Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
File: ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft (raw, json)
Hash identifier: 3BfxJgPMCRx6vCrftKcQ6KHC5dvvV50ixesDvCBCQuw=
Subject key identifier: 61:CF:00:9F:B2:54:E2:00:B9:E6:34:F0:6A:11:12:5C:A1:99:09:D3
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 019FAA884C4939FC148AFE2890866ABC6B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:26 +0000
Manifest this update: Tue 28 Jul 2026 21:01:26 +0000
Manifest next update: Wed 29 Jul 2026 21:01:26 +0000
Files and hashes: 1: BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa (hash: OkZqX4+0oW/Qj1Uouc/atoTjABWwuUvZVfzQUqSvPA8=)
2: NneXFAismUTeCcIIpKAoI4yk5MY.roa (hash: sKjUqhA+u+X7YktHnUp5dUo2aDS2SF2s2/ZzRq8yHTI=)
3: ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl (hash: +KgubbY8wbEpzUef3T8WnP1qM/YB3QIRoCYRr2HSsoA=)
4: ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa (hash: DUZglD2Eemdl/nFsp9RozJnECdeXREQM1P9YxS9WP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:4c:49:39:fc:14:8a:fe:28:90:86:6a:bc:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Jul 28 21:01:26 2026 GMT
Not After : Jul 29 21:01:26 2026 GMT
Subject: CN=61cf009fb254e200b9e634f06a11125ca19909d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:df:b6:05:9a:77:b3:07:25:5d:f3:c2:69:
a1:94:03:80:82:f2:91:2b:0e:8e:81:ad:a4:97:d2:
d9:7e:dc:f2:2d:c1:f4:a0:c6:c4:9a:6e:e7:e7:58:
f6:50:73:69:c3:3c:09:ad:2d:89:f0:b0:9a:20:ba:
4e:f8:57:96:a4:7b:e5:fa:95:79:8b:b8:03:f1:b9:
f2:a2:65:2f:d2:45:7a:99:44:65:dd:d2:02:50:44:
86:6f:b0:db:49:ea:7a:7e:08:14:5b:af:82:c0:c9:
53:91:3e:26:0c:2c:a6:47:37:b2:e4:39:ea:29:a4:
c8:8b:72:35:64:56:56:cb:89:fb:c2:6d:ca:dc:1e:
55:74:ec:c4:dd:ff:d9:8c:13:a3:f4:a8:a4:88:88:
3a:4b:df:0f:ae:0b:6f:48:9c:4f:b7:e7:7a:a0:92:
4b:8f:ad:a4:03:14:4f:57:bc:09:77:4f:7e:59:73:
37:16:64:69:e1:02:47:3a:8c:38:8e:2a:f0:c4:89:
36:f9:85:a8:7f:52:75:57:26:32:5c:ac:31:6c:14:
ab:25:fc:9e:1e:ca:0a:89:58:e6:27:51:86:a8:a9:
b1:3e:97:7c:a1:86:af:4b:63:be:ed:db:1a:a3:d3:
61:8f:e4:5e:b8:9e:b2:5c:24:cc:b7:a4:28:d3:98:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:00:9F:B2:54:E2:00:B9:E6:34:F0:6A:11:12:5C:A1:99:09:D3
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4c:93:4f:02:f6:13:72:5c:84:a6:43:14:fe:2e:d6:4e:e9:
9e:b2:e9:c6:37:58:a8:9c:d3:b1:27:bc:64:cc:e3:54:31:e7:
ae:00:4c:c2:37:b9:34:2f:ae:dd:37:a2:ff:c3:de:b1:37:7d:
68:e0:09:51:45:c6:45:ba:20:50:25:ce:f2:da:ba:b6:21:00:
70:6a:e5:3a:fd:7d:00:a9:ab:cf:e0:75:e5:ba:bd:1f:31:3c:
de:04:4f:af:0a:ff:c8:35:81:68:fd:3d:f8:09:a1:9a:fb:54:
60:e2:9f:f1:c1:6d:dc:30:82:ed:86:e0:27:c2:ae:55:5c:ec:
18:4a:7a:c3:bb:e5:90:b7:ff:af:fb:70:20:f2:f9:62:fb:8d:
32:3a:27:10:2e:6e:19:be:28:17:ca:0a:76:34:9d:b5:0e:b0:
47:b9:17:33:a5:07:bd:0e:04:82:f6:53:8c:50:a0:66:40:66:
15:9c:c8:f7:78:ab:8f:c2:06:e9:a5:a8:28:8b:da:a0:6c:9e:
54:fc:6c:bc:40:5f:dc:6a:e1:1d:a6:f9:c9:0d:fb:89:3c:de:
7f:2d:34:21:6a:1d:b4:c9:9d:38:b9:91:15:55:3c:77:11:7f:
1d:c9:bb:b0:f7:68:43:bf:c9:29:d2:d3:50:61:ab:f1:fe:ba:
1f:4e:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:16 2026 by rpki-client