Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: q8V8g0ROsrFJNajx21Jwb6tKqLkb06Vd4ZBQ03fp5qo=
Subject key identifier: 03:5C:C6:1F:23:DF:C1:ED:08:F8:36:15:D1:40:5B:7C:67:46:8B:73
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 01A0FA8EDE33C6065F7E76A56DB308F05CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 10CF
Signing time: Fri 02 Oct 2026 03:01:01 +0000
Manifest this update: Fri 02 Oct 2026 03:01:01 +0000
Manifest next update: Sat 03 Oct 2026 03:01:01 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: 5/nVE5QeZuTe3QvGjl0ygRsQEH1MXw/Vm8ueRiR0D2s=)
2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:8e:de:33:c6:06:5f:7e:76:a5:6d:b3:08:f0:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Oct 2 03:01:01 2026 GMT
Not After : Oct 3 03:01:01 2026 GMT
Subject: CN=035cc61f23dfc1ed08f83615d1405b7c67468b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:1b:92:4f:93:4c:bf:d4:e9:3f:67:58:82:
e4:b6:14:05:2f:a3:33:46:c0:ae:bb:7e:b7:59:a8:
b0:34:92:42:96:e1:10:e6:67:9d:24:c9:2d:d4:2b:
ca:6d:c6:1f:aa:0e:55:01:f4:d5:e1:3c:64:52:c6:
3a:fa:bc:72:4e:72:0c:7e:ab:d0:60:c2:db:c9:98:
8b:21:95:b8:88:fe:8e:63:24:28:c8:45:4b:b6:b2:
c4:6b:06:3d:a5:86:64:5d:f4:5b:5e:e5:8a:c9:2b:
e4:50:86:8a:b6:e1:33:02:e4:0c:2a:c4:c2:27:28:
fe:77:7d:e4:07:41:02:85:c1:67:dc:6f:dd:b6:6a:
dc:ea:de:df:6b:2d:c5:40:44:1d:b5:b0:e4:7f:ff:
ac:34:d2:46:37:b1:03:01:9a:84:80:fd:97:4f:80:
ea:15:09:5e:9e:b7:fc:c1:67:53:6d:10:4e:d6:85:
8b:4e:2b:be:e7:ac:24:51:af:f9:8e:f0:7e:8b:16:
81:bb:c5:4c:b9:c8:bf:83:d6:2a:57:bc:72:60:ca:
eb:b7:f5:76:0e:eb:b3:13:d9:c8:70:26:af:7b:62:
ae:88:96:92:b8:ea:3f:15:b9:37:c2:67:ab:1d:e9:
e8:a8:3e:48:10:a8:6b:cd:a5:ac:8d:ff:80:20:94:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:C6:1F:23:DF:C1:ED:08:F8:36:15:D1:40:5B:7C:67:46:8B:73
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:85:f7:ed:3b:04:fe:83:26:61:7d:f7:ab:ab:2d:6f:4c:dd:
13:d0:11:9c:e9:11:97:d8:c6:0e:32:97:23:f1:9c:27:0f:a5:
05:cd:a0:d2:1c:bd:19:72:6e:b7:70:ad:71:64:a0:09:6d:3d:
f6:db:0f:e3:b5:64:79:9e:80:bd:86:05:47:31:b6:e6:cd:5e:
10:96:44:fd:d9:18:b6:c6:31:bc:94:3a:4f:47:dc:db:1c:25:
95:6d:a5:ee:27:36:e3:7d:8f:a0:c5:76:84:dd:13:94:5d:8d:
15:4c:52:52:6b:51:34:27:97:14:25:33:84:16:2a:9d:a8:ce:
0e:01:1c:7e:46:3f:87:ea:83:27:18:08:8b:59:4f:a2:d3:f0:
1a:f3:de:3e:09:df:42:1f:c8:e4:7f:0b:ac:10:60:54:74:d9:
b7:74:81:3e:10:ec:12:24:59:58:b8:d7:6e:76:24:eb:a8:ba:
68:94:84:3c:b8:be:30:3a:f7:a9:b2:5a:5b:1f:12:4d:f8:48:
7c:bd:41:96:62:92:f4:20:7d:c4:06:5c:c7:dc:d3:2e:1f:3f:
3a:bb:d3:c1:a3:ce:81:7e:75:e6:91:6b:7e:50:47:4a:0b:aa:
bf:33:19:dc:6f:c0:9b:d2:3a:2c:dc:62:fd:c0:03:a8:5a:6b:
6a:4e:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:28:23 2026 by rpki-client