Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: sFxljMwZjSOHk+wryT9EpmKTRAjOySvi+yGAbjquM1Q=
Subject key identifier: 1A:9E:7E:81:8C:B0:F4:63:FE:3A:BD:79:C6:E5:1D:B6:46:B2:75:82
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 01A17FCFA05E03C956EFB11A1FF6C0F62C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0B51
Signing time: Wed 28 Oct 2026 00:01:15 +0000
Manifest this update: Wed 28 Oct 2026 00:01:15 +0000
Manifest next update: Thu 29 Oct 2026 00:01:15 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: 7hE9lwawgsfA+YcST0UA+822KwyBQYccvPcsIXQQiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:a0:5e:03:c9:56:ef:b1:1a:1f:f6:c0:f6:2c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Oct 28 00:01:15 2026 GMT
Not After : Oct 29 00:01:15 2026 GMT
Subject: CN=1a9e7e818cb0f463fe3abd79c6e51db646b27582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:fc:bd:db:31:64:5f:2b:9e:a2:43:c3:d3:
f4:1d:fc:03:d9:75:b3:42:45:36:49:3a:ac:70:e0:
a1:dd:40:ba:6f:3e:2d:77:6a:7a:bc:05:21:30:8f:
df:b0:fa:63:6d:4f:8a:61:41:ef:85:c3:1c:bd:d1:
fd:21:1b:c7:39:2d:03:5e:81:92:3f:63:4a:a9:21:
02:ea:ed:06:e3:19:42:85:4a:15:ef:45:d2:71:35:
e0:3f:ba:6c:bb:5f:27:ac:8d:2f:fa:78:60:da:b1:
5d:48:f2:eb:9e:e4:1e:51:5d:45:de:e4:4e:bf:bf:
10:15:86:d6:08:38:74:86:d8:b8:81:20:8d:bb:9d:
85:c2:1b:db:1d:43:f0:5f:80:c8:e1:f7:d0:b5:68:
64:dd:ca:52:93:3d:48:db:74:6c:6b:65:8c:8f:04:
b1:35:8b:9c:27:3a:14:86:f2:e8:4f:8f:66:ba:01:
5a:f8:0d:a6:80:8d:93:6a:f3:5f:9c:ba:59:7a:a0:
3b:4d:79:ec:75:7d:d6:3e:9d:62:73:6a:3a:a4:ba:
9b:1b:82:56:ce:b4:ef:3f:00:68:5f:a7:83:dd:5c:
77:9b:47:7d:1b:fa:72:68:7d:00:cf:b8:8a:dd:68:
72:fb:af:d1:34:e8:ea:5c:ae:d7:5e:37:47:dc:77:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:7E:81:8C:B0:F4:63:FE:3A:BD:79:C6:E5:1D:B6:46:B2:75:82
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:89:59:25:f3:b0:2b:cb:5d:3c:99:a4:25:f4:b1:26:db:95:
aa:8e:fb:cb:9a:65:4e:50:6d:ec:af:6f:c5:99:2c:76:85:7a:
6c:c4:07:76:0b:8c:56:61:7f:b6:06:98:c1:eb:64:ca:b7:ab:
c6:cc:5a:72:e8:e2:53:46:38:53:b6:71:db:7b:30:a5:42:a8:
29:4a:2c:0b:05:a3:34:47:53:84:2c:11:e6:c5:7a:c1:16:36:
c7:66:56:78:54:20:60:af:f8:69:14:b3:84:f1:68:de:17:ad:
0b:b1:e3:60:89:6c:4e:19:48:aa:98:50:73:5e:2f:c6:c4:4e:
11:85:9a:8d:47:71:14:47:bf:6c:ea:18:60:27:d8:d6:f4:3b:
ac:72:03:25:bc:08:a6:44:23:7a:bc:4a:f6:7e:78:d5:83:a2:
71:38:4c:f7:91:5d:be:b0:27:7d:99:15:9b:1f:b6:c2:6f:89:
33:4b:db:55:5c:97:f9:62:d2:d8:00:ba:e2:81:9f:8f:1f:19:
32:79:f2:5e:40:1d:86:85:31:ae:92:bf:68:df:dd:cb:b0:12:
e0:b7:9d:aa:f3:12:8f:52:14:94:08:e7:56:ee:68:99:1e:99:
81:2c:61:19:9a:ab:6d:18:b3:7e:db:76:65:da:3f:06:98:b7:
77:01:70:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z6BeA8lW77EaH/bA9iw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl
NzVkZWYwHhcNMjYxMDI4MDAwMTE1WhcNMjYxMDI5MDAwMTE1WjAzMTEwLwYDVQQD
EygxYTllN2U4MThjYjBmNDYzZmUzYWJkNzljNmU1MWRiNjQ2YjI3NTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIL8vdsxZF8rnqJDw9P0HfwD2XWz
QkU2STqscOCh3UC6bz4td2p6vAUhMI/fsPpjbU+KYUHvhcMcvdH9IRvHOS0DXoGS
P2NKqSEC6u0G4xlChUoV70XScTXgP7psu18nrI0v+nhg2rFdSPLrnuQeUV1F3uRO
v78QFYbWCDh0hti4gSCNu52FwhvbHUPwX4DI4ffQtWhk3cpSkz1I23Rsa2WMjwSx
NYucJzoUhvLoT49mugFa+A2mgI2TavNfnLpZeqA7TXnsdX3WPp1ic2o6pLqbG4JW
zrTvPwBoX6eD3Vx3m0d9G/pyaH0Az7iK3Why+6/RNOjqXK7XXjdH3HfR/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqefoGMsPRj/jq9ecblHbZGsnWCMB8GA1UdIwQY
MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt
YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5
LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0IlZJfOw
K8tdPJmkJfSxJtuVqo77y5plTlBt7K9vxZksdoV6bMQHdguMVmF/tgaYwetkyrer
xsxacujiU0Y4U7Zx23swpUKoKUosCwWjNEdThCwR5sV6wRY2x2ZWeFQgYK/4aRSz
hPFo3hetC7HjYIlsThlIqphQc14vxsROEYWajUdxFEe/bOoYYCfY1vQ7rHIDJbwI
pkQjerxK9n541YOicThM95FdvrAnfZkVmx+2wm+JM0vbVVyX+WLS2AC64oGfjx8Z
MnnyXkAdhoUxrpK/aN/dy7AS4LedqvMSj1IUlAjnVu5omR6ZgSxhGZqrbRizftt2
Zdo/Bpi3dwFw2A==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:23 2026 by rpki-client