Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: y2uWNSjzKDRX1PsnooZZNDu/jBUCh/XAREvVsEBjjxg=
Subject key identifier: DD:B4:1D:54:12:74:F3:4B:7C:B9:6E:B3:57:77:E2:71:09:2D:93:26
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 01A1DCF04E88D84E1EA28C026DCA87E8CC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1B03
Signing time: Sun 15 Nov 2026 02:01:38 +0000
Manifest this update: Sun 15 Nov 2026 02:01:38 +0000
Manifest next update: Mon 16 Nov 2026 02:01:38 +0000
Files and hashes: 1: 60T19wa2SlM3ZiPayRZ2n1NrApw.roa (hash: aMzkAP/cDxiHQ9vf70ws51PtkVu4/Z7Zz2jP+ZQUqas=)
2: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: 8rsQueEakzlU3G72qdHAmAl/E4EUV/UoFuW+/RXCNW0=)
9: dfblRhCjffZSWc4rnsQFcpCEos8.roa (hash: mi3ij9CS4Da75DCzGftaT41PVVIZsboGM7ahRlZsPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:4e:88:d8:4e:1e:a2:8c:02:6d:ca:87:e8:cc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Nov 15 02:01:38 2026 GMT
Not After : Nov 16 02:01:38 2026 GMT
Subject: CN=ddb41d541274f34b7cb96eb35777e271092d9326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:4a:59:2f:c5:af:2e:0d:8d:78:9f:81:1e:
4b:a1:c8:2e:d0:54:0f:18:20:77:99:3f:3d:8c:05:
d8:8b:fa:de:ee:53:79:82:1b:84:37:bc:28:f8:82:
97:cc:72:c4:3b:89:18:1f:b1:c8:31:e6:13:8d:0d:
b8:c0:9e:8e:96:f2:d2:92:af:96:7f:3b:61:25:a6:
95:e3:0e:4a:51:e6:f8:69:68:79:85:05:07:03:d7:
d3:7c:06:9f:ea:0b:8b:3d:6f:72:c8:43:f0:6f:34:
4a:bc:71:fe:22:21:a9:ef:3f:78:dc:4b:dd:b5:e9:
b9:ef:72:13:41:bf:99:b0:eb:6e:1b:1a:2d:9f:22:
dc:d1:e2:17:fd:3a:09:c6:1a:0a:b1:ac:55:31:a3:
c2:7c:20:f8:67:48:94:c2:05:e6:a0:d6:3e:bb:db:
f0:5f:e6:c6:e1:58:2a:c6:02:29:8a:7f:95:a1:b6:
c8:7f:cf:8e:ea:3a:01:bd:2a:d5:53:fa:66:84:0c:
31:f8:f5:ef:09:19:f0:ec:c1:0c:4e:ff:59:9e:50:
ca:ce:96:de:d9:29:da:ac:82:15:aa:81:16:7f:b1:
94:82:15:59:0e:b7:a8:35:3a:06:ca:87:03:b4:97:
88:9b:fc:f9:b9:ed:1a:d7:6b:b9:e3:02:95:61:fc:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:1D:54:12:74:F3:4B:7C:B9:6E:B3:57:77:E2:71:09:2D:93:26
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:94:41:0c:5d:d2:f5:20:8d:b4:97:fe:a7:56:b6:6f:ea:40:
49:8a:c0:0e:e6:b4:32:d7:30:6a:c4:a9:44:b8:40:0b:c9:19:
35:e3:b9:a4:9a:47:57:7a:87:46:3c:a0:67:5b:ad:ae:10:fd:
85:6a:4e:f5:9c:6f:52:96:d3:d8:78:3d:b9:d8:43:10:04:f5:
42:28:1a:5a:e0:dd:34:63:e3:24:23:90:e9:9d:92:8f:0c:b4:
4d:87:10:b8:9b:fe:00:2f:e1:1f:19:98:a5:02:19:33:41:e5:
f8:77:8c:4f:63:80:fa:4c:d2:49:0e:b1:1d:9d:ec:ee:2d:14:
98:54:71:c1:b0:56:b2:83:26:0f:d4:36:49:97:f1:78:91:1b:
24:98:f7:6a:eb:a6:f0:0c:f0:79:bb:b9:c9:1d:a3:ce:37:d3:
f0:ee:5e:28:90:90:9d:c5:94:76:e6:b4:14:a5:1f:51:4a:18:
02:9d:4f:1f:e6:68:92:d2:25:69:d1:4f:fb:47:c4:2a:a2:60:
f2:63:a6:d0:ab:e0:f5:99:81:c6:a5:10:fd:3a:30:49:82:29:
49:f7:ea:de:30:22:08:9b:a1:5f:f1:2b:d5:92:14:21:12:ca:
87:b9:2b:81:10:a2:eb:30:70:88:a3:e6:3d:09:5f:69:8d:db:
45:ef:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:57:04 2026 by rpki-client