Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: 1F5SUOWhaAj4glwWjh/dM9mbXTGnNy6toFIXaPhcT2E=
Subject key identifier: 55:C4:26:35:0B:9E:7F:84:D6:EE:87:56:B3:E5:67:59:42:56:B6:2C
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019D38D3C48C41FD8BFC9BC86B9EDF8CAB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 091A
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: MX5HqTeYhb2JKbqMXXWCPn2+UYTPzaU6ySzI2Sgidv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:8c:41:fd:8b:fc:9b:c8:6b:9e:df:8c:ab:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=55c426350b9e7f84d6ee8756b3e567594256b62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:c4:5b:47:e6:12:54:aa:20:c4:6c:7c:6f:
3d:a6:2f:06:5b:37:94:cd:f5:0b:dd:df:31:45:1b:
a6:f8:d2:3e:11:51:87:55:1d:70:8e:a3:2e:b0:cf:
f8:ea:ed:8c:0e:62:4e:65:1f:5c:70:06:98:f0:36:
34:46:33:76:44:81:89:49:3d:eb:62:e0:65:14:e9:
45:99:e8:66:d4:6d:b8:43:4c:ca:74:49:da:6a:8e:
bc:50:41:0d:77:71:0a:67:f6:5b:32:ab:28:75:df:
48:93:1f:ff:54:81:04:f1:99:0d:82:2d:58:ed:f3:
c3:27:fa:06:a1:f2:b1:16:e8:ae:9e:9c:58:69:d7:
60:f2:dc:b3:df:c8:db:12:3d:89:73:5d:13:57:a1:
ca:8d:fb:d9:c7:b0:03:1a:ca:fa:4c:c3:3f:33:06:
53:ba:c1:cd:8f:bc:7c:46:d8:66:47:b4:30:4a:d8:
af:2d:97:88:a1:07:c2:79:c2:ec:5d:34:59:12:c2:
a1:be:a4:ed:5c:9e:43:1b:ed:ab:7e:d3:11:fe:bd:
a0:0e:c6:28:36:28:55:c8:30:db:59:aa:d3:a0:17:
91:fd:ba:db:dc:1a:79:4e:68:8e:02:25:87:a2:de:
fd:48:cc:27:55:be:ef:43:d8:9b:99:7d:d5:1b:50:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C4:26:35:0B:9E:7F:84:D6:EE:87:56:B3:E5:67:59:42:56:B6:2C
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0f:fa:20:61:ff:0c:ef:ac:ad:d1:f6:62:ac:51:b8:16:06:
11:e4:57:7f:1b:20:42:cb:ed:ef:98:7d:b0:2a:dd:64:d6:ca:
c1:84:79:a7:3d:f9:d0:5a:3f:d1:2e:cb:89:49:d9:24:10:5d:
a3:58:6a:40:7a:de:be:ed:f1:a6:9a:bb:fa:45:da:fc:82:cd:
96:41:10:77:55:76:a4:9c:82:bb:77:c2:06:39:84:f6:1c:7c:
bb:e0:ca:bf:8c:90:6e:12:c5:03:5c:4d:18:16:49:b8:99:d9:
ed:3b:43:b5:78:3e:21:12:cd:f9:f2:0a:a0:06:fe:80:9f:85:
cc:ee:59:d3:39:dd:1a:2b:cd:1e:52:31:d1:00:b6:e5:a1:00:
9a:17:09:f8:17:22:20:2f:e7:36:4c:b0:e4:db:0e:21:55:5e:
fb:8e:96:38:23:b9:35:9d:57:2e:f9:74:73:f5:0c:37:81:c1:
64:e5:0b:9f:7b:26:07:a8:ac:00:04:0b:b6:45:c9:73:ab:82:
c3:c8:f4:9f:a5:ee:8c:9b:13:58:19:9c:6a:1b:ec:d8:af:79:
8e:3a:50:a3:03:32:aa:f2:f6:1f:9d:23:b0:da:0c:dc:79:64:
7f:3b:bf:aa:b4:21:bd:80:9f:03:58:a8:21:83:81:88:65:3b:
b0:c7:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:08 2026 by rpki-client