Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: xpkH0GWNDCF91hjsJ6+q4rQmFwEAVw0BB+iP0Cqkrgo=
Subject key identifier: B2:DE:0E:CC:12:8E:5B:6A:77:F4:E9:6E:72:84:CE:65:5F:44:E2:B2
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 01A0D6F08F86109C99D1AA28969B517E5679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 0364
Signing time: Fri 25 Sep 2026 05:01:24 +0000
Manifest this update: Fri 25 Sep 2026 05:01:24 +0000
Manifest next update: Sat 26 Sep 2026 05:01:24 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: Te+w+BtkBUcML62cqg84ShmOaqDv37pc4PMxMGRdmmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:8f:86:10:9c:99:d1:aa:28:96:9b:51:7e:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Sep 25 05:01:24 2026 GMT
Not After : Sep 26 05:01:24 2026 GMT
Subject: CN=b2de0ecc128e5b6a77f4e96e7284ce655f44e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:d3:8b:13:f2:4d:cb:12:35:50:8e:eb:db:
59:4c:fe:43:39:ec:71:e9:b3:5b:95:6a:3c:59:91:
fe:0a:54:36:1d:4d:d8:d3:ec:1b:90:a8:39:7d:a1:
13:c2:d7:6a:b3:03:c8:19:d9:d3:17:07:89:a7:57:
5c:4a:e4:1c:32:b0:01:53:9f:83:bf:fa:ba:fa:b7:
1b:c5:f1:68:e8:fb:c2:05:1f:f5:23:79:e4:b7:82:
09:4a:d4:08:44:2a:a5:29:7f:d7:a9:21:4d:a3:6f:
23:cb:f9:80:76:1c:aa:b8:ff:8b:74:74:0a:05:bf:
bc:cd:20:94:df:ad:52:95:36:9c:ec:03:3b:5d:12:
4f:d2:69:4e:bc:41:65:64:2b:bc:9e:5c:d9:38:13:
eb:2d:84:c3:de:66:9c:8c:6e:76:33:eb:46:3c:8a:
88:a5:e1:a4:fa:cb:18:58:40:e8:19:d3:7a:0d:f6:
98:fc:8b:bf:6d:ee:f7:d5:b0:3e:9e:57:42:47:15:
a1:37:15:9e:d1:52:28:5f:dd:05:f5:7c:07:79:74:
0d:79:e5:2f:e8:0a:94:3d:ec:5e:0c:15:26:d8:de:
4e:5e:e3:26:bb:13:dc:17:8b:f3:ca:6b:6f:ba:61:
fb:bc:87:3c:72:88:22:b3:5a:fc:1c:cc:42:82:0f:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:0E:CC:12:8E:5B:6A:77:F4:E9:6E:72:84:CE:65:5F:44:E2:B2
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:d3:51:a3:3d:bb:30:50:a2:96:b4:ec:ea:86:cf:20:2d:ee:
d1:bb:a4:e4:1a:73:4b:f9:b6:1e:14:e9:0a:f3:4e:4e:2f:75:
32:fe:2d:12:14:2e:2b:d9:06:1e:b3:33:35:0c:75:af:8f:0a:
95:92:b7:72:5e:d4:c8:a8:e6:d0:99:8e:50:1c:56:06:87:3e:
e7:fb:26:8f:b6:0c:98:22:35:a8:9c:60:13:63:cd:eb:3c:50:
22:79:60:1e:04:0c:b0:6b:94:eb:f4:84:7c:1b:fb:86:e9:8a:
c5:99:30:c6:3b:ce:8e:20:ca:5b:5d:6e:f5:de:de:11:21:0c:
50:e0:f8:f2:c2:a9:6a:4d:8b:02:ae:53:dd:60:50:8c:49:73:
20:ff:65:1c:fc:2e:27:62:29:27:f0:9a:3a:04:1e:49:39:bb:
5b:42:08:03:0c:03:53:94:47:29:fc:23:ec:46:a9:d0:f8:d0:
1e:b0:c4:32:5a:0e:5d:9f:5d:28:50:69:08:ab:d7:c8:5e:fd:
26:fe:0e:ef:e2:35:9a:24:28:1f:e2:d2:73:c2:f7:55:ea:18:
a3:8d:37:65:0a:dd:b9:e3:26:89:c3:93:2d:0c:41:c2:6d:7a:
a0:76:b5:70:b6:ab:38:17:25:7e:c3:42:2d:41:da:be:d9:7b:
65:dd:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:22:05 2026 by rpki-client