Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
File: ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft (raw, json)
Hash identifier: JnzHm/jCk3LWGch/lQenA9mMIlAZNuZgi8QkwsEVtc0=
Subject key identifier: DA:BF:E3:2A:84:99:C9:05:AA:50:C1:C8:A3:C5:EC:98:F3:6B:0D:84
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 01A08C7B05309114498857C52D1D57394070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:07 +0000
Manifest this update: Thu 10 Sep 2026 18:01:07 +0000
Manifest next update: Fri 11 Sep 2026 18:01:07 +0000
Files and hashes: 1: BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa (hash: OkZqX4+0oW/Qj1Uouc/atoTjABWwuUvZVfzQUqSvPA8=)
2: NneXFAismUTeCcIIpKAoI4yk5MY.roa (hash: sKjUqhA+u+X7YktHnUp5dUo2aDS2SF2s2/ZzRq8yHTI=)
3: ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl (hash: yKG4vcjGr0lwZN2sEOm40GNnyaZ+PSf+TWUb64lE+pk=)
4: ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa (hash: DUZglD2Eemdl/nFsp9RozJnECdeXREQM1P9YxS9WP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:05:30:91:14:49:88:57:c5:2d:1d:57:39:40:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Sep 10 18:01:07 2026 GMT
Not After : Sep 11 18:01:07 2026 GMT
Subject: CN=dabfe32a8499c905aa50c1c8a3c5ec98f36b0d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:4b:a9:81:23:ce:28:5e:54:9c:fd:1b:39:
46:0d:c1:15:49:f1:c3:7f:03:9a:52:5a:e9:42:38:
bf:8b:df:e3:a3:9b:b0:33:e7:45:83:b3:10:29:fc:
b2:75:98:68:63:10:20:27:07:7b:fc:0b:1c:84:fa:
ab:9e:0b:28:be:f0:bf:6c:4d:e6:8b:97:80:d6:86:
6e:bd:b9:9c:b4:83:4d:f1:b9:f7:59:a9:3d:a2:dc:
d5:67:c0:d7:86:3e:ef:15:b1:43:d3:fe:78:b7:9c:
af:fb:ac:37:34:8d:6d:ca:06:09:12:2d:ce:74:b9:
57:75:70:0d:e0:f7:94:37:cd:b3:81:01:d9:41:7c:
8d:d0:e3:2c:c4:9f:88:fd:8b:39:70:4e:0b:83:7d:
ea:14:b6:5c:48:87:a9:c0:9b:5a:79:0b:01:28:0d:
49:75:e4:1b:b2:14:1a:b2:12:7b:0a:86:87:d7:68:
a6:91:6d:5c:e5:31:60:8f:55:71:25:ca:13:72:34:
65:9f:11:04:0a:eb:47:75:ad:f3:f4:57:93:45:54:
bc:33:5c:48:4f:27:ea:47:c6:85:b7:43:f7:fc:6a:
c3:4b:33:ee:f3:6d:f2:25:ab:27:dd:21:f8:aa:03:
c1:5d:18:35:9d:fc:f6:91:8a:61:30:ce:91:ca:d6:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:E3:2A:84:99:C9:05:AA:50:C1:C8:A3:C5:EC:98:F3:6B:0D:84
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:99:51:0f:c5:3a:fd:b9:c3:18:2d:bd:b7:04:61:b6:db:
3b:62:8c:10:32:89:19:b9:f4:c6:53:7e:05:9b:8f:c4:78:78:
7e:5c:e6:03:e2:d4:ac:98:dc:55:e5:1a:98:a4:cc:5c:d3:99:
4a:48:62:51:84:70:d8:6d:e6:63:6f:fd:18:89:b4:9b:0c:aa:
69:00:fc:40:ed:c9:79:2c:3a:61:33:bc:e1:3c:bd:f5:e4:45:
72:70:ff:32:ab:ef:71:a3:54:51:36:3f:e4:bf:0e:9b:df:07:
ab:00:d6:96:3d:2d:c0:da:be:b4:86:ff:6c:dd:26:1a:65:66:
5e:f8:2a:8d:de:5a:9e:f6:61:2f:39:ea:df:23:0f:c6:75:cd:
fc:fd:58:5e:44:d0:70:36:b7:a6:00:d1:91:89:5f:a1:6d:03:
30:de:bb:32:72:be:0c:a2:db:22:10:ad:6d:0d:45:2a:f0:75:
86:34:a5:ea:4f:d0:f8:37:2e:1d:6a:b9:0c:92:04:44:7a:4b:
b6:35:58:ca:3a:dc:f1:2b:4a:f9:71:bd:e7:7d:ce:32:9a:2a:
ca:8f:bd:d5:48:09:0c:58:4a:73:20:0a:8d:26:d8:61:5c:50:
d6:8d:38:28:82:87:d6:a5:25:25:ed:5d:d1:c4:77:d5:d7:b5:
20:8a:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:33 2026 by rpki-client