Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
File: ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft (raw, json)
Hash identifier: Ne2aJ+7Lbj4vgMXAyv55LD1kXHNm9vVt1LJ+4yHyZBQ=
Subject key identifier: BE:0E:F6:9F:18:85:2B:22:CD:C6:0C:B4:01:8D:AF:17:34:CB:47:70
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 01A0C47C5233D2D598741BDF0A2D7A51F78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:01:16 +0000
Manifest this update: Mon 21 Sep 2026 15:01:16 +0000
Manifest next update: Tue 22 Sep 2026 15:01:16 +0000
Files and hashes: 1: BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa (hash: OkZqX4+0oW/Qj1Uouc/atoTjABWwuUvZVfzQUqSvPA8=)
2: NneXFAismUTeCcIIpKAoI4yk5MY.roa (hash: sKjUqhA+u+X7YktHnUp5dUo2aDS2SF2s2/ZzRq8yHTI=)
3: ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl (hash: p/U0fq2XnV1nKyd5v1XEtIoArIk5hTdxm4EKxmjz5pM=)
4: ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa (hash: DUZglD2Eemdl/nFsp9RozJnECdeXREQM1P9YxS9WP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:52:33:d2:d5:98:74:1b:df:0a:2d:7a:51:f7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Sep 21 15:01:16 2026 GMT
Not After : Sep 22 15:01:16 2026 GMT
Subject: CN=be0ef69f18852b22cdc60cb4018daf1734cb4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:34:7a:4c:f0:1a:1b:b7:9a:e3:7b:fb:fc:
5b:24:60:ba:7d:ca:6e:f0:e0:f8:d2:b0:fe:f6:8c:
01:38:3b:96:b5:03:d9:85:10:e8:d0:cc:95:04:90:
2d:da:3c:a4:c0:2d:c2:bf:8f:8c:f9:f9:51:e0:f1:
d5:c9:b9:7a:13:5f:96:e8:81:fc:90:39:f6:68:68:
31:44:6b:71:5e:47:25:22:24:b2:21:e4:5f:e7:15:
f0:81:06:83:eb:d0:ef:01:2e:e4:20:59:3a:3a:09:
b7:e6:b7:af:29:cc:29:77:8a:93:31:3e:55:50:5e:
69:1c:eb:6f:9a:4b:45:f4:bc:02:ef:76:f3:5a:18:
2d:d9:b7:90:4d:25:95:3d:8c:e0:6c:15:c4:ed:93:
9d:1d:47:ad:86:f5:bb:32:32:38:4d:b2:48:c9:9a:
bb:65:62:98:a5:a1:55:e8:87:0d:79:1a:46:c6:10:
a0:c4:f9:1a:0d:ab:ee:ba:2f:78:39:ed:0f:5c:a3:
6a:2c:7f:f5:d2:e8:19:d6:87:33:4f:69:9c:c8:ac:
97:64:b4:6f:1f:8e:05:84:7d:bd:92:49:8f:a6:8d:
bd:a6:b2:ce:d6:99:75:d9:2c:58:7b:e9:85:e1:c5:
14:4d:ba:67:46:da:97:63:d5:ef:f0:d1:65:a5:62:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:F6:9F:18:85:2B:22:CD:C6:0C:B4:01:8D:AF:17:34:CB:47:70
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e7:13:92:79:04:85:c0:00:f2:b2:10:ec:14:15:e4:d9:02:
90:e7:73:22:04:dc:bd:fa:f5:c7:3e:28:81:ec:e2:8c:5d:b3:
d1:73:e0:45:ff:2a:74:9f:86:38:9a:bd:1a:8b:50:e5:5b:3e:
d0:6d:db:6f:33:03:fe:01:41:15:0e:a7:70:01:63:c7:06:81:
db:d0:ff:0e:08:60:42:9d:1a:6a:7c:80:80:90:43:54:48:ec:
d9:96:7b:62:22:2b:8e:e8:bd:b1:7a:38:21:6a:cd:1d:3b:2e:
f7:db:fd:4d:8d:0c:94:6f:5d:de:4a:61:b9:82:9e:12:f0:b9:
81:7d:13:2a:3c:e4:10:85:b7:82:ba:66:98:5a:50:5b:92:35:
0a:18:7a:89:c1:bd:f0:4f:40:f2:06:d8:da:8b:51:4c:82:2f:
c1:7e:84:06:2e:bd:59:fc:5b:a2:ed:bd:45:89:0a:f2:ee:31:
02:fc:c6:ea:28:59:d4:c5:57:f7:2a:e6:f6:71:f0:c9:76:49:
12:55:d5:bb:2e:e5:1c:97:0f:92:c4:9a:d5:69:18:d8:e8:1e:
2a:2c:f3:d8:cc:7a:a2:a7:57:a0:a0:21:07:04:a6:e0:ec:a4:
16:9d:eb:0d:6c:c3:e3:92:ee:12:a3:a6:ac:84:d1:23:c4:84:
97:ee:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:52:49 2026 by rpki-client