60:5b:4a:
0f:9b:74:dd:8f:ec:c7:88:d6:bb:42:aa:c5:c7:67:2b:97:44:
90:ba:a6:be:8f:26:75:68:87:89:fa:fe:11:00:56:32:8a:58:
1d:7e:c6:f1:f8:38:51:1b:80:0b:79:15:d1:98:3f:03:c7:b1:
d4:50:84:4d:62:3e:7a:90:15:77:8d:13:69:78:4a:9c:31:a5:
87:b0:7c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:25 2026 by rpki-client