Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: neumWhc7n0TqauaPdWIJXte/Rs5f1ix6d6mBOKf0IZw=
Subject key identifier: E1:43:18:01:F8:29:C6:00:E2:F5:3B:98:C8:DB:33:76:02:00:4C:AD
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 019D37894F7958DB3D175F6C0F70CE9AEA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 15D8
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa (hash: fDpAtLsxJawEMxiSb4C7tAx2OdBkgN/gABVjU5t3l/s=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: YfoqmtWHuK39jRHcBgsZXfcNeBAL1Ksqm3TAJ91Orqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4f:79:58:db:3d:17:5f:6c:0f:70:ce:9a:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=e1431801f829c600e2f53b98c8db337602004cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:8b:73:8c:2c:88:33:11:3a:fe:c0:b8:b4:
b1:a6:ab:6a:00:90:0f:a5:6c:a2:02:34:a3:c9:63:
27:49:03:0a:84:1e:c5:6b:6d:00:51:f4:e0:df:d4:
ea:c0:f0:f0:7c:d5:9e:fa:51:26:8a:4e:d6:a8:1f:
a9:c8:fc:b2:8d:57:0a:d8:ff:66:e1:5b:78:85:ea:
6e:26:56:f8:ef:9c:7b:51:25:cb:a3:92:bf:00:a5:
30:e3:40:98:7c:c1:71:53:18:7a:74:44:d1:ea:df:
66:ac:ed:26:00:1f:07:a5:b4:0b:d4:af:4c:5b:d0:
ad:46:dc:00:16:ff:a1:af:d2:ef:c9:69:b8:84:76:
d5:22:1e:56:0a:bb:0e:4b:5d:0d:5f:36:96:49:71:
6a:8f:48:80:99:d2:12:34:4a:b7:3f:fd:fd:3a:0e:
b4:86:34:7a:ac:98:48:c2:b7:1f:c0:5a:57:f0:8f:
8a:a2:99:05:81:b3:38:ee:32:ac:34:af:83:8b:dc:
08:51:e6:06:4b:d9:13:58:6c:14:9f:77:6d:a3:58:
ed:12:d3:ee:65:8b:bf:9f:b5:4d:09:ad:4e:ed:3e:
05:32:98:92:6f:3a:74:25:76:3b:45:c7:4d:bd:e9:
f7:39:65:e1:72:df:06:88:1c:c9:af:a7:e3:2d:54:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:18:01:F8:29:C6:00:E2:F5:3B:98:C8:DB:33:76:02:00:4C:AD
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:71:b3:cf:b3:ea:3b:97:54:44:73:42:2e:61:db:72:11:6c:
51:6e:c7:61:f9:dc:5c:41:e0:6e:0d:fd:ab:1c:80:7d:17:a4:
99:e5:ce:31:f8:f4:94:11:71:83:37:69:63:30:f3:f0:d4:67:
e1:63:b3:35:09:9a:77:7c:51:86:a5:4e:96:96:f3:66:15:cf:
59:dd:07:9e:fe:16:78:f3:72:22:6e:b7:ed:2d:f6:d3:8e:39:
93:ae:61:41:3f:a1:88:49:c5:fa:e6:55:83:51:0f:8a:92:0a:
20:d3:af:c5:84:a1:fb:fe:d8:ca:64:2e:b1:e1:ed:16:ae:14:
ce:c9:dc:17:89:99:74:a0:8a:dc:05:c2:52:69:e0:2e:9d:8d:
ef:6b:2f:9b:14:55:0f:8e:d1:52:7b:38:27:3f:77:0b:4f:04:
5c:4a:80:21:e8:55:93:b2:c0:a8:88:f7:12:ed:76:67:89:2a:
2b:a4:f1:eb:8a:87:6c:c7:31:b7:d6:91:af:cf:b4:e0:94:2e:
16:5f:0b:87:f1:97:93:52:4a:81:79:c6:ff:32:bf:25:44:99:
68:fc:58:b5:fa:a6:04:04:64:12:d0:89:4b:f8:95:b0:36:75:
45:6c:fe:dc:8e:d0:7d:a7:8b:11:30:d3:ea:b6:f2:f7:c5:9f:
cc:57:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client