Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: xQLpSz9Kg5TfAT9p+XDOBAqgF+Li3Fe0tWwPoADRL7I=
Subject key identifier: E2:0A:16:C2:0F:45:32:86:FF:D9:82:09:FB:89:7D:A5:6C:97:F5:1B
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019EBA34794C8D82EDFF6CAAE5B8651276FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 024C
Signing time: Fri 12 Jun 2026 05:01:01 +0000
Manifest this update: Fri 12 Jun 2026 05:01:01 +0000
Manifest next update: Sat 13 Jun 2026 05:01:01 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: oI5HP3N/Nl+Uwc8pqNn6v0SlOewJM4Zf5CvHOpXHZPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:79:4c:8d:82:ed:ff:6c:aa:e5:b8:65:12:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Jun 12 05:01:01 2026 GMT
Not After : Jun 13 05:01:01 2026 GMT
Subject: CN=e20a16c20f453286ffd98209fb897da56c97f51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:4b:dd:62:e8:2d:c8:14:c0:f5:b1:85:a1:
61:75:1c:c3:5b:34:4c:9b:69:46:89:7a:f0:7a:a4:
8c:4f:51:05:81:66:1f:62:81:7b:86:5e:fa:e2:2c:
0d:98:df:5e:d0:cd:d4:6c:b4:fe:39:9c:2a:cf:a9:
36:a2:ec:a1:f8:ab:71:19:55:e0:3d:ec:8a:bd:83:
0f:aa:3c:8b:a6:80:e9:dc:e8:fb:fa:87:df:8f:99:
c8:73:ee:8f:c2:0e:b8:c6:da:22:8d:4f:de:f1:68:
07:1a:1e:b5:e3:f4:fd:50:96:36:cd:be:1b:e0:b5:
fb:a1:6f:35:97:7f:b5:a6:8a:c8:ee:84:0f:d9:b5:
87:40:db:2d:93:a5:ca:df:13:4d:43:75:53:a1:58:
81:70:8c:54:e1:bb:28:74:b3:09:2a:b0:a1:e2:d8:
77:63:03:4b:0c:5c:3d:9c:5c:7e:da:17:a2:3f:d1:
04:04:d1:34:fc:ff:f2:72:0b:13:3e:e6:83:02:13:
01:69:6f:eb:0c:b0:b0:79:eb:4d:36:4e:eb:40:b7:
70:1d:83:64:8f:74:87:f0:ad:55:e8:91:3b:4c:92:
f5:d8:f9:b8:2c:a1:62:20:97:31:01:d0:22:c3:87:
b4:6b:ef:26:7f:88:ce:bb:c7:c7:32:86:5b:1b:da:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0A:16:C2:0F:45:32:86:FF:D9:82:09:FB:89:7D:A5:6C:97:F5:1B
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:80:6a:75:28:bd:71:57:4f:de:2e:2f:8c:a8:84:8d:42:05:
6a:57:ed:c5:8c:6f:ee:ba:10:b9:48:f9:f1:02:5c:e5:87:c8:
8b:1c:ce:b9:1f:eb:50:17:61:f8:41:dc:16:eb:eb:00:2b:bb:
98:bb:d2:99:af:97:e4:ab:25:16:83:6d:d8:9a:b7:d7:0a:61:
e2:5e:9e:80:ef:b1:4e:1e:e2:54:fd:e9:bf:72:cf:32:5e:56:
de:93:55:c3:9b:c4:a1:f3:a1:fc:dd:9a:a8:1b:12:0e:87:ec:
21:14:5a:46:aa:85:f6:84:3f:79:55:e0:63:5c:ed:c2:a9:36:
72:32:d1:47:b6:b3:1c:cc:16:4e:d1:0b:06:9f:ff:85:2a:90:
dc:96:2e:ad:f9:d7:a8:0c:2a:0b:97:77:6c:d4:a2:10:be:42:
64:33:68:83:8d:50:50:81:68:d3:5e:74:5c:7a:d3:94:c2:3e:
6f:7f:95:35:cd:e4:ee:ba:14:cc:40:41:66:f5:c7:00:94:7d:
b4:54:97:4f:e4:8f:fa:69:f8:7a:c5:3b:76:5b:cc:e4:c1:47:
a9:6f:c2:83:92:ff:4d:48:9f:39:c8:22:e8:a5:b6:f2:f7:2c:
4e:a6:91:7f:e5:96:48:ef:ba:67:a3:a5:ac:08:1b:05:d5:be:
5c:c2:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:43 2026 by rpki-client