Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: CcP5Yp8iAS1hHYh8z99BhbloR78jyDP8UcbBQ7U93sE=
Subject key identifier: B8:AE:4D:20:5B:F9:52:ED:A9:AC:13:BC:4F:CB:F7:53:75:25:13:82
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 01A0D50223E8D80F5701942B37456596EE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 0363
Signing time: Thu 24 Sep 2026 20:01:22 +0000
Manifest this update: Thu 24 Sep 2026 20:01:22 +0000
Manifest next update: Fri 25 Sep 2026 20:01:22 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: Ww3Kw+zn/4haYWeVU/egR5m3W4SPJYHTh5hCoC5JCds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:23:e8:d8:0f:57:01:94:2b:37:45:65:96:ee:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Sep 24 20:01:22 2026 GMT
Not After : Sep 25 20:01:22 2026 GMT
Subject: CN=b8ae4d205bf952eda9ac13bc4fcbf75375251382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:36:74:48:8f:d0:81:e6:d2:26:e5:31:5a:
f8:8c:83:4f:5e:59:e0:f3:54:b0:40:f5:f0:37:12:
aa:df:a8:ad:5c:a3:3f:0f:64:89:10:9c:21:79:5f:
1d:05:34:90:a2:b4:57:5d:6c:63:cf:6c:ce:f3:7c:
72:e8:9d:ed:25:9d:cb:c4:6b:a1:8e:83:80:44:05:
7b:f9:da:c5:9e:d9:bf:f9:f1:55:27:a9:dc:ab:b8:
8b:fe:a3:67:54:bd:2f:ad:51:53:6e:01:a4:f8:c4:
ca:a6:b4:02:ac:71:b1:8d:11:1b:62:5f:f2:70:86:
70:8d:ad:43:a5:1f:c1:6a:41:ce:e3:c4:65:c6:99:
87:9b:e4:d0:9f:0e:77:b2:dd:cd:6d:20:bf:0e:87:
2a:2a:f8:45:5a:83:aa:82:00:10:92:92:a9:32:b7:
5f:c6:6c:9e:01:67:c1:d9:eb:97:63:56:88:88:bc:
a1:7c:d4:c5:13:86:fe:6b:e0:a8:7b:21:42:a0:06:
f6:5a:d0:89:9c:f2:1c:13:da:6b:c5:79:ce:a3:b1:
97:36:57:da:bf:aa:4a:57:e2:b6:db:e7:53:3e:c4:
84:a9:df:bd:e7:0b:04:75:b0:ae:d6:0e:c9:35:63:
d7:12:5c:a4:07:f4:a0:ae:df:ec:47:c9:c0:01:fc:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:4D:20:5B:F9:52:ED:A9:AC:13:BC:4F:CB:F7:53:75:25:13:82
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:59:06:ba:69:af:8c:1e:10:64:0c:9f:5f:4f:aa:9e:2c:c3:
a2:98:9e:47:e3:81:42:07:f9:70:cf:33:68:0b:76:aa:c5:70:
92:ae:7b:ba:c1:89:b7:1f:a8:81:8d:db:41:c6:51:7a:56:8e:
c0:f1:be:7e:b1:c5:9e:5c:e9:be:1e:10:3b:d4:c8:77:43:d4:
ec:f0:90:9e:b3:62:be:c2:4e:ff:c0:bb:48:be:a1:2d:68:5b:
42:59:29:57:96:21:68:b6:09:39:80:86:bd:0c:cf:ad:ca:33:
3d:80:20:e2:0c:8f:72:fc:0a:29:82:55:db:15:94:3b:8b:bb:
cc:20:5a:ea:8e:05:ab:d7:b6:41:28:cb:e8:3c:70:55:5c:8f:
f9:1f:1e:f4:cb:08:c5:2a:fd:8f:4e:40:e0:cd:5d:f7:76:5f:
8c:8d:75:b8:39:7c:b5:01:d2:a1:0e:27:ae:36:7e:57:8c:4c:
cc:89:9d:f6:b3:d6:39:7a:37:8c:64:a5:41:ad:a6:be:19:bf:
dd:ca:d1:1e:04:6b:ff:d9:41:53:de:45:89:40:f9:b6:7d:b3:
11:90:71:8a:7b:0c:59:ec:6a:d5:8d:1e:de:42:26:c2:a8:b3:
cd:95:31:42:09:8d:b5:7a:cf:e3:90:ad:04:0e:b7:57:8e:59:
db:d0:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:22:24 2026 by rpki-client