Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
File: Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft (raw, json)
Hash identifier: au9S77XB+yuewmZYEPOmDkVdJIMc5Y+cjqyT0wXeKM4=
Subject key identifier: EC:37:F4:15:3A:75:5A:AE:8F:FF:1D:98:D4:5F:80:19:C9:89:96:05
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial: 01A08A8C798D714292246B8DA9356F613644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
Manifest number: 0C3C
Signing time: Thu 10 Sep 2026 09:00:56 +0000
Manifest this update: Thu 10 Sep 2026 09:00:56 +0000
Manifest next update: Fri 11 Sep 2026 09:00:56 +0000
Files and hashes: 1: Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl (hash: 7txU41kXNhLr6JGKyTNIheecx5s40n/VS8mJqOgj7eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:79:8d:71:42:92:24:6b:8d:a9:35:6f:61:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Validity
Not Before: Sep 10 09:00:56 2026 GMT
Not After : Sep 11 09:00:56 2026 GMT
Subject: CN=ec37f4153a755aae8fff1d98d45f8019c9899605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:d0:5b:9a:2b:ee:cf:76:02:76:db:1d:ca:
1c:c1:19:e9:80:6b:69:a1:e5:ea:eb:9b:fc:6b:c5:
e4:6a:9f:6e:e9:f4:83:cc:74:f9:47:2e:6f:be:c9:
d2:8e:c8:5b:da:c2:a7:08:4f:a9:e0:21:97:dc:ec:
df:eb:a5:9b:7e:fd:37:0f:53:91:7c:4a:00:73:bd:
5a:8f:30:57:51:e0:21:8c:15:75:9c:a4:2d:f1:3d:
3a:cd:1d:94:99:91:71:fe:3f:94:7f:13:ee:b7:71:
93:14:b6:3c:41:bb:cb:4d:72:69:f3:7f:30:d1:37:
6f:17:f0:41:76:b2:3f:58:1e:d8:bf:d6:a2:c2:d1:
8a:f3:fa:fa:0e:7c:d6:5d:7f:b9:0a:bc:ea:16:5f:
d0:56:35:20:22:c6:cb:94:8c:59:06:17:8e:70:97:
54:cb:37:3f:3b:d7:2d:a0:2a:c6:8e:e9:a5:00:db:
bf:b6:36:e4:9f:13:36:76:a6:25:22:c8:a2:c3:c1:
cf:44:23:e3:ad:34:bd:e8:40:91:46:33:e6:6f:45:
4f:38:d5:f8:f4:4e:1d:9a:ae:cb:68:91:fd:95:46:
34:a0:73:1f:2f:a6:7a:90:9a:70:d2:27:5b:ad:be:
8c:04:01:7d:91:52:e0:54:6c:67:4d:37:c5:cf:ad:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:F4:15:3A:75:5A:AE:8F:FF:1D:98:D4:5F:80:19:C9:89:96:05
X509v3 Authority Key Identifier:
keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8c:a1:fb:d6:ec:0f:1e:f9:5e:d8:c3:dd:03:71:e0:2c:3c:
90:af:08:2f:99:98:76:db:e4:dd:a6:c1:dc:61:bc:20:51:e4:
88:48:75:70:97:f4:da:55:d8:9a:d1:5f:db:03:42:3e:fc:4a:
78:cf:44:5a:75:a8:68:8b:72:f7:c4:05:65:f3:dc:b2:81:f4:
af:fc:68:ca:cf:f3:d8:3f:20:7f:fa:f3:4f:9f:3a:53:a8:9b:
13:74:42:48:96:6f:7f:6f:f5:be:40:cc:20:e1:d1:28:c0:ff:
08:22:8d:0c:bf:e9:7f:82:54:e6:f6:db:f3:7c:4c:d9:27:d0:
3e:b8:0a:96:4d:1d:f3:8c:24:d6:79:7e:e3:34:2f:3a:ff:21:
4b:c1:f5:c6:88:e4:ee:fd:0f:1a:ad:f3:00:26:31:ea:e4:da:
61:c1:ef:58:eb:29:2c:e6:79:e0:b1:10:41:a7:61:17:4c:e4:
45:c4:48:8c:73:57:f3:f2:db:14:00:df:63:7a:32:bf:17:9c:
20:49:31:a8:f2:5c:46:c6:f8:84:5c:9b:7c:14:4d:1b:66:e9:
80:db:0a:b6:89:47:7b:6e:ca:b3:49:60:c9:19:00:76:bd:b0:
90:0c:fb:80:d6:d0:cd:64:de:9f:08:7e:64:cd:a2:c7:94:41:
f2:94:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:19 2026 by rpki-client