Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: 8zXdbfc1OAuO40ERqO2RDX+iovBBGkZaIsO3iVPU7tM=
Subject key identifier: B2:AF:44:6F:8B:19:43:7A:43:B8:B0:51:5B:4C:C5:8C:86:BF:D5:8B
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019FA1F20EA253E4A3611E81F60B9A9A593D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 02C4
Signing time: Mon 27 Jul 2026 05:00:22 +0000
Manifest this update: Mon 27 Jul 2026 05:00:22 +0000
Manifest next update: Tue 28 Jul 2026 05:00:22 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: d2bePZSHjmsLRwqbMVEv7G/+AfPUlOHPdW463tK4cDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:0e:a2:53:e4:a3:61:1e:81:f6:0b:9a:9a:59:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Jul 27 05:00:22 2026 GMT
Not After : Jul 28 05:00:22 2026 GMT
Subject: CN=b2af446f8b19437a43b8b0515b4cc58c86bfd58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:0f:b6:a5:ac:3a:b6:7a:51:23:6f:35:1e:
4f:ce:68:e8:af:d0:ee:15:30:4a:d4:06:1a:e0:df:
21:0a:d8:3a:b5:1c:06:2f:57:7a:3f:b6:bf:3e:ae:
4d:bf:7a:d3:ca:23:6d:5c:83:af:0d:8f:e7:18:7d:
df:e5:4b:8b:10:9d:45:99:af:18:f7:71:27:98:db:
f7:59:6e:ae:a9:9e:a3:41:3e:92:37:68:0f:b8:33:
16:8f:13:8a:ff:90:ae:79:ae:27:ef:de:8b:69:e6:
43:49:6f:df:27:cb:8b:3b:cd:0c:d8:7d:fe:b0:89:
21:ee:39:80:5d:18:52:fa:39:1e:e2:b9:a4:e7:55:
c6:03:93:3b:d0:c3:0f:09:20:6f:f1:de:ea:26:c5:
18:90:60:fe:bc:17:6a:9a:d0:d6:c7:f0:90:c3:5c:
bf:f7:a1:1e:46:82:52:db:dc:1f:e6:72:27:96:d0:
02:c2:5a:cc:6a:5c:d0:95:53:f7:6f:b0:69:b4:0f:
9e:b1:79:eb:14:a8:5e:f2:8a:67:3c:07:2b:8f:39:
6d:49:cf:11:f7:c7:a9:28:f8:f6:ca:46:46:bb:a1:
c2:b9:58:a5:17:af:b1:15:61:8a:01:0c:60:89:ae:
8a:9f:b0:10:24:73:c2:f1:ff:c2:9f:bf:ae:6f:5a:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:44:6F:8B:19:43:7A:43:B8:B0:51:5B:4C:C5:8C:86:BF:D5:8B
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:be:48:c5:6f:65:80:66:24:9a:77:53:56:e3:0c:e2:a9:2b:
d6:52:6a:b4:ee:50:29:44:2d:21:64:6e:4b:da:db:74:ab:dd:
17:83:d6:fa:7a:80:33:77:16:22:50:39:bc:a1:55:82:21:a0:
64:92:a0:37:2a:ee:0c:0e:e7:59:9a:ff:aa:2d:4d:df:e5:d1:
26:47:73:2f:15:48:1d:06:0d:24:f6:d6:9d:2a:d3:8c:b3:61:
67:b4:88:4c:83:db:b4:07:99:28:68:22:e3:d1:ba:56:b4:f2:
eb:63:68:ab:e4:a5:87:68:fb:84:e9:b0:25:c6:7d:f7:fd:7d:
1f:be:e8:b4:d9:39:4a:40:7e:95:b8:8e:07:3f:2b:7d:13:c7:
fa:c4:a5:8a:78:15:62:ac:91:b1:72:bb:2d:c7:5b:db:40:ea:
94:d7:16:d3:90:33:5e:51:e4:12:aa:91:c8:07:a1:28:dc:e8:
c3:ca:c8:56:13:e8:45:a0:fb:c0:c6:78:fa:84:57:20:5d:de:
da:79:07:a9:ac:64:5c:95:dc:1e:4e:83:a4:d6:bb:e4:82:b9:
b5:a3:a2:1f:b6:ad:be:de:8d:88:bf:55:bb:9e:c8:41:39:39:
04:f0:5a:f5:6d:e7:ba:38:9a:c2:9b:09:a3:26:31:c8:74:12:
66:87:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:20 2026 by rpki-client