Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: tWQOlQRTicmd7xATJ3qe5BQIkmUiGBEmf0s5I0Gt9uw=
Subject key identifier: 47:9C:82:CE:4B:8F:6B:74:54:8D:DF:5E:89:AB:BD:7B:1D:D4:95:02
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 01A0E2F50C19AE01D74FED4C92F5CD89EFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 029E
Signing time: Sun 27 Sep 2026 13:01:45 +0000
Manifest this update: Sun 27 Sep 2026 13:01:45 +0000
Manifest next update: Mon 28 Sep 2026 13:01:45 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: btZIQqSTY3prpO+GouHrr7SSej92nCvlyMBPcEcBxf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:0c:19:ae:01:d7:4f:ed:4c:92:f5:cd:89:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Sep 27 13:01:45 2026 GMT
Not After : Sep 28 13:01:45 2026 GMT
Subject: CN=479c82ce4b8f6b74548ddf5e89abbd7b1dd49502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:9c:bc:27:0e:ec:61:6a:00:7a:48:47:a8:
98:e3:e2:88:f4:13:0b:11:19:6a:d7:4d:fd:ec:c0:
c1:b7:27:47:aa:f7:3c:64:f8:e4:d9:50:65:8f:96:
5f:ae:ac:f2:9f:5a:c0:13:c2:27:cb:1b:f1:64:2b:
6c:ee:01:39:11:99:f0:7d:ac:15:e2:5a:96:ae:e3:
72:a5:13:1e:a5:4e:39:60:84:80:c0:b8:6e:af:39:
60:48:88:04:33:2a:9d:33:ff:e3:6b:64:83:02:1c:
32:db:c0:b8:9d:54:5e:ce:d0:a0:d7:7f:0e:59:50:
f7:c2:7a:21:74:70:c3:46:b0:c5:d2:cd:01:8c:33:
04:d2:50:f8:d3:f6:80:bd:33:f1:b2:17:f0:6e:6f:
d2:09:08:ff:e1:2c:66:f6:6a:a5:d3:b3:7f:75:03:
88:21:1c:66:e4:a9:e4:4d:ce:b5:9a:bd:b5:40:be:
5d:02:0b:b5:6f:11:9c:35:11:9d:2d:d4:f4:35:9f:
91:f4:f8:0f:3d:09:77:dd:3b:35:d4:d8:48:8e:4c:
83:2d:1a:c6:e4:96:10:87:ea:c5:3f:6e:75:24:2c:
fa:94:f0:fb:62:d0:df:9d:77:18:6f:29:33:70:5d:
11:ca:cf:25:10:70:8f:06:16:25:e9:99:2e:88:e9:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9C:82:CE:4B:8F:6B:74:54:8D:DF:5E:89:AB:BD:7B:1D:D4:95:02
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:db:5b:55:2e:bc:d4:47:64:3a:14:9a:af:65:a8:78:b5:
17:f5:6b:ea:d0:39:6c:b2:df:22:00:f6:71:ea:2b:24:db:8e:
1c:36:12:51:fd:f1:07:14:a6:b8:c4:05:de:a3:f2:6a:7a:d8:
4e:f1:60:15:da:ba:a0:e5:85:eb:ce:a6:5d:24:3a:ab:bb:4b:
db:1e:6c:c4:8f:81:38:9e:e2:e7:7f:fa:a0:ae:35:e6:6f:cb:
fb:45:db:f0:8e:6f:cf:f3:62:ff:21:05:ee:aa:50:ad:e0:61:
5f:e1:62:eb:6d:d0:1b:0e:d0:be:01:ba:31:51:70:45:7c:62:
69:11:d0:6d:bd:85:fa:19:fe:ab:b7:eb:ea:cc:8f:49:da:91:
c9:7c:6e:38:33:b3:76:57:aa:96:7f:fc:07:e4:e1:b5:6c:0a:
e2:4f:9e:13:51:0a:3f:18:e2:9f:32:1e:09:d0:76:1a:9d:10:
cc:a3:70:67:bb:8c:85:dc:8a:76:61:25:3d:4f:28:de:f1:ff:
c2:c8:2f:39:be:c2:be:c5:0e:9a:b7:80:db:9b:ac:05:2c:06:
82:2a:12:49:10:b7:a7:19:27:a2:44:18:19:01:f3:f2:f8:d1:
10:97:c8:ad:b4:5f:54:76:71:d2:99:2b:7b:1d:d6:9f:65:ff:
57:0b:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:13 2026 by rpki-client