Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: WqCebHOOC24POa2dWLYasbOvhlHbx0jAjEkKqcmyTcQ=
Subject key identifier: 52:D8:75:29:1C:AF:78:D4:1D:DC:3A:5A:54:60:2F:E2:98:FC:7C:11
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019FA0E10D276ABA4854F32416AEAEF1C033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0A59
Signing time: Mon 27 Jul 2026 00:02:11 +0000
Manifest this update: Mon 27 Jul 2026 00:02:11 +0000
Manifest next update: Tue 28 Jul 2026 00:02:11 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: silK9ZBuI/+jW7m9lrXaZBAWpLIb0gCQLNgYASFPiDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e1:0d:27:6a:ba:48:54:f3:24:16:ae:ae:f1:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Jul 27 00:02:11 2026 GMT
Not After : Jul 28 00:02:11 2026 GMT
Subject: CN=52d875291caf78d41ddc3a5a54602fe298fc7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:8b:88:f8:78:37:35:0e:0d:f2:64:e5:f9:
13:22:9e:8f:c2:df:f2:f4:5a:49:67:ec:0e:43:02:
b5:ea:d4:c9:81:87:3a:3c:6f:4f:47:3b:d7:f5:fd:
1d:de:a4:39:34:e2:33:50:73:26:85:c1:e5:87:46:
33:db:17:65:b1:60:8b:6b:a7:7a:4d:88:60:18:ca:
30:21:9f:27:ab:77:af:67:69:dd:5d:95:78:da:5d:
af:5a:d8:6c:35:14:5f:a7:21:77:fc:75:91:48:b2:
8c:da:ad:97:df:db:ff:0b:04:ce:a0:1e:b3:f3:7d:
1b:34:fd:2b:f7:27:4e:65:ee:b3:03:7f:2f:89:85:
b4:e9:27:b1:a2:73:8b:f5:20:08:de:6d:8a:fd:78:
4e:b5:68:91:49:1e:26:61:12:75:b9:46:52:30:ee:
8b:85:dd:83:57:3d:e8:1a:b0:ef:b2:06:b5:38:c4:
b8:83:ae:ee:98:c1:bf:71:ca:b4:c0:cf:ca:43:dc:
a1:35:9e:87:84:6e:1c:ce:8c:11:72:e3:83:81:44:
c4:43:23:50:51:4a:23:44:e6:af:6e:2f:56:7f:0e:
c4:f3:86:de:d0:72:72:2f:22:43:9e:61:7b:e5:0d:
0e:25:30:68:d3:70:0d:67:f2:b4:e5:9b:c2:7b:20:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D8:75:29:1C:AF:78:D4:1D:DC:3A:5A:54:60:2F:E2:98:FC:7C:11
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e9:bc:eb:a8:06:1e:73:77:74:5c:e6:5b:e9:84:da:d0:2a:
18:cf:6b:6e:d8:d8:c6:d9:39:db:a4:f5:da:65:83:46:ff:a8:
9e:67:c4:3b:c8:f7:a3:06:25:e0:00:ad:e8:0a:61:b6:f8:b4:
74:db:9f:07:1f:23:ee:88:ef:44:de:e4:46:5f:0a:f9:52:87:
62:8a:7c:73:6d:8b:c8:f2:f5:6a:3e:e7:05:32:b3:1e:98:b4:
31:6f:18:d7:99:82:74:43:91:cd:42:80:84:50:c0:86:25:4f:
ab:ee:26:e5:23:9f:21:2d:53:fc:32:5a:7a:ad:8a:a1:eb:ec:
16:50:db:6f:2a:7a:f9:c4:29:8b:a0:53:5c:40:3d:38:79:d0:
3d:17:ed:1e:2b:75:54:b9:ba:4e:bf:ea:dc:09:6f:20:c5:1c:
f8:8b:aa:20:c8:4e:0f:e8:69:ee:d1:0b:15:b3:93:94:0d:bc:
cb:e7:60:17:9f:d2:ec:e0:b4:f7:96:52:ac:35:9f:95:86:2d:
f0:75:51:87:0d:07:16:5a:25:00:8d:3a:11:f3:78:28:b5:1f:
8b:9f:d6:47:42:27:8b:57:ec:c7:2c:97:45:a9:7f:a6:42:28:
78:ab:bc:81:b5:28:f6:e5:96:a9:17:b3:c3:47:bb:1c:c8:40:
32:b8:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:18:40 2026 by rpki-client