Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: Cquxm2x+rj5Gndj7CVczcYCQDQFd8YlUbwfV/Oe99d4=
Subject key identifier: CF:96:2B:99:7D:9F:D0:B5:BD:31:37:75:C2:89:F4:4B:92:04:81:E5
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019D2704D5CE5A6BD1687368962D769B81B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: AF
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: bQIvPEqH4gLNBTU5UsyU8jf7yc2fvg+SRCDptzHG+cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d5:ce:5a:6b:d1:68:73:68:96:2d:76:9b:81:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=cf962b997d9fd0b5bd313775c289f44b920481e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:96:66:68:fb:92:5f:06:d5:5a:57:86:a9:
13:2d:d7:36:df:e0:9b:3c:e0:1c:4c:c7:d5:32:5b:
e8:2f:5f:dd:27:80:f8:bc:94:98:b0:d3:a0:78:d0:
32:ac:12:b1:30:17:e0:7f:0d:45:c4:ac:d9:c3:a3:
aa:4c:09:4f:c4:e2:50:34:b4:2f:83:18:21:65:d4:
e1:c2:f8:f4:a2:28:0a:29:e9:be:e4:9e:b3:d8:7e:
70:50:4c:53:fd:f0:bf:5d:cb:49:92:75:32:35:65:
5d:22:e0:58:f8:8c:6b:ca:48:65:e4:da:05:c6:25:
e1:60:56:b5:52:bd:36:83:f1:22:34:ce:1c:29:e2:
41:3c:4e:95:f1:0c:35:87:49:69:81:30:d9:61:dd:
e6:d9:8f:2d:24:0b:f5:6e:15:e0:c7:c9:1d:57:75:
ba:ee:c5:04:6f:99:c8:af:3a:0f:3f:9b:c2:5f:67:
0c:ef:5d:d8:33:df:1d:98:a4:08:53:e1:1e:51:c2:
ae:85:a0:df:85:db:96:35:af:84:3c:80:ab:75:74:
e0:a0:99:59:45:4c:91:91:f9:51:ea:ff:e2:77:0c:
64:e1:98:a1:f3:ef:5c:41:1d:3d:75:4c:ff:7a:d6:
ee:d4:b0:08:7b:59:50:33:d8:2b:19:13:10:5a:df:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:2B:99:7D:9F:D0:B5:BD:31:37:75:C2:89:F4:4B:92:04:81:E5
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fa:93:26:3a:9d:61:7a:7d:d1:ba:ae:d8:7f:15:e3:aa:82:
1a:d5:bd:62:df:52:32:4d:c6:a0:4f:ae:4c:5b:ef:85:8d:a3:
cd:3e:01:72:3b:8f:c3:82:44:00:2d:51:ac:1f:8c:6e:01:a0:
1c:ed:74:d5:a3:59:30:85:ca:cc:9d:10:57:7c:85:97:61:b1:
6f:51:5e:77:43:bb:86:97:80:b6:5e:3b:7d:85:ba:d5:f6:4c:
bb:e8:e2:91:46:f3:f6:c2:9b:f0:a8:7f:bc:7c:f8:08:f8:13:
c9:5a:99:96:0f:71:08:79:5b:df:7c:3c:8b:4c:14:66:5c:ea:
4f:b9:20:41:33:bc:86:26:ca:6d:90:9c:cc:24:ec:96:46:da:
8d:87:68:54:80:c8:7b:58:25:56:80:53:c2:f2:c3:38:b2:b6:
cb:f8:db:d4:d9:a4:b9:b0:84:9d:e8:5d:96:03:21:67:16:c5:
9d:43:5c:f9:de:ef:31:ad:6d:73:34:9c:c0:44:f7:d1:e0:d6:
3d:04:7f:f2:3a:fc:ee:57:49:6c:c2:86:2b:20:05:5e:91:93:
61:0c:f5:47:06:9d:cc:af:47:3d:03:68:cb:e8:cc:c4:9e:12:
3a:e0:84:f4:ad:4f:ad:28:79:e3:5a:e6:89:94:a9:c0:57:6a:
96:aa:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:37 2026 by rpki-client