Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: ovf7nL/x1OJbvoEM8Kd2t/aggGPrJDdOoQ7+kPAB+e0=
Subject key identifier: 4D:28:C2:36:CC:64:7E:05:8D:EE:33:57:7F:A3:30:D4:81:06:C3:B5
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019F946DA8766A831F79CE9ADB9F8B540110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 02BD
Signing time: Fri 24 Jul 2026 14:00:42 +0000
Manifest this update: Fri 24 Jul 2026 14:00:42 +0000
Manifest next update: Sat 25 Jul 2026 14:00:42 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: tFvj95Xc9k5iiQDiE//U8sJjEBhP2brSV0tSd2ACJQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:a8:76:6a:83:1f:79:ce:9a:db:9f:8b:54:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Jul 24 14:00:42 2026 GMT
Not After : Jul 25 14:00:42 2026 GMT
Subject: CN=4d28c236cc647e058dee33577fa330d48106c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:5b:b9:30:4d:a7:1a:b4:05:c5:ec:84:4b:
9b:3d:99:9c:54:72:0e:ec:71:2d:94:7a:e6:d3:95:
b7:19:44:f3:c8:4c:71:f3:04:7f:4c:05:39:e5:ed:
cf:16:bc:b7:0a:4c:df:63:0d:52:e3:3a:7e:61:34:
17:0d:b3:58:ce:3f:b8:c0:f2:7e:98:1c:f4:1f:da:
9b:5f:31:0d:90:c5:c2:7a:d4:ea:4e:45:b9:3e:94:
8d:d0:38:35:d1:49:56:d6:d4:0c:da:d5:31:ca:df:
b0:da:e8:cd:f6:e2:86:3b:48:d6:e6:b0:58:66:5a:
8c:d8:ed:09:b2:bb:bd:d1:34:6d:51:21:d9:4e:b9:
de:57:29:89:07:ad:19:6b:57:8d:22:aa:08:8c:69:
e7:08:e3:fc:31:69:92:bd:f3:a0:eb:bb:a4:32:bd:
54:2a:4b:63:5b:61:50:20:f5:bf:df:4d:33:52:f2:
14:65:d8:ee:ca:94:11:b6:2f:d1:64:cb:3f:35:99:
07:6f:a0:e1:f8:0c:5e:1e:73:55:0e:e6:8d:23:cf:
36:a8:db:87:42:15:e8:8e:53:d8:48:22:60:3c:28:
46:61:85:63:4f:22:2f:a8:f1:6e:4e:46:be:a7:e7:
5f:31:44:7e:a4:0a:94:3f:0f:69:89:b4:00:06:3d:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:C2:36:CC:64:7E:05:8D:EE:33:57:7F:A3:30:D4:81:06:C3:B5
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:0e:bf:5b:6b:2c:15:f3:c1:e1:af:b8:7c:f1:a2:76:88:
4b:95:36:47:d9:40:e4:8a:74:2a:63:62:cc:0c:48:a1:0e:f1:
99:79:6f:af:ec:36:f3:6c:5f:60:8a:89:a9:36:5a:d5:1b:88:
55:39:33:a1:2f:e6:58:54:81:cb:2b:a4:5f:95:d8:af:b9:63:
63:f5:b2:da:d9:e7:11:e3:79:25:19:7b:6e:54:a0:ed:e7:00:
15:f1:e2:27:3e:88:df:34:67:92:77:ad:5e:64:57:af:13:9d:
5d:23:c7:83:08:11:d1:57:2c:41:69:f4:bd:ce:35:b3:1e:3c:
2a:6c:56:cb:a5:47:6c:8b:08:0a:7c:82:45:93:a2:9a:1b:87:
72:b7:45:f6:6b:44:a3:fe:b7:02:80:0d:70:b7:e3:5d:f5:5f:
93:87:12:cc:f4:a4:98:d7:50:9d:5f:a4:41:72:bf:51:80:c2:
b8:12:f3:30:10:4d:f0:75:60:ec:f5:7b:1e:93:e8:88:24:d5:
27:97:49:36:23:70:4d:42:24:1e:6d:39:2c:f9:fa:22:02:0c:
2f:58:37:ee:50:b2:9f:41:bb:3c:0c:e3:df:98:ca:fd:b4:2e:
c3:c6:b7:b6:57:59:57:81:96:f1:ec:2c:f8:7f:a2:ce:fc:76:
cb:2c:16:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:33 2026 by rpki-client