Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: AUTNpWvzd77pQvqLh+5bbcTImdoK0M8Q2ORLZ1je7Iw=
Subject key identifier: 55:15:E7:54:0A:69:9E:6A:2A:93:87:0F:17:D8:59:68:D6:BF:94:D0
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 01A0C6D7B3D4B707BAF3A4FD110741BFF073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1A73
Signing time: Tue 22 Sep 2026 02:00:20 +0000
Manifest this update: Tue 22 Sep 2026 02:00:20 +0000
Manifest next update: Wed 23 Sep 2026 02:00:20 +0000
Files and hashes: 1: 60T19wa2SlM3ZiPayRZ2n1NrApw.roa (hash: aMzkAP/cDxiHQ9vf70ws51PtkVu4/Z7Zz2jP+ZQUqas=)
2: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: kPkQZs1vKdNM2xu/Ergmjou0LyyOUIHyJEZjYnIsenE=)
9: dfblRhCjffZSWc4rnsQFcpCEos8.roa (hash: mi3ij9CS4Da75DCzGftaT41PVVIZsboGM7ahRlZsPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:b3:d4:b7:07:ba:f3:a4:fd:11:07:41:bf:f0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Sep 22 02:00:20 2026 GMT
Not After : Sep 23 02:00:20 2026 GMT
Subject: CN=5515e7540a699e6a2a93870f17d85968d6bf94d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:35:56:7f:0f:ea:71:7d:be:96:d3:fd:79:
73:ee:41:95:e8:3e:96:f9:e3:76:7d:26:ae:35:f3:
93:83:f7:35:ae:db:03:c2:62:fe:19:d7:d1:1a:59:
23:76:12:eb:53:51:15:c4:77:09:08:3b:0c:da:65:
66:87:66:f0:06:1c:35:f2:59:b2:f9:27:ce:3f:06:
3a:30:44:4e:e5:50:36:f3:1e:ec:40:da:64:cf:bf:
15:2e:5b:6a:93:c0:8f:02:25:c0:83:87:dc:ce:16:
d4:a9:bc:3f:2c:6a:7d:94:1f:7a:da:b2:42:82:82:
66:1b:c2:22:67:31:80:cf:bd:8e:77:64:12:f3:80:
10:95:21:9a:01:e9:86:88:6d:01:73:0f:77:5b:44:
dd:d8:12:bf:4d:47:7e:b9:d1:99:65:6d:ec:6d:57:
f0:38:89:bd:a0:ee:43:fc:d9:9c:7c:30:8a:f0:93:
7a:9d:c2:6a:56:eb:8b:ed:fd:29:c2:8a:b4:06:eb:
0c:6b:2d:05:26:38:cc:47:ca:d5:86:14:66:c8:57:
78:5f:2f:ba:88:5b:8e:e5:9c:91:28:3a:73:38:8a:
d6:8c:b6:2c:62:38:50:cc:ae:99:0b:7d:d7:90:a1:
23:94:42:58:26:7d:82:58:82:53:26:0c:7c:17:9e:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:E7:54:0A:69:9E:6A:2A:93:87:0F:17:D8:59:68:D6:BF:94:D0
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:01:0d:6d:3f:41:3d:30:ec:76:00:e0:94:3c:9a:eb:8b:
8e:2f:d5:95:bd:80:8a:13:60:a2:26:55:c4:5c:00:92:dd:ee:
e3:0b:d9:ee:58:eb:fc:02:cc:85:61:c0:5f:0d:69:67:70:32:
21:0c:c8:a2:a9:6e:72:9f:19:66:60:8f:81:b0:a2:87:14:53:
28:a2:94:74:dc:36:c5:f9:76:c5:8c:d3:ce:fb:cd:fb:a1:06:
f4:f7:3c:31:5d:f5:37:e5:10:b7:21:6c:f1:de:89:ad:cd:78:
ca:a6:35:73:a0:29:a1:46:1b:a5:e3:d4:bf:d7:1b:6a:db:44:
34:47:86:45:52:db:28:9b:32:57:f8:15:ec:3c:dc:0c:40:28:
b5:26:ff:2b:5a:73:36:4f:3c:00:e7:d6:ca:ff:ff:e6:7d:a5:
7f:e5:6f:19:2f:27:9f:f4:a5:47:86:0a:cd:c4:0b:79:0b:e6:
82:04:1d:bb:cf:e8:c7:d9:51:54:b5:81:ff:1e:41:d6:04:05:
5b:b9:76:df:41:9b:62:d2:8a:ff:16:76:96:03:55:60:84:36:
74:97:e9:a8:95:07:68:b9:e3:13:9b:84:6f:a9:b4:a1:38:40:
3a:22:05:8e:16:c4:50:47:f4:64:d8:b4:bc:06:4a:6b:a1:f0:
e4:65:71:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG17PUtwe686T9EQdBv/BzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw
NjIxMGUwHhcNMjYwOTIyMDIwMDIwWhcNMjYwOTIzMDIwMDIwWjAzMTEwLwYDVQQD
Eyg1NTE1ZTc1NDBhNjk5ZTZhMmE5Mzg3MGYxN2Q4NTk2OGQ2YmY5NGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYk1Vn8P6nF9vpbT/Xlz7kGV6D6W
+eN2fSauNfOTg/c1rtsDwmL+GdfRGlkjdhLrU1EVxHcJCDsM2mVmh2bwBhw18lmy
+SfOPwY6MERO5VA28x7sQNpkz78VLltqk8CPAiXAg4fczhbUqbw/LGp9lB962rJC
goJmG8IiZzGAz72Od2QS84AQlSGaAemGiG0Bcw93W0Td2BK/TUd+udGZZW3sbVfw
OIm9oO5D/NmcfDCK8JN6ncJqVuuL7f0pwoq0BusMay0FJjjMR8rVhhRmyFd4Xy+6
iFuO5ZyRKDpzOIrWjLYsYjhQzK6ZC33XkKEjlEJYJn2CWIJTJgx8F55EtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUV51QKaZ5qKpOHDxfYWWjWv5TQMB8GA1UdIwQY
MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt
NDA0Nzk4NzA5NzZlLzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl
LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4wBDW0/
QT0w7HYA4JQ8muuLji/Vlb2AihNgoiZVxFwAkt3u4wvZ7ljr/ALMhWHAXw1pZ3Ay
IQzIoqlucp8ZZmCPgbCihxRTKKKUdNw2xfl2xYzTzvvN+6EG9Pc8MV31N+UQtyFs
8d6Jrc14yqY1c6ApoUYbpePUv9cbattENEeGRVLbKJsyV/gV7DzcDEAotSb/K1pz
Nk88AOfWyv//5n2lf+VvGS8nn/SlR4YKzcQLeQvmggQdu8/ox9lRVLWB/x5B1gQF
W7l230GbYtKK/xZ2lgNVYIQ2dJfpqJUHaLnjE5uEb6m0oThAOiIFjhbEUEf0ZNi0
vAZKa6Hw5GVxHw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:59 2026 by rpki-client