Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: xi3jX99s0dcIZuoDg+9C5EzsXUNo3oSMhHuQIPS8yC0=
Subject key identifier: 33:38:C4:10:FB:3D:0B:87:7E:AF:DE:2D:A0:8B:C6:C6:A2:62:F2:AD
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 019E1EA36739B53BA6DB961EBCB90A1AA5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 0991
Signing time: Wed 13 May 2026 00:01:25 +0000
Manifest this update: Wed 13 May 2026 00:01:25 +0000
Manifest next update: Thu 14 May 2026 00:01:25 +0000
Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=)
2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: MWZN0uvCIRyYLQxytn0/HA7vbAYTutnaUDSDIMsyi6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:67:39:b5:3b:a6:db:96:1e:bc:b9:0a:1a:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: May 13 00:01:25 2026 GMT
Not After : May 14 00:01:25 2026 GMT
Subject: CN=3338c410fb3d0b877eafde2da08bc6c6a262f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:db:1d:38:cd:2d:33:2a:2f:c3:37:49:a6:
f0:df:d4:06:6d:dd:3e:05:57:56:77:bf:28:a7:a8:
93:08:e5:dc:32:9c:22:de:48:48:39:10:4a:d1:dc:
93:7c:6b:b2:63:f2:a9:0e:63:df:af:0d:a8:fd:c5:
b0:0e:5b:6a:b7:ba:34:9c:9c:5b:03:34:f1:58:21:
eb:92:b2:41:eb:6a:c8:5b:c9:ff:94:6f:bb:aa:68:
11:a7:18:69:be:0c:b5:d0:6c:4d:20:ae:1c:b2:65:
79:15:95:27:91:f9:3b:3b:93:e8:0f:48:db:ad:a1:
3b:0c:6e:40:95:08:65:5e:99:87:28:35:45:00:4f:
8e:2a:54:a2:3d:d5:ab:10:53:cc:4e:d7:cc:0c:01:
09:38:51:77:c6:96:ba:34:89:88:56:38:9f:db:a6:
e3:9d:0b:79:ef:cb:cf:71:1c:3c:70:e5:58:36:38:
80:e6:af:23:3a:ab:65:0d:21:6c:f1:be:15:68:90:
b1:55:00:18:9b:5e:59:79:e9:99:4f:80:0d:8e:ea:
0e:9d:39:7e:e0:17:75:19:09:8a:8e:9a:5c:cf:8b:
b8:a1:20:be:7e:41:a9:58:b6:60:3a:3e:1d:27:77:
ce:19:d3:86:96:30:00:46:51:67:8f:e3:7c:91:e1:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:C4:10:FB:3D:0B:87:7E:AF:DE:2D:A0:8B:C6:C6:A2:62:F2:AD
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e2:2f:f3:51:58:bf:0c:a8:64:28:b9:25:eb:ab:b0:c4:c4:
64:57:99:aa:48:00:92:9e:c7:44:67:d6:7a:8e:30:bc:69:ed:
8e:14:b7:4a:06:3a:c3:34:c6:b7:b2:c9:ab:8e:aa:25:1a:b6:
3b:0d:e8:0a:39:c7:98:b2:74:a6:9f:ba:80:a2:82:df:16:6a:
9a:e0:fb:6c:4f:3c:ca:d3:3d:63:5f:e5:06:48:de:c7:eb:d2:
9b:6c:08:a9:8d:58:10:69:a7:36:89:2f:a5:2f:63:56:d8:06:
8f:ed:56:08:2c:63:bc:99:1d:4e:42:dd:a5:00:22:4f:62:09:
67:3c:f4:25:df:ed:96:ac:3f:bd:da:81:5d:6f:da:74:c0:51:
ab:5a:8c:81:f7:9e:19:9b:80:98:56:a5:eb:ac:34:4f:83:c7:
19:05:f8:2c:96:f5:c1:04:60:22:ca:c9:76:af:72:02:cd:5f:
0a:bf:11:be:be:ce:10:23:cd:c7:53:2e:ba:5f:70:bb:cc:d3:
00:ab:fb:ea:8f:ac:da:43:95:41:29:08:0f:04:99:47:53:85:
25:7d:57:91:8f:74:ed:6b:3c:bd:3b:11:5f:64:c8:44:41:57:
60:d1:63:60:7e:09:3e:85:1d:34:85:81:06:7b:46:a2:39:f0:
af:72:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:51 2026 by rpki-client