Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: LZMbrI2rPbSuyJkkdXIN4oS/PzZ/nDSzcTW2bU7uwLM=
Subject key identifier: ED:51:91:B0:51:90:D7:E5:89:21:AC:AA:BB:E7:D3:6A:77:33:09:86
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 01A0D45DCFE4F5B8F57B7B0B1A4CCB862CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1A7A
Signing time: Thu 24 Sep 2026 17:01:52 +0000
Manifest this update: Thu 24 Sep 2026 17:01:52 +0000
Manifest next update: Fri 25 Sep 2026 17:01:52 +0000
Files and hashes: 1: 60T19wa2SlM3ZiPayRZ2n1NrApw.roa (hash: aMzkAP/cDxiHQ9vf70ws51PtkVu4/Z7Zz2jP+ZQUqas=)
2: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
3: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
4: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
5: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
6: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
7: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
8: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: SUkH50pifreF0Y473j+SZIQcIMG1nYbSp6paP4px13Q=)
9: dfblRhCjffZSWc4rnsQFcpCEos8.roa (hash: mi3ij9CS4Da75DCzGftaT41PVVIZsboGM7ahRlZsPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:cf:e4:f5:b8:f5:7b:7b:0b:1a:4c:cb:86:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Sep 24 17:01:52 2026 GMT
Not After : Sep 25 17:01:52 2026 GMT
Subject: CN=ed5191b05190d7e58921acaabbe7d36a77330986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:40:ad:b1:ce:c4:6e:bc:f7:cf:b9:1e:0d:
ac:f4:a8:43:ff:18:ab:f0:e9:2e:40:43:bd:b4:3e:
e3:5e:05:47:42:3a:3f:18:5c:6d:f4:6b:06:88:04:
0e:cf:46:db:19:c3:d3:2e:50:5a:48:a0:ef:f0:09:
e4:f3:58:eb:89:1d:f8:ae:07:69:00:77:da:59:8b:
d7:45:2a:56:f9:1e:5c:b0:fb:02:34:a4:a2:54:b4:
12:c5:3e:e6:87:d7:8f:e5:54:90:d6:c2:b5:cb:e9:
4e:45:58:a5:bb:81:95:12:8c:18:f9:a9:5e:2f:12:
00:f7:57:34:01:74:c1:44:51:fb:3f:e9:9f:9b:a0:
95:17:42:72:3a:59:9b:20:3f:19:cc:4d:c2:90:83:
bc:e7:ad:a6:4d:5b:b7:ce:c8:73:66:b1:64:61:b1:
82:a6:ba:26:0b:e2:95:e9:47:61:b8:d6:98:60:de:
9e:58:d8:7e:34:6f:35:25:0b:fb:5e:b6:8e:32:62:
50:47:40:20:26:ee:66:2d:3d:b2:c2:4e:34:76:d8:
ee:f3:72:a5:b1:1f:81:a6:f3:b8:45:38:8b:ea:04:
47:a0:70:5a:1c:d9:06:5a:ba:27:12:32:ab:1e:c6:
55:2c:24:e8:ab:6d:14:df:97:0e:ad:b4:55:0f:dd:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:51:91:B0:51:90:D7:E5:89:21:AC:AA:BB:E7:D3:6A:77:33:09:86
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:36:2f:59:a6:5e:2d:59:7e:0f:8a:3a:a7:49:af:e9:9f:
c5:9f:c6:bb:d3:f4:65:65:11:f6:02:15:83:77:f5:29:46:6e:
26:ee:78:a2:66:d5:e8:22:7f:a0:58:ef:fb:91:e4:cb:af:4e:
e3:73:1f:c8:24:e0:5f:9b:ff:41:94:d3:62:58:eb:00:ba:12:
a5:f8:28:96:d9:c0:d4:e7:e5:e0:af:bc:4d:50:cb:83:a8:3d:
8b:f2:6c:8a:e6:16:e6:d2:04:54:be:e9:70:17:cf:bc:d2:36:
91:33:19:69:2c:61:39:d5:95:e5:a1:e8:b3:92:c6:20:f0:47:
63:fb:56:79:10:d1:f2:d1:d1:8e:d7:bf:07:b0:fd:9d:c9:a0:
2f:8c:20:35:70:3d:69:c6:f8:f1:eb:8f:ff:62:c4:07:fe:3b:
1e:c5:7f:05:0e:ba:31:6c:da:59:46:99:4b:bf:a8:0b:e6:21:
4d:5b:2f:98:e8:e4:11:da:bc:52:53:e0:7c:de:fe:f5:aa:5b:
bf:d6:60:cd:4b:7c:d8:db:ff:da:f9:bd:94:a4:50:eb:af:cc:
3d:89:3f:72:4c:d1:1c:2a:f4:12:ae:d7:f6:03:66:8a:49:1e:
d9:21:2a:5d:b1:7d:a7:2e:85:13:84:a4:0e:5e:78:87:8f:08:
b9:8e:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:40 2026 by rpki-client