Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: fIWU8z8qzvvW5xM8KIOQghHSI8X1y6M9aTlAWoQAL9A=
Subject key identifier: 3A:28:C4:7F:5E:9F:84:28:3B:E2:52:BC:6D:2A:93:B6:A5:DA:F4:8A
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 01A08B9F2619BC93311DCB0319652540EB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 033D
Signing time: Thu 10 Sep 2026 14:00:57 +0000
Manifest this update: Thu 10 Sep 2026 14:00:57 +0000
Manifest next update: Fri 11 Sep 2026 14:00:57 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: Pgklb+dL993OA2ktVLOfrHjdQN2hafGOEZo+NSTFcoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:26:19:bc:93:31:1d:cb:03:19:65:25:40:eb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Sep 10 14:00:57 2026 GMT
Not After : Sep 11 14:00:57 2026 GMT
Subject: CN=3a28c47f5e9f84283be252bc6d2a93b6a5daf48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:a6:1f:86:30:96:62:86:f9:69:72:28:c7:
38:ff:32:06:86:d1:d1:8c:1c:5b:34:aa:72:fe:59:
20:e5:9d:0c:35:fd:46:5d:76:cc:ae:39:70:f3:1b:
00:8f:17:a1:fe:4e:70:78:0b:b6:41:18:c0:52:24:
ed:d1:46:ce:60:51:05:b9:3e:2f:26:8c:a0:90:5a:
3b:37:b0:08:02:60:b3:b5:6e:5c:b0:8f:c7:fd:55:
95:d4:6b:33:50:ed:d1:7b:ff:f1:c5:fb:d2:dc:61:
1e:d5:a9:c4:4b:ca:14:58:fb:1b:1c:cc:d4:00:37:
55:e6:b2:bf:da:ff:d7:8b:45:33:bc:c4:3c:b0:40:
51:93:da:ed:54:d2:8e:97:50:c3:28:93:48:10:c1:
71:fb:10:84:db:e7:c0:c9:4c:f4:b8:85:27:0c:36:
84:12:82:8d:86:7e:66:29:65:1b:74:18:f8:1e:42:
32:98:ec:0c:93:35:8f:25:3d:df:3d:4d:1a:40:f2:
8b:fb:39:46:db:1b:c2:37:ad:39:2a:e5:c7:42:c6:
35:f7:e1:55:bf:c3:3c:43:84:16:dd:d7:db:ea:02:
18:36:97:b9:5b:3d:31:e0:6a:31:59:71:ea:eb:5e:
a6:4d:ea:a0:d4:34:53:2b:fa:98:46:72:b9:43:e3:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:C4:7F:5E:9F:84:28:3B:E2:52:BC:6D:2A:93:B6:A5:DA:F4:8A
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ee:0c:62:5e:a0:9a:28:b3:a0:db:80:79:37:58:8a:88:82:
41:ff:81:9d:20:cf:f7:e8:6e:20:46:9c:fc:5f:dd:6b:a7:20:
42:36:56:09:ca:95:a0:ef:fa:cb:30:74:f7:59:03:03:ef:41:
3b:85:cc:00:ed:5a:3a:b4:a3:43:79:a3:cc:18:f7:4c:4b:f1:
ee:8d:c9:65:9f:1b:77:af:36:76:86:a5:4f:76:44:e6:8e:4c:
e2:db:1f:6e:90:37:0a:62:c4:c5:9b:0f:d9:1e:3f:60:01:c8:
28:d2:d1:aa:72:71:19:15:65:77:1e:d5:0b:82:23:f0:a9:d1:
38:a7:9d:9c:85:6d:5a:fb:81:cd:e4:99:e6:cb:9b:e0:3d:7e:
f4:e8:32:e1:77:62:df:02:ed:54:89:2a:7d:fc:82:f7:57:9d:
a4:0e:0d:a8:75:27:16:79:51:c7:4f:78:01:76:78:c6:5f:55:
05:90:bc:e9:d7:a7:a6:89:2b:42:d1:04:24:a5:19:c1:10:bf:
be:82:c8:ad:90:f0:fe:49:de:c6:0b:51:0c:f5:ea:ca:4c:10:
1c:bb:bc:44:0a:8f:65:68:25:fa:68:71:20:1d:fe:31:b8:06:
7c:52:eb:4e:4b:e9:28:58:78:ec:1b:cb:02:fc:18:b0:7c:2a:
78:da:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:46 2026 by rpki-client