Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: i04H7VMSi+VOh1wSDVbdiVszq9kvZO5Ah86bn8EUeh8=
Subject key identifier: ED:FE:4C:73:D3:A2:6D:0F:52:33:E8:1D:42:D2:AF:C4:2E:13:45:F0
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019D2772A3BF080895D27672C037E633D6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0911
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: 0bXIii3AkreDh0/bMR3mHY30LwWnOUM8lwGQ4A6jr6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a3:bf:08:08:95:d2:76:72:c0:37:e6:33:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=edfe4c73d3a26d0f5233e81d42d2afc42e1345f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:c7:b5:83:e8:ba:3e:44:01:18:14:fd:7b:
b4:38:ab:e7:8d:1d:76:94:38:6f:96:b7:10:92:cb:
33:05:0e:38:f0:bc:4e:8d:d2:0d:a4:04:62:a7:81:
02:a9:e7:6d:59:10:f9:90:62:5c:ae:b2:85:43:02:
db:a4:aa:a4:78:cb:94:1c:be:1e:42:6e:78:c0:ae:
f9:13:79:f9:10:f7:d9:12:9b:a5:7c:88:4f:eb:72:
f1:04:4e:ea:60:91:32:67:e0:17:7d:5a:93:1f:19:
65:22:38:c6:56:b2:9a:e8:75:83:7f:b2:f3:c3:78:
81:8a:ad:0b:02:19:12:30:50:b5:2a:25:79:f5:d0:
e7:35:87:ab:09:5d:3c:ee:09:80:d8:e6:ab:72:37:
87:2e:1a:40:6f:1a:3e:82:ed:26:b4:14:ca:93:83:
88:a4:19:8b:93:09:39:bb:61:ac:6c:23:8d:89:26:
2c:d8:45:66:5f:3f:5c:4a:f3:b3:34:a3:37:b6:98:
29:09:cb:9f:6b:c0:71:f3:67:c0:c2:26:39:d3:a6:
66:cc:6a:ae:22:fc:f6:23:e5:ba:21:59:49:b3:a8:
ee:de:9e:6b:02:56:d8:70:08:07:c6:8a:94:57:50:
38:d2:ac:8d:5e:85:ed:e1:6d:67:8a:c5:52:11:9d:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:4C:73:D3:A2:6D:0F:52:33:E8:1D:42:D2:AF:C4:2E:13:45:F0
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:62:1b:e5:1a:e8:cf:a5:e0:c7:8a:46:e5:86:56:04:61:
67:f6:fe:e1:fe:b1:b1:39:34:6a:ad:bc:7b:8e:a6:ce:78:4b:
ed:3f:5b:5b:b2:c0:83:4d:17:64:a1:42:b6:1f:4f:18:77:90:
01:95:29:ec:fb:28:47:92:6c:77:7a:54:de:51:84:9b:c5:6a:
b4:61:7c:b7:22:28:f1:e2:23:0c:f3:df:07:84:cc:82:f0:56:
a3:fe:91:45:5b:e7:0b:86:14:06:d4:4e:c9:71:16:d0:af:de:
d7:f3:ad:ea:ba:ce:c9:c7:8e:f7:59:da:8e:21:45:85:82:b8:
46:43:d1:aa:1c:dd:22:ec:0c:26:b5:05:9a:25:3d:25:65:91:
dd:5f:64:49:3e:95:ba:84:92:2c:86:d0:b0:7a:87:da:e6:0e:
3b:71:eb:ef:fa:2e:40:5c:61:5f:14:0a:7e:3c:11:7b:74:b2:
2f:6a:ba:a8:6e:8c:66:44:bd:b9:fc:3c:d3:b9:a4:c5:16:4f:
13:9b:58:bc:1d:5a:40:69:50:53:02:5c:a4:01:35:0b:93:25:
07:83:0b:99:11:6e:c5:77:c4:ba:ff:8a:72:28:06:5f:cc:05:
f3:8f:3d:01:a2:06:f8:84:1f:33:23:60:25:c4:82:5a:5a:e2:
7f:e0:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:48 2026 by rpki-client