Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: QgtzgXUj++AkE6y8VwiNx5m954j+kmpvbCrSHYKv+cY=
Subject key identifier: 37:1A:08:7E:99:05:02:EE:C2:98:5B:D5:50:28:16:75:28:9E:BB:EF
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 01A0D426D1DA5E8F06C2F6F8ECCE56288785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 16:01:48 +0000
Manifest this update: Thu 24 Sep 2026 16:01:48 +0000
Manifest next update: Fri 25 Sep 2026 16:01:48 +0000
Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: hrIWjQLE6VZQTIRxLr5ZEYmjxx65xpnhxGwb9O3zmgM=)
2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=)
3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:d1:da:5e:8f:06:c2:f6:f8:ec:ce:56:28:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Sep 24 16:01:48 2026 GMT
Not After : Sep 25 16:01:48 2026 GMT
Subject: CN=371a087e990502eec2985bd550281675289ebbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:63:1e:fc:15:77:29:c0:47:8c:43:d4:df:
98:9d:0f:a9:ca:ea:00:4d:5a:c5:5a:40:70:9c:00:
37:a3:64:be:cd:ec:c2:6e:05:bc:ea:e3:e1:70:e7:
17:9e:8e:27:96:86:f6:b5:49:ca:fb:c9:5c:47:7d:
cc:5a:06:d0:f5:4f:f4:61:9a:1a:10:ff:87:c9:d0:
d7:a6:4e:d9:10:ce:18:c1:0d:e3:d5:46:88:c0:d1:
a7:9d:37:43:52:df:fa:f6:67:55:99:8f:58:49:79:
12:f9:f6:93:bb:eb:d4:95:f2:07:7f:7a:14:30:ca:
9e:0b:ca:7b:c6:8b:67:28:d4:fc:e9:1e:7a:d2:a5:
38:fe:81:2a:81:2a:5d:a0:9f:ef:2e:20:38:1d:e4:
d8:5c:00:57:e6:10:bd:79:1b:bf:de:ab:f1:2b:88:
4a:07:b0:13:9f:3a:4f:23:2d:12:88:ed:45:1b:a6:
fc:31:dd:f2:99:a1:d5:57:7c:fa:84:30:0d:3b:36:
af:59:ad:57:12:e1:d6:60:eb:e2:1b:74:a4:d4:8a:
1b:b2:a1:62:de:01:e3:37:d2:07:04:e8:2f:19:9a:
21:98:38:4b:8b:ba:54:a4:94:2a:5a:4c:f5:6f:c4:
f8:3d:a5:7b:e0:0b:4b:ea:7c:52:2b:0b:0d:c0:39:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:08:7E:99:05:02:EE:C2:98:5B:D5:50:28:16:75:28:9E:BB:EF
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:7c:ba:a8:76:76:e0:01:e5:7a:4a:75:09:e0:b4:24:c2:
cd:bd:14:79:f0:3a:61:e5:61:fe:c0:61:a4:6d:49:cf:de:7a:
4e:51:f1:4f:eb:7b:96:4e:c6:90:13:74:22:14:67:23:ac:bd:
4b:d7:01:fc:2a:ad:a3:99:0e:af:64:7d:8e:94:a1:31:43:bb:
78:41:e8:5e:0a:33:58:20:8f:fe:d3:69:34:a1:78:90:c2:4e:
88:a2:70:7a:0a:75:cf:e0:ef:51:71:0c:7f:90:3a:29:e9:e4:
22:61:7b:bd:e4:83:58:26:4b:e9:34:b4:e8:12:51:03:be:f9:
65:a9:4a:fe:8f:b8:e0:64:3d:07:9b:17:02:f8:eb:e8:e5:c8:
66:1f:1f:ea:8d:27:a4:af:f3:9f:7e:9b:36:c4:01:8f:89:a4:
40:c6:6a:96:dc:cb:6f:60:50:2f:6b:b0:8d:01:86:a1:49:9f:
9a:27:2c:cd:9f:e0:5f:77:c8:02:3f:f0:8a:b8:0e:2f:a5:39:
ac:0a:94:25:a0:cb:4d:bf:35:46:80:1a:e8:fd:6d:a8:78:3e:
b7:2a:1a:9a:0a:50:14:60:f1:7a:ad:56:8f:a1:10:ba:36:c2:
8c:f9:5b:01:78:62:4e:f2:d6:8e:7e:84:21:6a:62:52:44:15:
f8:80:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:39:45 2026 by rpki-client