Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: Zi5HTjK3BBq+uBTgIC6//P5Glhk7l+Rd0cdTn2fUBMM=
Subject key identifier: 0A:4F:05:20:D0:F0:2C:D0:29:64:8C:D3:04:74:48:DA:B5:16:A8:BD
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 01A0D34AE31711E40C9C4CD898D842BA2050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 12:01:35 +0000
Manifest this update: Thu 24 Sep 2026 12:01:35 +0000
Manifest next update: Fri 25 Sep 2026 12:01:35 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: JYuMTO5M/U34grzHOIJmtH0qpdDC8k8Ah88fbeTqXN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:e3:17:11:e4:0c:9c:4c:d8:98:d8:42:ba:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Sep 24 12:01:35 2026 GMT
Not After : Sep 25 12:01:35 2026 GMT
Subject: CN=0a4f0520d0f02cd029648cd3047448dab516a8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:d7:4b:ce:a2:33:28:4d:54:05:23:68:7e:
bb:8c:07:1e:44:31:f8:cd:e3:d7:b8:eb:a0:89:a4:
2c:e9:aa:d7:46:a9:87:cc:8a:2a:f4:95:a5:3e:73:
14:de:a5:9d:3b:b9:16:f7:91:0a:e7:d6:79:49:b8:
69:30:ce:df:6b:be:e8:39:a5:ea:bf:e6:0a:ce:e9:
51:21:21:68:1e:9f:62:6a:43:94:d7:c3:f3:03:2a:
08:2e:e8:0b:fc:f2:09:25:71:a3:8c:18:31:29:c7:
a6:3c:83:0c:94:9b:d0:ae:64:a4:6e:54:db:91:1a:
b8:23:c3:8b:dd:e6:b6:a4:88:2f:55:1b:7e:ad:48:
8c:98:10:9d:3e:a9:a3:b6:04:67:eb:4b:9e:bf:0e:
d8:35:7f:8e:48:22:eb:59:0c:5b:e9:5e:55:c9:70:
d8:b8:04:4e:5e:d3:ff:eb:7d:cc:d0:32:88:2e:65:
32:1d:3b:04:62:fb:d7:cd:5a:65:8b:f9:55:4d:03:
54:ec:09:76:a8:7f:e8:b5:e5:00:cc:91:20:0c:e3:
88:65:c5:bd:80:86:32:f3:59:c1:31:2c:ab:3b:9b:
f5:e0:43:22:62:31:ad:e5:64:f5:bc:56:00:f9:fd:
f1:75:88:9f:12:d3:03:e7:44:1f:36:15:8b:c5:3a:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:05:20:D0:F0:2C:D0:29:64:8C:D3:04:74:48:DA:B5:16:A8:BD
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:de:08:2b:55:c6:ea:ba:dd:c6:57:c6:3a:6f:99:c4:1d:7d:
76:4d:a8:d4:57:84:e2:05:87:fc:8e:b4:00:6b:5b:90:6b:c6:
69:e7:4a:41:aa:95:44:71:dc:9c:ce:2a:29:b7:d9:25:ac:81:
6d:ac:cf:cb:f2:52:e1:b1:b1:82:5b:ff:29:f0:13:ea:60:05:
0b:bf:64:7c:29:6f:68:b5:e1:06:05:c8:95:1c:88:a6:c5:d7:
8e:a2:3a:ac:9e:a2:48:5b:91:7b:2c:14:ea:13:f9:2d:2a:aa:
c8:ba:aa:5f:a2:fe:cb:77:b3:dc:3d:87:b6:b9:21:fa:3a:dd:
40:b6:e4:cd:c3:03:d9:c3:39:46:d0:f5:bd:80:72:af:5e:00:
7b:61:7c:63:ca:18:ad:c1:3c:75:ee:e6:a1:ca:64:50:09:0c:
a7:31:13:da:35:55:f1:ba:e0:7f:aa:96:a7:40:83:4e:b7:5e:
49:9c:92:3b:db:79:43:40:bb:82:1d:45:a4:73:b6:78:20:f9:
20:86:74:3a:c4:94:88:f9:38:6d:90:9c:6f:3f:25:22:21:4f:
9c:f6:d8:ea:97:95:c1:73:6e:92:54:c7:f6:50:ee:82:75:5a:
14:47:7a:e4:6a:f4:b2:8e:ac:1f:07:54:17:ed:bc:4a:3d:6f:
f0:f5:1b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSuMXEeQMnEzYmNhCuiBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjYwOTI0MTIwMTM1WhcNMjYwOTI1MTIwMTM1WjAzMTEwLwYDVQQD
EygwYTRmMDUyMGQwZjAyY2QwMjk2NDhjZDMwNDc0NDhkYWI1MTZhOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOjXS86iMyhNVAUjaH67jAceRDH4
zePXuOugiaQs6arXRqmHzIoq9JWlPnMU3qWdO7kW95EK59Z5SbhpMM7fa77oOaXq
v+YKzulRISFoHp9iakOU18PzAyoILugL/PIJJXGjjBgxKcemPIMMlJvQrmSkblTb
kRq4I8OL3ea2pIgvVRt+rUiMmBCdPqmjtgRn60uevw7YNX+OSCLrWQxb6V5VyXDY
uAROXtP/633M0DKILmUyHTsEYvvXzVpli/lVTQNU7Al2qH/oteUAzJEgDOOIZcW9
gIYy81nBMSyrO5v14EMiYjGt5WT1vFYA+f3xdYifEtMD50QfNhWLxToNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApPBSDQ8CzQKWSM0wR0SNq1Fqi9MB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt4IK1XG
6rrdxlfGOm+ZxB19dk2o1FeE4gWH/I60AGtbkGvGaedKQaqVRHHcnM4qKbfZJayB
bazPy/JS4bGxglv/KfAT6mAFC79kfClvaLXhBgXIlRyIpsXXjqI6rJ6iSFuReywU
6hP5LSqqyLqqX6L+y3ez3D2Htrkh+jrdQLbkzcMD2cM5RtD1vYByr14Ae2F8Y8oY
rcE8de7mocpkUAkMpzET2jVV8brgf6qWp0CDTrdeSZySO9t5Q0C7gh1FpHO2eCD5
IIZ0OsSUiPk4bZCcbz8lIiFPnPbY6peVwXNuklTH9lDugnVaFEd65Gr0so6sHwdU
F+28Sj1v8PUbgA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:31 2026 by rpki-client