Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: C5sPgZ7QV2rq8H4usrIjG8TCB9aDlRfbXaxkjGbr43E=
Subject key identifier: ED:81:7E:25:0B:23:B8:84:91:EE:4E:FA:58:A8:0B:B3:57:71:38:0F
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 019D2816559F889CF6E854819F43589635D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 15D0
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa (hash: fDpAtLsxJawEMxiSb4C7tAx2OdBkgN/gABVjU5t3l/s=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: k7Fxj73TXHU6r06ukN4TfzuDEkWuee1h3H1LohzOQBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:55:9f:88:9c:f6:e8:54:81:9f:43:58:96:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=ed817e250b23b88491ee4efa58a80bb35771380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:c6:97:26:28:40:fb:8a:97:02:b2:ce:15:
97:76:a3:7a:fb:bd:f2:ef:1a:ea:a0:e8:79:fe:78:
fb:3b:a9:f8:00:71:cb:57:af:bc:05:bb:a5:6a:f9:
25:b3:ec:b6:d4:b2:03:cc:f7:49:a1:1a:c7:71:8a:
1a:0b:ba:73:7f:5e:9d:16:62:21:ca:94:88:80:77:
66:fa:18:5e:29:0b:e3:54:18:8b:d4:60:d7:5f:9b:
f5:09:9e:4a:f6:15:dd:79:88:80:58:dc:7e:4a:a5:
83:b1:99:42:94:85:cf:e8:79:da:06:61:7d:cd:bf:
2e:df:d6:07:94:42:09:33:b3:09:fe:9a:79:51:8f:
42:30:b6:34:d5:e0:6f:3f:0d:d2:61:1d:d3:f1:cc:
5b:c0:31:48:59:5e:ff:a9:f3:fc:7f:41:81:6c:17:
b5:47:8a:13:3a:26:f1:bb:15:83:d4:2f:9f:0b:73:
a5:b6:15:53:e4:33:4c:bc:61:53:e3:ce:bd:9b:d7:
f6:86:2e:25:a9:94:7b:6c:08:7b:0a:ad:bb:ba:59:
30:5f:56:e6:8a:22:ef:8c:e8:0c:60:9e:72:2a:fd:
ff:41:85:ad:b6:a5:52:94:f5:ec:51:7b:ae:9e:55:
0a:c3:64:4d:67:44:5e:67:37:e5:12:3a:ed:e8:f0:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:7E:25:0B:23:B8:84:91:EE:4E:FA:58:A8:0B:B3:57:71:38:0F
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:80:02:21:c0:15:68:91:4d:da:f3:90:f6:9a:9a:49:86:10:
e4:1a:21:85:1b:82:68:99:e5:7b:96:ce:77:73:74:0d:92:d1:
3a:1c:54:f7:72:08:4d:a0:01:b7:e0:37:43:0d:d5:a5:09:0d:
90:56:c5:63:11:45:97:34:dd:a3:ce:73:82:5b:04:44:1d:40:
29:9c:3f:36:57:e7:8d:f5:fd:24:86:47:7f:dc:b9:d8:95:d9:
a2:34:ba:31:89:95:78:30:85:fb:4a:51:4d:a1:bc:b5:50:8d:
1a:bc:a8:df:6a:ef:37:8e:b4:fe:38:3b:82:cc:b9:27:e7:be:
54:19:50:5e:2d:82:f4:76:77:d7:bc:27:a1:f8:3e:1a:60:3e:
cb:4e:c8:63:d8:1e:7b:17:62:3d:68:aa:d8:c4:1c:61:f5:df:
d7:e0:68:8d:3a:7c:51:a0:ca:1f:c8:5b:68:dd:d3:34:b1:31:
2d:65:30:f0:26:08:c7:3c:59:06:ed:b5:d7:03:59:a0:20:84:
4a:a5:4e:ae:4b:b3:f6:3f:d3:2f:33:e9:1c:3f:0d:02:4a:2a:
9c:a6:5d:8e:d7:08:8c:a1:b7:9d:9e:ba:34:24:4c:d8:1a:93:
8b:69:4a:f9:7c:bb:47:ba:d0:ac:1f:ce:ea:87:98:00:c1:85:
35:7a:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:48 2026 by rpki-client