Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
File: ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft (raw, json)
Hash identifier: GOKT+wCD2Lnz421FN7VtVCF8DmyEw6XHX2biZapU1TY=
Subject key identifier: 82:58:67:F0:EA:60:C4:73:2F:BC:A8:F3:92:2B:CF:A7:4B:99:F1:BB
Authority key identifier: 66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
Certificate issuer: /CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Certificate serial: 01A0CA46D4577FBDEC2BF3B27E91618A8E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
Manifest number: 0119
Signing time: Tue 22 Sep 2026 18:00:34 +0000
Manifest this update: Tue 22 Sep 2026 18:00:34 +0000
Manifest next update: Wed 23 Sep 2026 18:00:34 +0000
Files and hashes: 1: XCBgBb40KAFNV8_NTuAh4kKrwoc.roa (hash: zjjSUJaypws5+cHHwDC46HZi6SOAqaNmSSp20fnQ/zo=)
2: ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl (hash: d5tg1Mav6uEyUYmZdWpDGw+oNHltWLthKK9QdApo5JA=)
3: enNwWa_tjEADj60hMM9KCK674dI.roa (hash: jbZhyNpL/OUred4wU6osJUOuoDw7EZkVk6iISt/NlJo=)
4: mvMfPRH6Mk3EjG0E4WCshPoSRK0.roa (hash: wR4V3iYm4lRZUfpxuBz7lXadGQ4ppLA7EP2UVUE9PYw=)
5: urNZqraMe24QrD8E6aBXbm8Rda8.roa (hash: 8iEEx3bYaRsI09sBEMgTKSlraFYwfmKRddI/LwDyHYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:d4:57:7f:bd:ec:2b:f3:b2:7e:91:61:8a:8e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Validity
Not Before: Sep 22 18:00:34 2026 GMT
Not After : Sep 23 18:00:34 2026 GMT
Subject: CN=825867f0ea60c4732fbca8f3922bcfa74b99f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:4d:a3:a2:6b:20:a0:18:58:9b:72:50:6a:
af:b5:37:9e:41:ab:4f:85:68:19:e0:82:74:d5:3c:
59:a8:38:c0:29:01:43:ef:33:6d:ae:5e:10:61:d0:
f3:b1:f7:4f:c0:d9:d5:85:80:5f:9a:67:54:f1:1b:
dd:53:77:e6:f0:2b:78:32:cc:89:d0:ec:0a:98:37:
98:a7:fc:99:b3:c6:5b:1b:d1:7f:b0:f8:c0:bb:30:
ec:4a:67:8c:e3:d9:bb:9b:c0:8c:fb:88:5a:59:02:
20:10:03:5f:86:cf:f3:30:5d:6b:e5:12:5b:8d:f1:
bd:31:6f:76:17:4c:a0:13:5c:b6:24:75:96:f3:f2:
b1:72:c8:c7:d5:08:2f:0e:54:56:e2:93:3a:29:73:
78:95:d5:8e:18:33:be:a3:f8:55:08:32:a6:ad:90:
89:f8:d3:13:76:c3:a5:61:26:dd:39:f9:43:8d:6d:
da:89:7b:1a:b0:23:9f:ff:e8:dd:8e:6a:3e:c7:85:
e6:8d:28:c6:6c:d4:67:d5:34:7e:0c:82:db:aa:8f:
b3:ba:cd:ef:44:69:e6:af:d9:8d:d8:d0:18:77:1d:
cf:04:2d:42:13:d6:eb:b0:e8:de:fa:be:8a:35:9f:
26:80:27:74:bd:a5:51:99:0e:f0:56:95:a2:4b:2a:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:67:F0:EA:60:C4:73:2F:BC:A8:F3:92:2B:CF:A7:4B:99:F1:BB
X509v3 Authority Key Identifier:
keyid:66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:93:fb:d2:1d:29:a3:bb:b1:91:c0:13:57:8b:85:a0:fe:0e:
36:11:db:d5:d6:86:d3:19:d4:60:80:9a:1d:b0:53:15:1b:c3:
a7:05:66:37:42:c7:21:25:8e:b1:b3:71:ea:df:68:c6:e1:ff:
1f:12:60:bd:f7:62:bb:e4:62:cc:3a:5b:bc:41:45:f1:70:5c:
12:bc:60:f5:b3:b8:d9:6e:d8:00:84:eb:cd:17:83:86:d1:83:
27:16:f9:f1:a5:34:21:c7:2d:2b:ce:6b:eb:4b:7c:bb:c4:4c:
ea:73:32:92:c6:27:18:0f:12:b0:e1:38:ec:df:35:fc:44:29:
1e:40:06:8a:6e:30:d8:11:9a:a2:31:a7:a0:5a:61:f0:8f:35:
9f:26:a2:98:4e:d8:97:a8:4d:2d:ae:5c:5c:a5:eb:86:b4:55:
32:34:fc:b6:1b:db:d3:eb:14:ab:bc:35:83:3a:fb:e1:6d:88:
bd:f1:23:70:b7:7f:5e:c5:6b:19:30:a9:23:6b:04:8b:53:c6:
2e:36:bc:b3:05:16:76:bb:a9:40:28:86:e7:d2:c5:3d:f7:8e:
3c:b1:b3:da:dc:87:1e:33:4b:83:db:6f:5c:9e:9c:93:37:c3:
3d:32:40:99:4c:62:7c:8d:15:97:8e:6e:56:8d:d6:32:c6:9d:
f6:0d:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:39:24 2026 by rpki-client