Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: 87XBaA9wmPGVOXaCZnY8nKcBBRtomQfooMuO6wUcKn8=
Subject key identifier: 3F:06:36:65:A4:D3:AC:CD:C7:DA:D5:B9:96:F0:A0:FE:F3:5F:A7:89
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 01A1291F1FC3A4E80CA32BB4DA1D147A3E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 04:01:07 +0000
Manifest this update: Sun 11 Oct 2026 04:01:07 +0000
Manifest next update: Mon 12 Oct 2026 04:01:07 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: aJVv9oeazwOc5XEbc9cHw4gfuCTzVCqrVBX17FEOGQg=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:1f:c3:a4:e8:0c:a3:2b:b4:da:1d:14:7a:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Oct 11 04:01:07 2026 GMT
Not After : Oct 12 04:01:07 2026 GMT
Subject: CN=3f063665a4d3accdc7dad5b996f0a0fef35fa789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:c0:17:fb:80:6a:b2:10:f6:6c:53:b8:c8:
57:fe:43:ac:4e:a0:3a:00:8c:e8:3c:9f:da:15:aa:
39:25:97:36:ec:1a:5d:1d:2b:a7:d8:bd:ab:34:6d:
a7:a7:ad:9f:ed:63:0a:d6:14:99:4d:88:09:eb:ea:
32:8b:b9:05:21:6e:8d:d9:72:89:2c:43:f9:96:59:
32:69:e3:d9:85:6e:31:18:b0:e9:8b:61:74:0e:b0:
4f:9a:c2:26:92:94:42:32:3d:93:e4:c0:41:4c:b2:
14:14:3e:44:39:58:ef:d7:88:02:82:5e:49:ef:7d:
68:26:26:a2:a4:6f:09:de:89:1b:4b:0d:68:6f:b6:
a7:2b:78:85:1f:ea:7d:50:01:e4:b3:6a:ce:28:75:
36:c7:ce:6d:b9:1c:9b:bb:7d:96:d1:09:b1:ec:be:
1a:c1:e1:98:03:fb:49:8f:e0:ce:77:17:71:35:3a:
2b:1e:b5:01:21:b4:61:df:22:fa:01:3f:2a:32:00:
a9:be:25:99:89:4d:cf:f3:4a:ea:de:f8:5d:61:64:
76:ed:de:ab:7a:d7:17:01:1b:2e:b5:65:ae:d9:61:
87:7d:93:3d:61:02:ef:58:e1:60:c7:0f:e3:5c:a9:
fe:07:ea:ea:1a:5d:10:85:f2:71:5c:b8:13:04:62:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:36:65:A4:D3:AC:CD:C7:DA:D5:B9:96:F0:A0:FE:F3:5F:A7:89
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:d2:2d:94:6b:80:87:b4:ae:f5:c5:e9:00:86:cb:57:2b:
57:6f:f7:4a:23:d4:4d:e5:e1:77:15:83:b3:39:50:0e:e8:31:
d2:c2:57:6e:09:e0:48:ce:66:17:68:91:08:58:98:7c:61:62:
a1:d8:aa:5c:3b:ce:3d:6e:bd:6e:25:16:d2:45:2a:1e:b2:e1:
79:0f:1f:f6:31:4b:23:07:76:02:19:f3:c4:f3:ed:b2:69:69:
8b:7b:4d:55:cc:4c:d4:90:07:ef:f1:35:d5:b4:10:ba:69:e1:
ba:fb:b0:b8:6a:58:69:f2:b3:65:f4:a8:05:c4:75:76:a0:4c:
b6:b4:95:e5:3d:c5:57:22:ef:80:87:45:d2:e2:e5:b2:bb:dd:
be:9b:01:83:93:c0:b9:05:b0:16:cd:89:63:f7:67:db:2e:7e:
1d:b3:11:b6:a6:80:72:98:9c:0a:a8:cc:59:e5:08:86:28:96:
18:7d:28:74:5b:e6:8e:d4:6a:fc:c0:92:00:67:71:33:7a:46:
6b:75:4c:30:70:e0:a1:ab:9f:1c:db:51:94:4c:72:65:55:df:
dc:a0:9e:b7:c5:bd:05:5d:56:8a:39:e1:59:b7:9e:a3:e1:0c:
a9:08:a0:e6:6c:9a:70:f3:4b:b3:35:00:21:88:3d:b2:ef:dd:
c7:58:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:41 2026 by rpki-client