Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: aCEgrF2plVxNljhsl+4pDeQ/nsepuXCBNkFe6rSYUKE=
Subject key identifier: CC:A7:07:20:6A:EC:A2:25:90:0C:72:F6:DE:69:F3:B8:57:1B:53:78
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019DD0879D709ABC0104E9F95E950A60E334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 01D3
Signing time: Mon 27 Apr 2026 20:00:41 +0000
Manifest this update: Mon 27 Apr 2026 20:00:41 +0000
Manifest next update: Tue 28 Apr 2026 20:00:41 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: 5M0s0fFSs+nlYevaQnQ84cVqipMSr6/vfd/HztSUqRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:9d:70:9a:bc:01:04:e9:f9:5e:95:0a:60:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Apr 27 20:00:41 2026 GMT
Not After : Apr 28 20:00:41 2026 GMT
Subject: CN=cca707206aeca225900c72f6de69f3b8571b5378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:58:09:7a:1e:15:f7:7d:7c:e0:a3:68:c6:
8d:81:3a:2b:51:a8:8d:ef:dd:6d:e6:9a:76:39:51:
ac:e5:3a:96:fb:20:5a:ac:a9:62:b7:4d:98:24:e5:
ea:6f:8f:0e:5f:0b:80:d7:15:25:b3:88:32:b2:0b:
82:14:ab:5d:d8:26:12:69:ee:d2:5c:84:d9:d7:7f:
18:35:f8:0f:e8:b1:30:93:47:ff:80:aa:8c:91:50:
8a:b8:93:53:1d:48:ed:a1:cc:02:38:f5:53:85:a2:
f2:2a:3e:84:be:1c:96:5a:3b:97:40:ce:d7:b5:54:
d4:87:4e:35:fb:01:e6:13:fc:ab:90:83:04:a1:ba:
59:07:6b:cc:33:7a:cd:8a:00:d1:21:eb:c6:16:c8:
af:bc:ce:b9:04:98:de:31:5d:d6:dd:95:de:8e:5c:
ac:b7:24:da:b9:78:9c:fa:74:04:b7:8f:b6:c1:6e:
a0:f1:0c:2c:58:60:c7:ff:ea:ae:0d:e5:62:c6:92:
e0:50:5d:0a:13:bc:b8:20:eb:ae:ca:56:8e:6c:63:
b9:25:b8:4a:76:d0:c0:64:8a:34:4c:47:02:59:cc:
c4:ec:cf:65:0e:43:da:67:0a:be:6a:04:cd:46:6a:
17:f7:7e:7e:2c:2b:0a:1b:04:54:c2:6c:d4:25:53:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:07:20:6A:EC:A2:25:90:0C:72:F6:DE:69:F3:B8:57:1B:53:78
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:74:fc:91:35:b4:26:8a:c3:a1:be:78:d7:9e:43:00:ae:71:
cd:c9:c7:9c:f0:e5:4a:51:b8:4f:fa:e3:72:75:95:54:de:1b:
28:61:a3:0c:14:0d:09:b8:e4:64:3e:70:22:07:5c:14:97:71:
18:1e:75:69:60:36:0c:30:4b:fc:26:26:24:ea:6b:64:ee:45:
31:64:45:c6:de:5d:26:6d:cb:86:4e:c5:e7:23:53:e7:9d:be:
c3:ab:be:37:60:68:0f:d7:23:72:f6:39:d1:25:24:be:bc:a4:
f9:52:9d:2d:b8:49:3a:5c:4d:a0:14:d1:de:e6:57:e4:85:67:
9a:f9:da:0d:1d:cc:f9:ca:8e:ff:b3:ec:21:f2:9a:6a:cd:00:
de:7a:79:cd:b2:35:27:a9:c3:51:b5:76:b6:b9:66:f4:71:ab:
60:cd:60:3c:b1:c5:1d:61:9a:51:5e:1f:be:bf:53:ca:a9:5f:
12:82:2a:02:81:82:96:9b:76:b5:a4:28:ba:e6:54:61:a3:4c:
15:cf:fc:cd:34:9e:2a:e0:2d:76:84:3a:a6:dd:72:82:a9:28:
c6:2a:62:3a:9b:f6:de:bc:85:d8:d5:a2:ab:82:75:4d:29:f9:
95:fe:15:c2:1d:ac:62:13:d6:16:f5:eb:a3:45:bd:8e:6c:19:
42:a5:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:39 2026 by rpki-client