
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: mN7mu3zMkWVasLxzSxxEC9WRAtdGvNKnTe/vop6sFMw=
Subject key identifier: AC:86:C4:A7:07:52:22:07:01:67:23:80:F9:17:82:72:0A:B2:72:73
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019EB732C2BBF92D3604AC3896B271BB5EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 09E0
Signing time: Thu 11 Jun 2026 15:00:17 +0000
Manifest this update: Thu 11 Jun 2026 15:00:17 +0000
Manifest next update: Fri 12 Jun 2026 15:00:17 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: RDO7EhtI422RUapQiVJJ68mNEAMMj/h6zR7C0ZaWfJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:c2:bb:f9:2d:36:04:ac:38:96:b2:71:bb:5e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Jun 11 15:00:17 2026 GMT
Not After : Jun 12 15:00:17 2026 GMT
Subject: CN=ac86c4a70752220701672380f91782720ab27273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:4c:4c:97:5a:01:1d:95:e2:06:36:ec:32:
df:01:41:bb:4b:0b:88:86:0b:f1:f9:6c:7e:56:e3:
8a:60:f8:33:3f:15:bb:71:c1:41:0a:ae:b0:4e:22:
f0:59:57:25:b5:dd:87:a6:60:66:4c:d4:4f:7b:5c:
dd:a2:e3:46:18:9c:58:07:69:34:0a:64:31:84:df:
7c:db:3c:09:ad:78:b4:1c:6d:7a:38:84:e1:24:db:
9b:14:7a:b5:8a:c2:d5:f2:ff:71:28:c4:3c:77:ed:
c7:11:c0:5b:49:5d:1e:3e:01:0a:33:34:fe:96:69:
79:13:a2:8b:f4:9e:95:e4:23:7b:bd:12:e7:f6:25:
a3:8f:74:07:46:1d:38:e7:bd:65:89:0f:6d:e5:c7:
0e:56:50:40:b2:ce:0e:c6:4d:eb:19:1c:45:e7:5e:
0b:06:e7:42:80:52:33:80:d3:ea:2a:e7:ec:67:02:
7d:ab:f2:b1:a0:8a:5d:6e:93:12:a8:7f:9c:98:b9:
1f:55:7c:56:ec:c9:b4:7f:6f:8c:39:b3:4a:ea:04:
c9:dd:2f:f0:c8:87:2c:f3:3a:d0:1c:9c:19:0f:5c:
87:70:32:e2:c5:f8:16:4b:ea:25:2f:3f:11:08:ab:
33:fe:71:3a:f4:34:51:61:cd:6e:2d:7f:bc:84:48:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:C4:A7:07:52:22:07:01:67:23:80:F9:17:82:72:0A:B2:72:73
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:92:cf:4a:a6:64:c4:5f:d1:c8:a0:df:0c:c2:81:f4:41:72:
5b:c4:25:16:10:69:28:a4:57:87:75:eb:43:19:ee:0f:a3:5a:
b8:f7:fa:1e:e4:11:d3:09:8e:94:08:3e:a0:a5:fb:b5:01:ca:
5e:5b:36:2d:94:c1:60:b1:8a:39:94:c4:98:59:cd:13:95:53:
9e:2c:f8:39:e8:10:51:f9:70:20:b3:e5:26:5d:0a:fc:a2:3a:
bb:c4:0a:db:14:01:d5:10:c0:bb:a3:fb:fb:31:71:e2:99:6e:
4a:5c:ee:4c:a4:7b:42:10:61:0e:73:1d:12:56:e8:c7:e1:26:
44:e7:1e:c5:df:8f:6f:4d:4a:3c:31:fd:23:44:4d:c4:22:4f:
67:e9:5b:08:ce:7e:63:aa:5f:2c:24:ad:c8:94:70:30:78:c0:
2b:af:23:23:9c:d7:b3:2b:c8:c1:22:cc:b7:d3:ad:c8:a2:24:
96:24:14:03:25:93:27:8d:b7:f3:fe:23:d3:02:b4:a7:91:b6:
7c:a5:59:88:73:d9:89:87:1d:d1:f8:92:4a:dd:3e:f6:f2:36:
08:d8:c2:a0:f9:da:87:b7:75:51:66:0d:b1:57:93:ab:2b:6a:
b9:34:4a:fd:be:a1:08:04:12:97:19:01:98:a2:cf:d5:ad:56:
c6:e1:cf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:00 2026 by rpki-client