Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: 1GoXDDCRNmEDaCV/RAN6ojKl/20ABbd+AvMn2S1u6aY=
Subject key identifier: DE:3A:5F:57:D5:95:5A:E6:E7:CD:41:7B:9E:48:EE:23:3D:33:27:4E
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 01A17DE102F90D30BDA9C46DEDE5B97BEFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 1113
Signing time: Tue 27 Oct 2026 15:01:00 +0000
Manifest this update: Tue 27 Oct 2026 15:01:00 +0000
Manifest next update: Wed 28 Oct 2026 15:01:00 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: beOiTklUbVVvirN0Lgtm7P3l81EVmia22ixbM7pCtJE=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:02:f9:0d:30:bd:a9:c4:6d:ed:e5:b9:7b:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Oct 27 15:01:00 2026 GMT
Not After : Oct 28 15:01:00 2026 GMT
Subject: CN=de3a5f57d5955ae6e7cd417b9e48ee233d33274e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:61:80:73:c8:55:fd:96:9b:7d:fd:dc:9c:
51:35:63:ea:07:2c:50:8c:b8:8a:bf:5f:05:0c:1a:
58:b1:7b:d3:bf:7b:17:29:8b:f0:e1:cd:a1:0d:73:
1e:b5:28:9f:10:4c:f3:28:1d:73:46:47:79:5d:9b:
f6:4c:4c:6e:fa:60:74:6f:6f:ef:5c:39:8b:b1:7f:
d3:87:64:05:dc:03:9c:5c:4e:54:f8:60:9e:30:8f:
07:dd:97:63:3b:d5:02:7b:48:3f:a7:8c:bc:3b:4d:
14:db:7a:b8:2e:39:54:10:fa:29:c7:6f:ac:fb:7c:
34:c9:8d:d0:b4:67:c3:2e:6d:13:f6:3e:45:82:ab:
59:b3:fd:86:73:04:53:13:bd:1d:3f:c3:2d:a5:f8:
84:f2:ad:38:e9:9c:20:db:a9:80:64:4f:fa:01:52:
67:39:b6:da:ee:3f:39:ba:e4:ce:fa:0d:c3:20:00:
be:16:9c:85:51:10:23:db:a2:51:82:34:13:39:2c:
ac:ae:f8:d6:c9:34:68:96:57:2b:f8:bb:6e:0c:57:
32:34:17:ca:a1:00:6e:03:13:6b:00:89:a6:39:68:
3d:af:05:d9:12:13:9a:44:db:09:25:30:62:f4:4e:
ca:fe:a3:2c:44:eb:e8:60:ff:e1:40:fb:d0:6a:26:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:5F:57:D5:95:5A:E6:E7:CD:41:7B:9E:48:EE:23:3D:33:27:4E
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f3:ea:e8:ea:98:6a:8a:e1:bc:87:4b:4f:d4:68:25:53:8b:
7c:ba:07:99:35:1d:07:42:7b:45:c7:57:14:ac:cc:97:3a:ec:
02:e2:0b:92:26:f4:47:c0:48:3f:b1:d2:4d:77:8d:cb:c2:86:
d1:49:a9:82:e7:cf:b2:9f:75:7b:7b:f8:be:34:6d:d7:d9:01:
c2:00:61:cc:bd:0b:f0:91:90:ba:8b:f6:ee:a1:65:3b:ce:e3:
34:f4:69:dd:a1:d1:6b:44:db:ea:7e:bc:be:af:71:a1:ac:bc:
d9:95:1c:01:c5:f5:66:8f:e2:a8:a5:6b:ce:4c:6a:be:77:a9:
0a:c9:89:52:f8:a4:9d:24:4f:5c:ec:0e:52:f1:98:55:da:dc:
b1:71:20:69:50:bd:7e:8a:4c:ac:43:b9:93:ff:48:cd:64:ea:
e4:c9:d8:b5:c3:ff:e3:bf:b3:9b:85:80:d2:91:ef:f2:64:3b:
13:5f:32:52:4e:b2:cf:b0:64:51:64:de:dc:a8:19:5b:b6:34:
8e:ff:c4:3e:81:1b:c8:2c:24:c5:8e:4d:49:79:02:e6:29:30:
12:d2:9a:dc:67:3f:fe:74:35:83:93:bc:d8:11:2c:63:39:70:
3a:ae:78:c6:cd:58:0a:74:20:61:7e:53:59:a9:4b:46:15:c5:
16:ef:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:48:24 2026 by rpki-client