Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: lsRKCb0sBVhh8rWbwitbVjSLpzdULdkedpSyJAsGZAM=
Subject key identifier: 89:32:30:92:69:0F:28:E2:F3:90:24:54:12:6F:2B:9B:B9:84:B0:1E
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 01A08A8D22621E9074BA7BD84BE51949F44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0AD2
Signing time: Thu 10 Sep 2026 09:01:40 +0000
Manifest this update: Thu 10 Sep 2026 09:01:40 +0000
Manifest next update: Fri 11 Sep 2026 09:01:40 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: qAFsvbgfcrXmI0w3D3ZwPWL8ngbG8MEztHY7uIYBvzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:22:62:1e:90:74:ba:7b:d8:4b:e5:19:49:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Sep 10 09:01:40 2026 GMT
Not After : Sep 11 09:01:40 2026 GMT
Subject: CN=89323092690f28e2f3902454126f2b9bb984b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:67:16:39:ef:5e:4d:0c:18:78:e9:c8:84:
b0:1c:ae:95:d5:c9:a1:28:3a:7b:bc:2c:3e:87:00:
e9:aa:aa:d2:d3:84:60:2c:8c:89:5a:09:a6:3d:a4:
46:9a:e0:1a:b0:8b:7a:1a:da:89:5f:54:5a:af:3c:
2e:a6:94:e6:9c:d7:4a:cd:cb:0e:f0:4d:6a:ef:12:
e3:8a:a6:86:15:61:da:41:49:06:cb:f9:78:ba:75:
e8:f7:15:a9:60:18:51:2b:7e:12:ce:6e:2c:47:d7:
88:c1:66:43:34:4c:56:d2:af:8f:9d:29:24:33:5b:
a6:68:71:0d:de:a8:56:95:7e:e0:23:6f:7d:1a:3a:
12:ee:5f:d3:bb:18:e9:5e:4a:c5:44:27:26:d6:45:
f6:57:b8:e0:fe:41:45:80:c6:11:35:81:d7:43:30:
17:8f:33:39:7e:cb:a4:e6:c5:de:6d:2f:a5:e9:83:
2f:9a:08:e0:a3:d7:b2:b3:27:7f:f3:de:9b:d9:7b:
54:b4:43:91:ae:d1:f0:2e:d0:a6:43:44:01:92:f7:
9b:81:75:f6:ba:ad:64:0a:45:33:a3:94:e0:d2:4a:
90:a8:16:23:26:d7:42:6f:5b:fe:b6:0a:ab:a2:6c:
56:15:18:a7:6c:d0:1f:73:30:04:9f:59:ba:84:81:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:30:92:69:0F:28:E2:F3:90:24:54:12:6F:2B:9B:B9:84:B0:1E
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:1d:c8:89:5e:81:fa:57:dc:0f:33:4c:f0:e5:20:56:68:
8e:79:00:db:4a:ce:05:b8:9a:49:f1:65:b1:d1:a1:dd:95:98:
99:b4:ca:c0:39:d1:03:0f:c4:d2:77:cf:0c:7f:8c:f7:f7:bb:
d7:46:a8:a6:25:7d:e6:99:89:9a:d6:0b:76:5a:39:02:57:f7:
bc:43:70:24:2f:6e:4a:75:97:b7:08:aa:5e:11:6a:59:5e:2a:
f0:30:9f:45:c5:ea:b8:47:28:7e:f2:86:93:fe:81:a1:3a:94:
62:2b:7d:8e:73:34:c6:dc:a0:b9:47:bf:34:67:db:15:15:25:
d9:a0:53:7c:1b:12:4b:1f:61:c4:7d:27:34:95:da:ae:ec:93:
c6:51:33:78:6f:5a:15:99:eb:b3:d5:7b:2b:ec:4c:b6:bc:3d:
d9:8e:e2:0a:79:4b:58:8e:50:e1:dd:59:12:4e:56:e5:a7:1b:
3d:31:a2:de:03:12:44:d1:97:96:2a:05:f1:0a:58:8a:9e:8d:
86:9d:9a:ab:f3:4d:b1:05:25:1a:80:50:4e:71:e9:e2:7b:2c:
33:b3:4c:4c:48:b9:c3:5c:0e:c0:86:29:9e:a9:d5:77:99:00:
02:d4:4c:aa:ad:83:fc:de:25:1a:07:db:ea:47:31:0c:de:4e:
a0:06:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:09 2026 by rpki-client