Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
File: ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft (raw, json)
Hash identifier: tGpnTyRV3MvFWcXqrb6CcbUZ8kssTpv/7+i4O+y8DRc=
Subject key identifier: 2D:CE:F6:2A:35:EE:74:1B:C8:24:15:34:34:8E:E4:BD:29:F2:1F:64
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 019F935B78F0516FF7D302B740D91C2775DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:13 +0000
Manifest this update: Fri 24 Jul 2026 09:01:13 +0000
Manifest next update: Sat 25 Jul 2026 09:01:13 +0000
Files and hashes: 1: BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa (hash: OkZqX4+0oW/Qj1Uouc/atoTjABWwuUvZVfzQUqSvPA8=)
2: NneXFAismUTeCcIIpKAoI4yk5MY.roa (hash: sKjUqhA+u+X7YktHnUp5dUo2aDS2SF2s2/ZzRq8yHTI=)
3: ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl (hash: f6eh/FuEDsH1kJRJAx+NKpQcusaJ0uaVd9PqyEFG/Hg=)
4: ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa (hash: DUZglD2Eemdl/nFsp9RozJnECdeXREQM1P9YxS9WP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:78:f0:51:6f:f7:d3:02:b7:40:d9:1c:27:75:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Jul 24 09:01:13 2026 GMT
Not After : Jul 25 09:01:13 2026 GMT
Subject: CN=2dcef62a35ee741bc8241534348ee4bd29f21f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:98:c5:c0:5f:6f:74:59:5d:04:41:c3:c7:
57:38:3e:cd:b8:f0:60:f2:2d:1e:23:f8:ee:9c:89:
49:9c:34:20:07:6d:4e:f3:26:21:80:f2:aa:76:0f:
66:cd:64:f8:5b:4e:06:09:53:63:3f:16:86:9d:a3:
38:54:23:a1:f2:c7:41:85:a7:79:f5:01:7b:b4:aa:
d2:36:8a:40:55:d3:40:dd:ec:dc:26:8e:71:f3:e2:
a0:93:df:6d:e8:9c:92:18:39:25:f4:40:e5:c9:7e:
43:82:ff:77:dc:39:2e:66:70:63:65:c5:c3:eb:a1:
ba:70:ac:d4:6d:6d:68:92:b9:24:37:3e:25:c4:47:
7f:5f:08:08:86:a2:1b:e4:8c:4a:28:29:23:ad:14:
ca:be:0d:ee:3b:54:76:17:d5:30:75:85:09:70:5d:
c9:93:e6:f0:62:11:6b:dc:ba:15:64:38:ea:c4:37:
b6:94:47:d7:a7:12:f8:64:f2:cb:6d:0d:af:fe:75:
70:e1:2d:72:b9:8d:8c:f8:53:dc:af:21:1e:84:f0:
ac:58:51:fc:14:b5:62:64:1e:5a:9c:ce:04:d7:71:
a8:8b:d7:87:77:4a:bf:78:f6:07:ec:ee:f0:db:79:
09:0c:18:d3:87:d4:e1:72:4f:4f:d2:6b:da:23:40:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:F6:2A:35:EE:74:1B:C8:24:15:34:34:8E:E4:BD:29:F2:1F:64
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:da:b5:d5:1c:ca:7d:a2:b6:26:53:56:b8:f1:5b:75:4d:
52:24:f1:1e:fd:05:4a:c9:91:24:f5:a0:d8:0b:5a:7b:2e:98:
51:95:f9:c8:e3:ba:df:fb:4c:69:33:4f:07:fb:6f:10:87:67:
3f:d6:31:94:24:84:0d:31:de:f0:1a:a5:37:40:40:83:26:fc:
6b:40:93:8f:97:58:4f:58:76:ed:68:35:8b:5f:1a:6c:cc:b2:
b1:cb:34:71:d0:a7:db:0f:62:ee:0e:7a:89:4f:4a:b3:19:de:
bd:12:42:19:5c:dd:46:26:ec:ae:3b:8f:47:ee:54:5d:b2:34:
8c:ed:cf:a7:39:91:f8:6b:93:81:2d:6d:74:44:e0:2c:38:fa:
65:cd:82:19:0b:d3:da:bf:07:bc:56:98:0b:35:9d:7d:f6:29:
44:80:f3:36:70:cc:35:ae:31:14:5d:27:f7:83:d9:6c:a0:8f:
1e:0e:0c:27:56:63:82:23:fb:d0:e0:af:bd:e1:83:db:c5:06:
0b:13:b0:dc:3f:ad:65:40:66:87:c2:13:e3:c6:fa:25:76:72:
df:4a:f5:77:3a:2b:2a:ea:03:ee:52:f1:41:25:d8:66:62:8c:
81:e4:7e:37:68:d0:56:27:67:de:cb:4a:70:7d:c5:4d:c8:d2:
62:b3:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:38 2026 by rpki-client