Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: HAcNCTX4P+Oux4Qs2Bw7cMJuzrAWHk9yHWTiLG6TQJo=
Subject key identifier: B2:CC:07:2A:37:C5:19:70:72:1A:55:C5:F8:68:56:36:86:58:5D:4C
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019E1DC732B66E533BE1FFD4CB32257D44BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 01FB
Signing time: Tue 12 May 2026 20:00:54 +0000
Manifest this update: Tue 12 May 2026 20:00:54 +0000
Manifest next update: Wed 13 May 2026 20:00:54 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: WAlpTOUjqAAo37DlMdeU1yot5RZDQ67+2a+FJd0H7Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:32:b6:6e:53:3b:e1:ff:d4:cb:32:25:7d:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: May 12 20:00:54 2026 GMT
Not After : May 13 20:00:54 2026 GMT
Subject: CN=b2cc072a37c51970721a55c5f868563686585d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:a3:0e:6e:b9:79:e2:2a:cc:db:b7:fe:e8:
7c:b5:08:d0:48:a6:c2:d1:24:cb:3c:3a:c2:b5:2a:
74:bb:be:46:6d:ba:44:62:87:56:9c:87:35:69:94:
62:4e:9c:fa:59:4e:34:fb:9f:df:e3:64:29:34:02:
e5:7b:f4:9c:91:72:7d:3f:1b:c6:12:21:07:48:1f:
af:85:42:12:3d:89:00:23:52:d4:43:30:6c:1f:47:
b6:05:8c:dc:c9:a3:2f:ef:d5:b7:39:dc:26:eb:9e:
25:ed:d4:a9:b6:b8:fb:d0:2d:52:04:49:cf:6e:ab:
7b:ee:2f:6c:71:23:6a:f3:9f:74:67:fc:fe:00:64:
1b:74:c2:bf:c2:44:14:e7:c8:9c:af:e9:a8:05:7e:
05:73:91:e6:22:d0:f1:de:1c:ff:f1:1c:b5:f3:31:
f2:60:e3:e5:42:74:89:76:5c:db:eb:25:6b:14:3b:
fe:65:fa:59:5d:e9:97:75:95:23:1d:f1:f9:0b:a4:
15:43:26:18:1b:03:f6:39:73:db:eb:41:ad:b9:f5:
38:8f:35:62:0c:0f:e5:01:59:a3:25:03:ce:73:9a:
2e:d2:09:30:a9:a9:ec:cd:13:b2:86:47:22:a8:a8:
a9:20:36:fe:c0:ce:ae:13:0c:e8:05:58:14:50:9a:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:07:2A:37:C5:19:70:72:1A:55:C5:F8:68:56:36:86:58:5D:4C
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:15:bf:62:82:8b:b5:03:9a:dc:53:0c:36:54:2c:d6:dc:b4:
3a:a7:c6:36:b1:d3:84:e1:35:5a:be:5a:f6:e9:ca:c8:98:8e:
cd:65:23:6b:23:67:5b:67:f9:0e:ec:8f:49:c6:cd:b8:d1:17:
f5:03:4a:00:5a:f1:cc:71:6a:ac:be:45:51:68:37:6a:61:71:
00:cf:1e:37:b4:a8:46:14:95:69:ff:5b:63:ac:6e:59:c6:70:
10:85:b8:43:50:b7:12:0c:b6:38:29:83:a4:78:c6:5d:fb:30:
81:11:2b:ea:c8:13:7a:b8:9c:40:a9:fc:3a:36:e4:96:25:a6:
7f:8b:23:a7:8e:a7:aa:c5:5f:49:62:7e:a4:e0:49:6d:bd:5c:
58:d9:b6:f8:6a:32:14:ac:5d:f5:07:9d:5e:a8:6e:57:d8:00:
c8:c9:e8:d4:db:a2:6c:41:ab:03:03:d0:ca:e1:42:10:76:86:
fd:7f:1b:a1:e6:08:c5:e6:9f:29:01:6b:46:10:bd:19:91:75:
91:e2:83:cc:2a:29:5b:50:55:92:2c:a9:de:34:10:26:e2:db:
2d:72:a3:6d:b8:06:78:6a:2c:cb:eb:be:50:66:0a:cb:94:47:
3a:4d:40:0b:6c:d8:1a:b6:90:f3:95:14:cb:79:49:0c:fb:3d:
3a:7e:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:12 2026 by rpki-client