Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: X7dcUvpyHD/gKw3VoCklo5IajEYpis1RyeMhQl34yGQ=
Subject key identifier: 93:CE:30:AA:53:06:EC:89:97:D5:EF:A0:E5:37:FF:DB:15:87:D1:5A
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019F927F404168872E5133396D890BD1560A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 02BC
Signing time: Fri 24 Jul 2026 05:00:40 +0000
Manifest this update: Fri 24 Jul 2026 05:00:40 +0000
Manifest next update: Sat 25 Jul 2026 05:00:40 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: 6W/kiKt+So1FWdl2PT1r7twJMo4GSqj7xOB4wLpe4Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:40:41:68:87:2e:51:33:39:6d:89:0b:d1:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Jul 24 05:00:40 2026 GMT
Not After : Jul 25 05:00:40 2026 GMT
Subject: CN=93ce30aa5306ec8997d5efa0e537ffdb1587d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:ea:a2:95:e7:43:7e:2a:ec:b7:1b:6e:15:
7d:45:aa:5c:ae:63:37:05:e9:d7:bb:cb:6a:ff:8b:
97:89:86:82:e0:55:db:26:b3:54:10:9b:cf:39:45:
2e:c1:b6:6a:80:bf:04:f0:ba:58:ce:c5:3d:cb:fb:
12:26:49:5a:e3:01:c0:59:3c:4a:c5:fa:48:38:50:
aa:ba:42:13:d6:32:5b:8c:23:97:f8:3b:1d:aa:66:
1f:87:7c:05:c7:7e:df:46:71:b2:b4:e0:71:58:dd:
bf:39:ff:f9:30:9b:ef:b2:9c:50:c5:6a:ce:fb:b6:
ae:83:5f:43:22:9e:74:94:d3:73:ed:39:2a:50:c8:
1d:67:18:16:0b:8b:9c:84:7f:12:de:7a:37:94:39:
9f:90:35:1d:3b:bc:44:f5:26:36:13:f3:b4:3f:db:
a1:ff:d4:fe:14:ae:4b:c0:df:a8:02:5f:01:cd:2c:
f7:86:97:dd:5b:ed:c0:40:f3:8b:c2:79:9d:69:9d:
76:dd:79:84:19:fd:1f:78:a0:c6:6f:61:db:84:8b:
a4:51:72:7a:a6:5b:5f:41:23:f7:d6:9f:c0:e2:cb:
92:19:94:85:7f:7d:7d:18:5d:b3:8d:4a:08:fc:03:
0c:4a:b6:21:ed:ad:bb:88:22:96:d9:6e:8a:ab:54:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:30:AA:53:06:EC:89:97:D5:EF:A0:E5:37:FF:DB:15:87:D1:5A
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:69:13:6f:bd:da:3e:fc:83:dd:28:18:db:7c:1b:87:e0:a6:
a8:2b:30:47:29:d8:09:81:af:52:37:53:34:ff:e5:10:b1:9d:
f8:2e:db:bf:41:fe:fc:c3:b3:9c:f1:f1:0f:5b:64:62:af:ea:
51:d7:da:a6:79:60:13:74:f3:fb:19:2e:cf:68:3f:65:eb:f1:
ff:e6:fb:32:39:cb:80:01:e0:c8:55:66:cf:45:6f:60:94:9b:
b9:3d:ab:eb:31:1d:2c:1c:6f:da:88:8d:cb:c8:00:90:db:b2:
31:91:77:53:e9:53:96:64:b3:83:6a:84:b0:79:cb:2b:c7:b3:
8e:5b:e0:16:38:92:31:2e:a7:d1:d7:c0:75:05:3b:49:6c:8b:
df:b5:ba:06:c4:a0:49:37:51:d1:0a:ff:9a:41:31:d0:0b:d2:
d6:ec:3e:84:01:b9:41:71:89:53:9e:9f:bb:07:4f:6d:a2:43:
c6:e4:0c:45:ce:2f:9d:f3:52:35:72:9e:af:51:f0:95:a4:0a:
b9:d4:c1:19:96:54:fa:9c:b0:a9:b5:d9:cf:fe:9c:24:d7:27:
44:ac:8e:95:e9:ee:25:86:88:90:ab:9e:4d:96:f6:25:72:c2:
85:47:6a:4b:65:17:4a:a1:7d:23:11:a4:cd:db:28:33:2d:2f:
b2:9a:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:41 2026 by rpki-client