Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: vVdBjfHcOe4Uud9vF5TWzoFiqXMhzfTB8PgGeUXGuuY=
Subject key identifier: 64:20:C1:01:58:40:20:83:BE:49:B9:BE:7E:87:6C:3B:9B:66:D9:4E
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 01A0B765375942ADE95184045BAB27532355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1A6B
Signing time: Sat 19 Sep 2026 02:00:58 +0000
Manifest this update: Sat 19 Sep 2026 02:00:58 +0000
Manifest next update: Sun 20 Sep 2026 02:00:58 +0000
Files and hashes: 1: 60T19wa2SlM3ZiPayRZ2n1NrApw.roa (hash: aMzkAP/cDxiHQ9vf70ws51PtkVu4/Z7Zz2jP+ZQUqas=)
2: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: Ne96CW/0E9crOiW6wbkZ/ml8j7oDsIsxkDtnD3vl5og=)
9: dfblRhCjffZSWc4rnsQFcpCEos8.roa (hash: mi3ij9CS4Da75DCzGftaT41PVVIZsboGM7ahRlZsPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:65:37:59:42:ad:e9:51:84:04:5b:ab:27:53:23:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Sep 19 02:00:58 2026 GMT
Not After : Sep 20 02:00:58 2026 GMT
Subject: CN=6420c10158402083be49b9be7e876c3b9b66d94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:b0:ac:af:80:fb:45:d1:b9:53:18:c3:bb:
10:67:2c:8b:e4:15:72:77:ec:a3:bd:49:84:90:9b:
24:43:9f:af:41:84:71:4b:7b:31:89:9a:56:46:bb:
b8:50:d7:a4:fe:60:70:84:53:08:63:82:ee:47:84:
33:b7:3c:58:36:3f:3f:c9:32:cf:00:5b:be:8b:6f:
f8:3e:33:36:36:bb:cc:d4:5b:5c:4e:a1:80:32:4d:
ae:d2:27:3b:bd:a2:93:fb:08:5b:2a:b3:88:26:86:
58:90:85:cf:f8:c4:61:1e:2f:97:ee:9b:1e:2d:fc:
82:59:71:42:36:80:b1:65:1b:ff:01:e2:0c:ce:d5:
a0:c4:73:7f:f1:d5:fe:91:7f:72:52:8c:d3:e2:d0:
0c:d8:6d:3e:a2:b9:01:c5:8e:80:5b:d5:01:4c:17:
36:a7:8c:f3:dc:12:ec:88:d1:89:2f:41:59:b9:cf:
82:e1:92:33:39:ec:88:10:e2:e1:c1:f1:6b:9d:8c:
c0:da:c8:fa:08:df:95:ba:4c:fd:f6:a0:11:29:86:
04:31:3f:11:ae:03:07:c7:4b:9e:09:59:ba:8a:50:
1b:b0:13:0c:45:bd:7e:9e:52:4f:7c:02:32:44:f0:
80:aa:57:a8:4f:af:1e:58:f7:84:36:18:93:b8:b4:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:C1:01:58:40:20:83:BE:49:B9:BE:7E:87:6C:3B:9B:66:D9:4E
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:4f:4d:ca:7f:e4:2f:35:b9:d2:de:13:f4:c2:44:bd:86:
e2:a0:e7:82:81:92:e9:c7:6a:0b:44:c9:97:3d:d7:87:a8:8d:
51:97:e9:9a:02:87:75:d0:f5:18:d4:55:1f:37:04:f2:37:f0:
b3:f0:e4:f3:44:2d:b7:b3:03:39:96:8e:4e:17:4e:5c:b0:f7:
c2:77:cd:f2:aa:a8:51:c9:bd:b1:cb:71:71:74:ad:4d:e4:b9:
1e:01:27:d0:b5:72:9d:7d:c6:7f:94:9a:55:80:fd:84:6c:bd:
de:c5:49:4d:db:12:37:81:d6:e8:06:60:b3:36:5e:b0:d8:c8:
4a:14:c3:f2:a2:5c:79:fc:42:14:fc:f0:30:88:69:a1:a1:4a:
a7:c4:a5:60:55:4d:59:7b:94:b6:24:d0:65:a2:31:e3:ec:b4:
b8:54:91:9e:1c:a4:ba:d8:7e:c3:98:ce:2a:b4:09:37:fe:69:
5a:2f:47:e0:21:bf:ac:7d:e8:c2:a7:23:94:f2:9d:07:89:0f:
bf:8a:ca:c3:3e:f4:01:a1:81:59:f8:65:24:c7:dd:73:60:de:
37:7a:e7:34:bd:33:d3:0f:59:c5:a3:55:a1:70:0b:1d:5d:c0:
e3:b2:9a:e6:95:cc:1a:9e:a8:42:f7:e0:80:d3:6c:9d:73:62:
5b:09:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:37:28 2026 by rpki-client