Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
File: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft (raw, json)
Hash identifier: 2ciYHHAQU62PlFyTZO/AegYRVraKDA436CA2lIRKTKw=
Subject key identifier: B9:20:9B:D3:E9:1A:A5:37:D3:7C:72:92:6F:6D:AB:0C:A2:3F:A7:1F
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A0257B9F5E75FA404B1182F6E974809135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
Manifest number: 0122
Signing time: Fri 21 Aug 2026 18:00:53 +0000
Manifest this update: Fri 21 Aug 2026 18:00:53 +0000
Manifest next update: Sat 22 Aug 2026 18:00:53 +0000
Files and hashes: 1: NmfGAB9g6IwfbTf5IGeRlUzzLK8.roa (hash: nTmZ/2NC+LsTf/mvJ/ayjnPfWSnwWzWFoHlvAvwIR94=)
2: ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl (hash: /GlYN+5/DuOAUOQ0B29m31vgajVemkS5vLGTwTbozKM=)
3: bCPuQnidtKhLUBFCbnlwJtNtyXE.roa (hash: 3qWgrnYDux5Q5wFlEUAuuHH20MAw5zNUDlsV8Dn8JrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7b:9f:5e:75:fa:40:4b:11:82:f6:e9:74:80:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Aug 21 18:00:53 2026 GMT
Not After : Aug 22 18:00:53 2026 GMT
Subject: CN=b9209bd3e91aa537d37c72926f6dab0ca23fa71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:56:ca:5e:ba:60:aa:16:b2:5b:8c:3d:f3:
71:b9:01:a2:6f:27:91:6d:4f:05:a1:b2:eb:e1:47:
c1:73:71:b2:6d:39:c1:84:ac:ab:51:de:76:78:88:
7d:90:6c:71:ad:2e:e6:56:f2:5c:b7:f1:b6:32:1a:
a9:1d:9f:f3:47:21:1f:29:58:de:90:1a:88:91:49:
71:4e:a8:73:3e:87:ae:49:d6:3b:a9:e4:54:61:52:
f8:5e:b0:c1:d8:f5:fa:fc:00:6a:09:2a:94:2a:3e:
6e:8c:10:e9:83:ea:97:e9:54:4e:a3:99:63:fb:f4:
cb:e9:24:ba:09:54:ef:23:4f:73:be:b5:89:56:e3:
3f:dd:0d:71:16:d3:27:0c:d2:16:16:e5:e0:9a:76:
d1:c1:45:a0:bd:07:f0:26:44:11:4a:71:de:ac:21:
14:8c:68:58:d3:40:7c:e3:33:b1:76:77:ec:64:d4:
88:da:8c:c9:21:87:9c:9e:28:87:08:62:2a:20:41:
c5:c6:36:0c:17:e0:9f:46:7b:de:03:30:c8:57:e3:
97:ca:bf:c1:a3:bf:ca:a3:61:20:ff:9e:9c:53:d7:
43:10:af:e4:d0:13:d6:2c:66:9f:1b:aa:67:22:b2:
2c:79:62:2d:85:6e:ec:e6:22:d2:bd:e5:c0:d2:e8:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:20:9B:D3:E9:1A:A5:37:D3:7C:72:92:6F:6D:AB:0C:A2:3F:A7:1F
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:fa:ea:92:e9:b6:83:e3:59:00:7a:79:73:ac:95:d8:b2:
42:d4:f5:9c:ce:24:ee:80:be:8c:2e:a6:64:c8:7e:b2:17:fd:
fa:6f:45:d6:21:c5:5f:e5:18:d6:35:1b:9a:dd:1b:d6:e7:a1:
e2:7c:91:e5:8d:3c:51:3c:cc:f8:bf:d2:9f:73:25:74:d1:7d:
ba:cd:07:2e:b1:d0:4b:0b:b1:e2:0d:f1:8e:ca:a8:6c:5f:34:
df:7f:e0:15:1c:40:74:1f:b3:49:88:84:dc:4b:ec:e0:45:04:
9c:7b:c7:35:ff:3f:4b:ce:3a:e5:5d:13:c1:93:9c:a8:89:b6:
75:51:63:1a:f2:ac:7e:2c:9e:1f:5a:34:06:ed:53:f6:d0:cd:
d4:b9:bd:a0:e4:6e:69:be:50:3c:f6:52:5a:90:52:c4:82:be:
8c:25:ae:b9:98:0e:f3:f1:98:c8:be:4c:7b:31:8f:14:23:28:
e3:04:ac:ed:74:dc:7d:c6:3b:5f:46:eb:9f:be:ee:e9:e7:07:
db:67:89:e0:56:50:1a:26:12:01:82:a0:2c:89:8a:f3:24:f5:
54:1b:35:74:21:22:07:56:e4:1e:73:fe:29:e8:36:4f:76:7d:
80:6e:32:ae:3a:e5:78:1f:30:3c:60:6f:8b:60:e5:1e:27:55:
ef:48:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:42:47 2026 by rpki-client