Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
File: ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft (raw, json)
Hash identifier: 9lFBCR5Ui9wgo2CvznRo77DekAq7SHI5Yw3iwPuyJmg=
Subject key identifier: CD:DE:E8:2E:4A:66:64:72:8D:F5:C9:35:34:33:5A:B0:BD:E3:A0:11
Authority key identifier: 66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
Certificate issuer: /CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Certificate serial: 01A0D5DD90A1834332C130E6709AEEFF80DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:02 +0000
Manifest this update: Fri 25 Sep 2026 00:01:02 +0000
Manifest next update: Sat 26 Sep 2026 00:01:02 +0000
Files and hashes: 1: 5T1uta_W6Rt3zeWix3Ttlz3fPrQ.roa (hash: QUgenxmjnt6hLRphe+QYqG3ci12uKtkz5r9TvSluXps=)
2: ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl (hash: 2JuXbLEuOlJ5jcoiZWShk8vjJfOZLsNd5XhfaebpmdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:90:a1:83:43:32:c1:30:e6:70:9a:ee:ff:80:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1af98a7f029c3f6972ee374f69d205c6f29d2
Validity
Not Before: Sep 25 00:01:02 2026 GMT
Not After : Sep 26 00:01:02 2026 GMT
Subject: CN=cddee82e4a6664728df5c93534335ab0bde3a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:6c:1c:32:19:aa:c9:3e:46:9b:c5:bc:03:
37:8c:b7:b1:43:d0:25:d8:ad:84:48:d8:37:e1:27:
67:5d:39:ff:08:d2:60:72:a7:16:20:bd:bd:6b:a6:
3a:47:26:29:bf:7a:f6:ad:b5:38:b2:4d:f4:b0:55:
49:f1:e2:78:6a:37:73:2e:e8:e6:bf:88:38:7f:32:
c9:ab:54:65:7f:a9:fa:e7:61:f8:78:1e:0a:d7:1f:
77:fd:2e:61:35:d4:bc:d0:4f:dc:bc:c0:4e:fb:7d:
69:36:8d:6d:85:38:ff:73:18:df:61:87:9e:e1:2d:
99:2b:8d:91:4c:0b:e4:d7:01:6b:b9:d7:ad:17:95:
48:8e:b7:60:88:01:d2:64:ad:45:07:e4:f7:5f:84:
9f:56:d5:97:ed:e8:f7:94:7f:8a:ed:d2:bb:b0:a8:
29:dd:06:3f:6c:a1:f5:5e:62:e2:56:19:69:28:bd:
a5:0d:c6:47:be:c8:6b:76:00:73:4e:b7:80:60:c6:
a6:6a:c4:14:50:9e:4c:f9:50:f1:42:68:f0:23:3d:
a9:8d:66:d4:f5:2a:99:7f:89:19:72:2e:c1:ed:0d:
2c:b6:c3:92:68:80:8b:cd:86:0b:2e:c9:19:4c:8a:
46:63:26:f4:09:63:0d:24:6c:ed:75:ce:7c:0f:3c:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:E8:2E:4A:66:64:72:8D:F5:C9:35:34:33:5A:B0:BD:E3:A0:11
X509v3 Authority Key Identifier:
keyid:66:D1:AF:98:A7:F0:29:C3:F6:97:2E:E3:74:F6:9D:20:5C:6F:29:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtGvmKfwKcP2ly7jdPadIFxvKdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/ZtGvmKfwKcP2ly7jdPadIFxvKdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d4:73:fd:10:11:84:38:ea:b0:8c:a0:46:68:06:8c:b7:ff:
90:cc:c6:93:14:28:77:0f:2d:dd:05:f5:8f:25:9a:8f:f8:50:
1c:a1:a3:14:2a:a4:c1:96:3b:65:61:43:61:c3:da:b7:a0:f7:
77:38:a5:63:b0:53:0d:cf:98:40:04:01:81:7d:fc:62:f7:6d:
19:36:d2:1a:8f:e9:84:3b:73:5f:90:c7:41:b2:dc:8b:b6:32:
1e:6f:d9:c1:e5:80:e0:b8:35:8d:7a:6a:22:4f:1d:c5:9d:aa:
4e:7a:30:e6:a5:1d:12:14:fa:fe:84:66:32:a6:33:b8:7c:a4:
d9:60:85:48:53:9d:44:64:23:4e:59:d3:57:59:7b:32:8f:50:
22:2e:6c:59:a3:46:7c:6a:20:78:a7:05:f3:fa:ac:bb:73:bc:
62:b0:24:92:43:8a:31:2f:5c:f9:cc:16:26:59:f5:69:ab:f2:
66:64:13:99:a8:2c:1f:ad:14:26:ff:72:53:e7:9a:be:4c:aa:
26:e6:c5:e3:2e:38:f0:1a:28:4c:0e:e1:48:0a:a8:b9:ca:41:
a5:16:81:b6:cd:d8:a7:41:7c:c5:c1:ed:18:f7:9a:cc:53:dc:
7e:f3:0a:26:59:d3:71:40:91:cc:db:e2:71:fe:2a:5e:81:59:
8c:6f:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:03:22 2026 by rpki-client