Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: eMizZes2i2wg9Kjb7gB9kN7Q2m77MZDayEyl0RSFcY0=
Subject key identifier: D5:CA:EF:B1:E2:D2:3E:EF:83:4D:2B:84:D6:9A:EB:4E:75:AA:62:13
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 01A1005AACB4CD5F9F6F8B8476E38C1ED6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0B0F
Signing time: Sat 03 Oct 2026 06:01:44 +0000
Manifest this update: Sat 03 Oct 2026 06:01:44 +0000
Manifest next update: Sun 04 Oct 2026 06:01:44 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: Mb0yKlq8V0KapzaJLOrDxkcLnvZdKFk8nE0EL0fLgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:ac:b4:cd:5f:9f:6f:8b:84:76:e3:8c:1e:d6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Oct 3 06:01:44 2026 GMT
Not After : Oct 4 06:01:44 2026 GMT
Subject: CN=d5caefb1e2d23eef834d2b84d69aeb4e75aa6213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:b1:b1:74:5c:1f:53:ff:93:53:a3:19:e4:
16:4d:1a:06:51:ed:39:3f:25:f5:cb:52:99:22:4f:
f8:44:23:7c:ef:1b:8a:a5:69:5a:38:6d:b0:c0:23:
27:71:72:ce:1d:fb:41:97:87:aa:c8:1d:f7:a3:8e:
94:45:79:c6:9b:3d:80:af:a1:3c:3a:2f:7d:d5:a1:
dd:f6:d5:3b:bd:10:d6:a6:0f:6e:a6:67:6c:d8:60:
ea:da:a2:1d:85:6a:00:01:e6:4c:31:15:b9:93:61:
be:fa:21:a3:13:c8:64:fc:e1:d9:77:f8:36:84:f9:
9c:98:0e:86:e4:6b:b0:f5:6e:5f:fe:78:b0:ef:c0:
96:37:ed:a0:e9:fc:7c:07:d6:03:3a:7e:22:37:ca:
9c:dd:a6:1a:d6:49:87:a6:62:27:0f:9a:cb:3e:70:
be:ac:aa:c4:42:94:39:86:ab:6d:34:b8:08:30:51:
c8:9c:e9:61:8e:fe:ee:b9:81:2d:ba:a0:46:8a:f9:
d9:e7:5a:69:e6:89:71:ce:4b:38:59:eb:8d:52:48:
7e:cc:8e:45:62:e1:70:fb:e3:91:aa:30:df:9f:9d:
de:6c:4a:83:0c:81:09:e1:4a:62:01:eb:7a:a0:b2:
31:ca:34:7d:39:52:83:5f:28:67:db:21:6b:05:c6:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:EF:B1:E2:D2:3E:EF:83:4D:2B:84:D6:9A:EB:4E:75:AA:62:13
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b1:6d:1b:d9:18:3d:63:2a:73:de:48:5e:aa:ee:ee:b8:f8:
f1:33:5a:c7:fc:e3:58:a3:08:0a:ae:9a:39:51:53:48:5f:b9:
16:16:9a:cc:d6:94:46:82:57:8a:bb:6b:0d:27:34:ce:da:78:
25:25:6f:2f:6c:9a:4c:22:71:9a:e2:b8:b1:45:c7:f2:9e:cf:
fd:cf:75:2d:d3:ff:e4:04:32:51:ad:1b:41:6c:90:06:ec:88:
a5:40:ec:76:0a:ec:c0:64:73:56:4b:7d:46:06:e9:93:61:ae:
5e:13:d2:0c:32:28:98:bc:3b:4c:64:b7:e7:71:55:b5:b3:8d:
24:26:10:bb:33:4f:c6:53:e4:91:38:16:21:d2:7d:f0:33:e9:
49:a9:5c:66:57:f4:0e:23:c1:f6:6b:f1:dd:ed:4c:10:89:37:
9a:39:04:2a:e0:21:ed:a8:55:6c:56:d4:c1:11:b1:65:86:96:
d6:3f:05:4e:e8:8d:4d:93:b7:2b:f3:c9:8b:0d:b5:e5:e7:ce:
cf:d0:f8:d3:78:9f:92:28:05:73:fb:78:f5:a0:19:7c:16:53:
43:5d:a5:67:49:00:31:f9:64:9d:40:f2:b0:26:fa:c6:d8:f9:
68:a5:d4:c5:45:2d:1f:d4:e2:b1:24:5f:3c:9d:a1:2d:da:c2:
c9:eb:b7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAWqy0zV+fb4uEduOMHtamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl
NzVkZWYwHhcNMjYxMDAzMDYwMTQ0WhcNMjYxMDA0MDYwMTQ0WjAzMTEwLwYDVQQD
EyhkNWNhZWZiMWUyZDIzZWVmODM0ZDJiODRkNjlhZWI0ZTc1YWE2MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoCxsXRcH1P/k1OjGeQWTRoGUe05
PyX1y1KZIk/4RCN87xuKpWlaOG2wwCMncXLOHftBl4eqyB33o46URXnGmz2Ar6E8
Oi991aHd9tU7vRDWpg9upmds2GDq2qIdhWoAAeZMMRW5k2G++iGjE8hk/OHZd/g2
hPmcmA6G5Guw9W5f/niw78CWN+2g6fx8B9YDOn4iN8qc3aYa1kmHpmInD5rLPnC+
rKrEQpQ5hqttNLgIMFHInOlhjv7uuYEtuqBGivnZ51pp5olxzks4WeuNUkh+zI5F
YuFw++ORqjDfn53ebEqDDIEJ4UpiAet6oLIxyjR9OVKDXyhn2yFrBcZWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXK77Hi0j7vg00rhNaa6051qmITMB8GA1UdIwQY
MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt
YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5
LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrFtG9kY
PWMqc95IXqru7rj48TNax/zjWKMICq6aOVFTSF+5FhaazNaURoJXirtrDSc0ztp4
JSVvL2yaTCJxmuK4sUXH8p7P/c91LdP/5AQyUa0bQWyQBuyIpUDsdgrswGRzVkt9
Rgbpk2GuXhPSDDIomLw7TGS353FVtbONJCYQuzNPxlPkkTgWIdJ98DPpSalcZlf0
DiPB9mvx3e1MEIk3mjkEKuAh7ahVbFbUwRGxZYaW1j8FTuiNTZO3K/PJiw215efO
z9D403ifkigFc/t49aAZfBZTQ12lZ0kAMflknUDysCb6xtj5aKXUxUUtH9TisSRf
PJ2hLdrCyeu34w==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:09:35 2026 by rpki-client