Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
File: ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft (raw, json)
Hash identifier: +dTDwu5KGM0mu17zlFZE5dV8ltfcAiEHDRV2BhVuSJU=
Subject key identifier: 0E:3F:9D:E1:EA:E4:12:E3:60:16:AA:93:0D:F3:2B:4E:71:E5:9C:82
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 01A17DE1A28D4ADB39EB07F86EAD27912B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:41 +0000
Manifest this update: Tue 27 Oct 2026 15:01:41 +0000
Manifest next update: Wed 28 Oct 2026 15:01:41 +0000
Files and hashes: 1: BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa (hash: OkZqX4+0oW/Qj1Uouc/atoTjABWwuUvZVfzQUqSvPA8=)
2: NneXFAismUTeCcIIpKAoI4yk5MY.roa (hash: sKjUqhA+u+X7YktHnUp5dUo2aDS2SF2s2/ZzRq8yHTI=)
3: ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl (hash: Bn2W0KGlxJmtFv7+mjc48wReiKNX1qJIJrN+xKLxpgM=)
4: ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa (hash: DUZglD2Eemdl/nFsp9RozJnECdeXREQM1P9YxS9WP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:a2:8d:4a:db:39:eb:07:f8:6e:ad:27:91:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Oct 27 15:01:41 2026 GMT
Not After : Oct 28 15:01:41 2026 GMT
Subject: CN=0e3f9de1eae412e36016aa930df32b4e71e59c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:a3:e1:64:57:c6:d7:7c:86:16:92:2c:65:
c9:16:5a:55:c5:11:f1:6f:00:d0:56:ea:cf:58:75:
18:59:35:a9:e8:cf:23:52:05:5f:ce:43:97:9d:0a:
1a:3c:07:b7:68:12:32:fd:4f:95:92:f0:bc:d5:27:
d6:f2:37:8f:74:60:a2:ac:0f:2f:cb:7a:05:e1:4e:
ee:7c:00:98:e9:53:18:aa:da:1e:79:21:7d:fa:67:
06:39:8e:e7:a8:e0:6d:ad:44:a7:1d:e5:ca:19:9f:
8e:0c:ac:40:16:a1:87:54:33:7b:36:e0:60:c3:2f:
e7:aa:19:d8:1a:b4:22:a7:6b:a8:6d:e6:76:f9:b5:
af:fa:1b:cd:07:09:bd:a1:56:9a:47:c5:f8:8d:78:
a2:0b:57:eb:ca:98:0d:cd:e6:1e:0d:40:76:19:6a:
47:c3:8b:f9:c9:16:56:cb:91:03:c0:90:4e:1e:00:
ee:05:56:0a:70:39:84:25:e5:c0:58:75:fc:52:d2:
52:cc:47:f5:8b:30:ed:14:93:80:da:96:03:70:ac:
e7:c9:29:ea:37:a6:e1:13:a6:59:5c:76:98:bd:15:
38:53:42:c3:01:f4:0c:25:04:6e:20:b8:7c:79:e4:
a2:d6:b2:d2:58:fa:a1:9a:61:33:63:60:45:62:6e:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:9D:E1:EA:E4:12:E3:60:16:AA:93:0D:F3:2B:4E:71:E5:9C:82
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:44:8a:4d:59:7e:d2:46:5a:96:63:59:00:23:16:84:62:
ce:02:8c:bc:fe:12:52:0e:43:41:f4:55:66:8e:77:02:60:70:
55:50:67:a8:7d:1a:27:04:9a:c0:5c:63:f1:fc:7c:85:9f:5a:
00:e1:4c:7a:8f:b3:40:31:e2:06:ee:d2:fa:6c:df:56:21:9a:
b5:2d:48:38:e1:7b:22:c0:c8:f8:87:e5:b4:ce:3d:03:74:df:
06:a5:38:27:b3:2d:24:97:ce:fa:29:a8:79:82:e4:6d:e5:ad:
19:8f:da:1e:0f:23:56:02:c2:99:5b:4e:31:cb:8d:fd:1d:48:
db:26:e4:77:57:b6:33:2c:e6:74:03:e3:09:b9:1b:f9:fb:83:
23:02:c2:69:d3:b6:c2:e7:73:55:21:99:8d:21:26:ff:cf:ef:
e3:d7:90:35:4f:e2:1f:44:c9:4e:9d:c1:ad:3e:a8:de:f7:d3:
8e:ad:d0:26:5c:fb:46:34:8b:d6:e9:ec:0f:5b:07:bb:fe:2c:
59:50:0a:02:80:6b:dc:b5:33:4d:36:07:a1:04:c3:c4:f3:73:
a0:5c:d2:6c:45:06:fc:98:44:4c:40:1a:24:d1:ec:ae:c9:33:
fa:f1:81:bd:23:40:d4:48:d9:f0:bd:5f:58:65:ba:03:c3:0b:
e6:da:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:03 2026 by rpki-client