Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: dkTr9FG5VAFWz+qsrwweacH6U9HLhauoRw3Sh1BgmR8=
Subject key identifier: A3:12:BE:DC:19:D1:BA:AF:B9:F2:99:BB:D6:AE:82:6D:AF:F3:5A:A7
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019D28841FCD8310694E8E38F7BAA5F7C7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 017C
Signing time: Thu 26 Mar 2026 05:00:40 +0000
Manifest this update: Thu 26 Mar 2026 05:00:40 +0000
Manifest next update: Fri 27 Mar 2026 05:00:40 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: 5sxhrey85D8EncIqwdlNFyNh+7grcHVuNfiP/5NcMQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1f:cd:83:10:69:4e:8e:38:f7:ba:a5:f7:c7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Mar 26 05:00:40 2026 GMT
Not After : Mar 27 05:00:40 2026 GMT
Subject: CN=a312bedc19d1baafb9f299bbd6ae826daff35aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:3a:e4:d4:79:82:70:6c:7a:62:58:48:70:
d6:ad:a2:0a:cc:32:47:b9:b5:ea:9c:44:63:3b:5a:
68:3d:1b:83:c5:1f:a9:df:f1:e0:da:16:e3:43:e8:
d8:4e:47:7e:fb:75:38:51:21:5f:c2:8d:57:ae:4a:
f1:db:ee:fa:50:85:d4:81:06:fa:e8:3b:29:e8:04:
79:f4:6b:83:ec:8e:8a:13:9a:0e:f0:a3:63:d9:37:
4b:96:46:a3:dc:d8:4c:4d:9a:92:11:83:99:93:d6:
0b:9b:17:4a:ef:25:ff:d6:c5:3c:3f:85:48:df:8c:
0f:03:d4:07:61:7f:ec:d8:e9:32:10:3b:c1:13:68:
ea:3f:99:fe:4f:8c:e1:84:16:ea:64:44:2d:17:12:
4c:29:6e:8b:a4:a8:44:5e:4c:1f:57:b0:15:6b:bb:
e5:7e:20:44:db:0d:bc:f2:38:11:96:20:66:61:ef:
b7:db:b3:a3:84:c4:79:4d:90:38:e5:d3:81:40:ea:
49:0c:a0:8a:0c:ad:91:fa:03:c6:46:70:8f:7e:62:
55:e0:9d:8f:b7:18:80:74:ea:81:f6:f7:54:4d:db:
5d:7f:08:31:ed:72:f4:3b:b7:94:a5:85:3c:e7:62:
f1:7c:27:4e:b5:6a:94:84:ba:f5:53:f1:3c:f8:55:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:BE:DC:19:D1:BA:AF:B9:F2:99:BB:D6:AE:82:6D:AF:F3:5A:A7
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:dc:91:74:00:85:23:ae:75:be:dc:b3:b7:94:86:96:0c:69:
3a:a4:e0:c0:77:b4:cd:35:70:f2:c7:59:2a:47:83:8f:04:63:
d0:df:d4:f4:38:90:41:99:b4:e7:d3:1b:59:c0:3e:e9:39:41:
50:94:4d:39:aa:d0:77:13:01:09:4d:88:2b:8d:38:85:be:dc:
16:aa:51:8a:84:11:9f:16:71:86:13:3f:27:dc:0b:c1:02:58:
1a:42:f1:e6:ce:93:b8:3a:16:37:70:04:e0:cd:49:f6:c8:ac:
cc:73:ea:ad:e4:9a:12:4e:d3:c9:3a:58:f5:57:8c:00:d1:78:
46:99:80:1e:d9:70:d6:9d:ff:d0:e2:ae:4e:81:7d:be:54:e8:
54:b2:66:74:f4:a8:83:26:31:49:25:37:69:87:f6:96:be:cf:
8a:d3:aa:f7:5e:90:14:a3:3b:3a:e4:34:f8:82:3b:cf:d3:c6:
a3:03:39:b4:a3:c5:21:c4:7d:80:8d:f2:e0:67:8c:3c:b9:81:
80:fd:ed:0c:b2:10:98:80:d4:16:76:6d:ea:43:fd:5a:cf:45:
39:d8:5e:72:7b:ef:8a:4b:c2:21:cd:24:94:9a:44:fc:da:ad:
4d:eb:ab:32:11:17:6b:94:c5:59:c1:a8:5c:7f:55:74:77:a7:
42:9c:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:52 2026 by rpki-client