Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: sTS8Smo/YOF7J1sUB6jixcEyJCt7CtDAogEDDJHzngs=
Subject key identifier: D4:CF:46:6A:DF:04:FB:F1:AB:CC:F5:53:A0:71:C5:60:E4:CF:6F:F1
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019D2515616892A11C7A33756A8826B08986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: AE
Signing time: Wed 25 Mar 2026 13:00:51 +0000
Manifest this update: Wed 25 Mar 2026 13:00:51 +0000
Manifest next update: Thu 26 Mar 2026 13:00:51 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: /WWbfNJUZsxQu57Gu8w3IMXG5ByKkklTHxg4qEsr1k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:61:68:92:a1:1c:7a:33:75:6a:88:26:b0:89:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Mar 25 13:00:51 2026 GMT
Not After : Mar 26 13:00:51 2026 GMT
Subject: CN=d4cf466adf04fbf1abccf553a071c560e4cf6ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:a9:97:69:84:25:c9:04:fb:8c:4f:44:e3:
1f:54:06:03:1e:fb:a2:bb:c5:cd:80:0b:9d:95:c0:
43:86:e9:c4:c5:21:d5:62:e4:8e:31:35:3c:0c:a1:
8b:78:26:f9:76:f3:ba:bf:97:99:bb:f3:6c:57:ae:
c5:9d:c4:f2:fe:61:df:fa:02:7b:c7:dc:db:98:94:
3f:46:c8:b6:7e:54:f4:e2:cb:0f:3d:f3:56:c9:1c:
d3:17:e5:93:d4:ae:b1:a2:84:39:99:06:33:da:15:
fb:d1:5b:41:93:10:94:99:f5:9d:f1:40:cb:8c:9d:
40:ac:e1:bd:28:1a:9d:96:27:90:06:3e:e3:d3:96:
72:89:21:f6:7f:fb:24:82:00:04:38:ef:6d:22:74:
fc:9a:86:0a:9e:9c:98:9d:2f:36:83:67:84:f6:77:
4d:d0:4e:76:6e:90:53:a3:ea:d0:a9:75:6c:b5:ba:
98:af:10:8f:26:1f:68:2a:3a:5b:c3:4d:27:69:62:
da:f1:4b:19:ed:06:02:8e:d2:3d:e9:c2:76:16:7f:
1d:d1:8d:79:f4:2f:2c:b3:a9:91:ef:3e:f3:9c:20:
c2:d0:41:3b:02:6b:67:d9:98:de:62:27:ac:89:07:
5f:d1:d7:2f:3d:17:13:12:7c:65:d4:f2:f6:07:88:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:46:6A:DF:04:FB:F1:AB:CC:F5:53:A0:71:C5:60:E4:CF:6F:F1
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d1:ac:ab:32:96:05:39:66:8d:f7:b2:13:ba:f8:8a:43:61:
27:e4:77:4c:c5:71:f1:66:1f:2d:d2:6d:e9:42:c1:a4:0b:67:
11:7a:87:82:94:27:e2:f4:f9:72:f9:32:ff:f5:c6:29:62:a2:
da:b8:58:56:95:91:63:bb:ed:4e:56:db:f8:8a:10:f5:76:d9:
8f:14:cb:65:b1:d6:fe:36:f0:25:f3:97:c3:43:7b:a9:e5:90:
5e:d0:df:1c:92:0f:40:b2:96:6e:02:3c:06:f7:6e:a0:2d:3c:
79:9d:e3:67:65:92:33:38:94:d6:f9:41:20:e1:62:24:84:fc:
e4:e0:df:59:b8:3b:9d:3c:e1:b0:5e:0a:e7:f0:31:ba:02:a7:
a8:7a:84:58:a0:79:a3:7d:42:0c:9a:f1:d7:dc:69:c1:53:e4:
60:10:b6:13:0f:87:c4:69:b9:2d:77:cb:ea:e5:fe:f2:13:59:
b7:6c:d6:d4:75:a0:80:b7:5b:d5:2b:d7:3c:25:60:4a:b9:4b:
2e:c1:38:e1:9f:a1:07:5b:89:f0:4e:08:0d:96:16:22:0a:a0:
90:8e:ca:4c:4a:83:da:8e:d6:f3:d0:e6:c6:3a:91:db:90:2c:
6d:34:a2:44:17:58:c1:7c:f2:a5:7f:f8:c3:3c:ec:99:0c:e0:
4d:80:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:54 2026 by rpki-client