Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: 2Yf/gBm2sBqvEVtisLSLQZDG8zGTcFAz/zIMk/XzrRQ=
Subject key identifier: EB:37:11:4C:4E:2C:94:E0:AC:A5:69:C9:61:FA:D9:53:D9:E7:6D:0F
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01A06EDEB0BCAC77D6BB653F3E9739CCD8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1A3C
Signing time: Sat 05 Sep 2026 00:01:22 +0000
Manifest this update: Sat 05 Sep 2026 00:01:22 +0000
Manifest next update: Sun 06 Sep 2026 00:01:22 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: KUjBMfRqtgWTUTPcXiVnEL5Kbk3N4cu6088yb1gtMdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:b0:bc:ac:77:d6:bb:65:3f:3e:97:39:cc:d8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Sep 5 00:01:22 2026 GMT
Not After : Sep 6 00:01:22 2026 GMT
Subject: CN=eb37114c4e2c94e0aca569c961fad953d9e76d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:78:e6:7f:6e:c7:74:40:d3:f4:70:fe:5e:
de:44:c2:47:48:b1:72:a3:e4:b5:45:68:2f:b7:fa:
4f:7f:ad:c1:c8:25:bc:26:8e:ee:36:8d:4c:1c:0f:
95:c9:93:8c:8e:d6:c7:66:e8:68:76:19:c1:d8:30:
11:b7:80:35:41:07:19:39:11:f2:ff:7a:05:a0:2d:
d8:f6:90:c9:48:23:65:7f:6c:9c:fa:d5:a3:1d:99:
cd:2c:03:2a:ee:a3:4e:3c:56:a3:1e:6d:3d:41:0f:
1e:41:02:4b:e9:55:1f:2f:ce:83:cf:bb:35:0b:b5:
9f:d4:5f:1a:2d:45:5f:8d:dd:c8:57:60:a6:07:f2:
12:0a:61:69:d4:17:f0:52:7f:36:e9:0c:2c:2b:8b:
09:42:24:ed:a5:ba:21:59:72:a4:ee:f1:8d:40:7e:
0a:36:de:81:6d:be:6c:58:dd:05:cc:4b:e9:16:59:
46:aa:f9:49:a6:8f:99:36:e1:fe:18:b3:8b:14:bd:
d0:aa:70:04:1f:bd:79:ec:31:8b:8e:cd:20:30:69:
b0:cb:f9:05:70:0b:a2:2f:5e:9f:90:5e:21:58:59:
0f:4e:82:7f:58:15:eb:8f:4a:4c:a8:6c:de:d3:c9:
f2:bb:02:d0:23:64:aa:7f:c9:7a:ca:35:01:b4:b6:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:11:4C:4E:2C:94:E0:AC:A5:69:C9:61:FA:D9:53:D9:E7:6D:0F
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8b:30:ab:43:6f:10:61:ed:26:d2:28:2b:4d:20:17:d5:e4:
a6:a1:93:7a:ae:32:4f:8e:cb:86:ea:09:31:a4:5b:91:73:aa:
a8:b9:c6:3e:8d:3c:a6:bc:11:84:b3:bd:53:e2:d8:1c:4b:a0:
3a:18:bb:27:2c:ce:3e:a8:e1:da:20:98:7e:0f:9c:7d:06:6f:
e0:d9:9c:f5:78:18:d4:10:40:82:cc:8d:e4:54:d2:0a:bf:a8:
46:d2:aa:57:91:d3:0e:69:8d:69:ea:15:69:ae:6a:c2:50:2c:
72:23:6e:49:18:b3:ff:13:e8:82:d6:e7:49:43:4a:d0:57:21:
eb:e9:ce:f1:72:03:ec:7f:b3:ae:ba:d7:ae:02:bd:52:bd:62:
b7:e2:1a:59:4c:20:ae:03:5d:0d:83:b6:fe:2f:f8:ce:91:5a:
56:97:fc:46:5e:c4:8f:0f:2c:00:15:0b:4e:f1:7b:23:32:27:
fb:cc:9f:7e:f3:e8:df:4b:43:92:57:c6:57:68:df:02:c8:7b:
78:aa:32:23:bb:6c:e7:5b:33:5d:8d:70:3d:bd:cc:28:6f:18:
5a:3a:88:64:1d:b1:a6:5f:66:76:e9:7c:d4:f4:b4:d0:ae:68:
d6:04:24:13:84:38:c5:85:38:0b:87:da:fc:98:07:03:20:4f:
64:1e:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:48:43 2026 by rpki-client