Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: eDjrSDZpt7WVKxZZRMe6JvdojJANSvhZsromCMNYBW8=
Subject key identifier: 60:90:20:D3:37:65:00:FE:E6:8D:0D:F3:39:D8:61:25:E3:FF:D0:69
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01A0CD7EA2E3347EA549DEF42F65991E3D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 09:00:23 +0000
Manifest this update: Wed 23 Sep 2026 09:00:23 +0000
Manifest next update: Thu 24 Sep 2026 09:00:23 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: U+cKoj7qc9vlKgGc3XwrSgR1yaMHszd20jBLtufxl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:a2:e3:34:7e:a5:49:de:f4:2f:65:99:1e:3d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Sep 23 09:00:23 2026 GMT
Not After : Sep 24 09:00:23 2026 GMT
Subject: CN=609020d3376500fee68d0df339d86125e3ffd069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:a1:e4:0b:b0:49:37:fb:79:85:c0:67:dd:
15:f6:0d:39:c8:af:ec:02:78:84:47:3c:3b:13:ba:
5a:11:2c:bf:c5:67:72:1d:1c:f4:02:84:93:ae:db:
d7:4b:d1:f6:21:b8:4b:dd:0d:4e:ed:c5:a3:19:6b:
df:53:e0:95:cb:a7:af:a1:e9:18:2a:a6:b6:c2:7d:
2f:d4:81:b2:6d:f5:60:6a:73:9f:d4:2b:96:4d:ca:
ff:f3:1b:02:6a:48:d7:0e:88:40:74:52:ef:88:69:
b8:12:21:a7:fc:60:cd:4d:c0:6d:8d:0e:44:b5:66:
d2:7c:e1:57:9f:75:09:28:5e:82:7e:af:e8:06:7f:
0f:91:af:4d:eb:64:e5:a0:83:81:44:90:6c:45:d0:
3c:1b:51:ec:c3:43:41:0c:19:88:5a:34:7c:a8:6a:
d2:31:fd:31:bd:79:3b:df:b2:6a:17:18:cf:cd:33:
3d:b9:c4:0d:3e:1c:ce:de:60:b7:96:b1:a3:86:aa:
8f:6e:10:ee:70:1c:a1:06:99:dc:ec:c7:a1:65:eb:
0f:6c:3f:8c:ec:9d:63:60:11:50:37:70:19:6f:d7:
bf:06:96:09:65:03:35:49:48:5a:de:e0:0f:04:92:
e7:32:5f:07:bd:6c:24:39:35:97:92:36:c4:c1:44:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:20:D3:37:65:00:FE:E6:8D:0D:F3:39:D8:61:25:E3:FF:D0:69
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:0e:70:52:6e:73:8b:6b:ae:ec:be:c3:a0:d4:6e:e1:b3:
9d:bc:07:e4:8f:43:8f:a5:eb:74:fe:4b:c3:59:5c:59:c1:27:
75:54:a0:eb:31:f8:62:47:bf:78:43:fd:b8:c5:2d:7b:54:f0:
f5:d8:3e:c4:d8:e1:df:57:7a:f8:da:e9:24:ad:be:cf:12:3a:
f4:e2:fd:59:e5:9a:19:0d:36:26:4c:ec:25:5f:14:38:87:4a:
33:ea:fe:d8:77:27:35:d7:b0:83:f2:39:09:97:cd:f3:88:75:
ee:41:9b:60:d9:45:53:f4:51:6f:a6:88:cd:74:ed:9f:1f:6f:
64:bb:12:00:7e:d7:53:f1:47:28:54:92:3d:91:ad:4d:78:19:
4a:d1:1b:ea:04:01:ee:09:ef:40:13:d1:ba:67:07:fe:e4:ac:
e4:6a:74:de:20:2d:cf:54:df:22:dd:63:b0:27:0a:82:f6:32:
88:bc:21:c1:43:a0:60:e1:58:13:8a:64:4f:ac:2b:13:fb:08:
83:71:bf:26:62:86:ee:fc:61:50:05:18:e3:db:c1:e9:65:48:
5b:61:11:74:f2:94:0d:22:8f:8d:a3:74:e1:7c:fe:c1:b8:36:
a5:33:e5:0d:4b:96:24:74:a0:76:c0:d8:56:4e:74:40:2e:17:
14:55:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:36:37 2026 by rpki-client