Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: RddXtqSREmHIMnepl7E7ShhZgiaEhp+5WXj5YIqhHyQ=
Subject key identifier: B3:2D:4B:A9:ED:45:1C:D5:5D:43:24:9E:96:12:0F:BC:29:33:8C:E4
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 01A17D05D7B4A08BA3F73CBEBEDF4EEB5C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 03BA
Signing time: Tue 27 Oct 2026 11:01:37 +0000
Manifest this update: Tue 27 Oct 2026 11:01:37 +0000
Manifest next update: Wed 28 Oct 2026 11:01:37 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: vVrV2raXZ7cyKGZdCD0BRsB/z/ekavJ+ielGHzLBu8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:d7:b4:a0:8b:a3:f7:3c:be:be:df:4e:eb:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Oct 27 11:01:37 2026 GMT
Not After : Oct 28 11:01:37 2026 GMT
Subject: CN=b32d4ba9ed451cd55d43249e96120fbc29338ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:e9:69:98:13:5d:e6:21:10:ee:c3:89:f3:
7c:95:82:4a:8d:02:a9:63:25:36:e8:b6:e8:e5:a6:
a5:32:66:73:c3:fb:56:ab:62:f9:57:80:e0:5d:e8:
2c:44:57:12:66:7e:ba:87:50:a0:30:42:f4:bf:f8:
79:71:18:de:34:f2:0f:6c:1e:1d:16:05:32:41:4f:
0d:79:72:cc:e4:b5:fd:c4:ff:c3:48:a5:31:fe:21:
5e:4e:ef:ed:8f:8f:0c:fd:eb:9e:6d:40:f9:f5:4e:
56:cc:c5:80:54:ed:77:10:ad:95:7f:d3:9b:52:7d:
23:53:64:8e:eb:23:bc:dc:64:3e:bf:d0:cd:91:bd:
30:d1:4f:c7:72:38:03:e9:33:c4:26:b1:14:a7:0b:
0a:11:62:e2:06:7e:44:16:4a:35:af:51:4e:0a:6b:
d8:cb:17:57:d7:6b:d9:96:c3:53:4e:dd:a6:27:d9:
40:d8:25:6a:6a:f5:bf:72:f9:b1:0e:27:3f:93:46:
8a:84:63:26:54:c5:6c:f6:6f:6f:aa:09:a8:c1:93:
12:2d:41:9d:e8:bb:65:45:9a:56:08:56:a6:52:05:
de:2e:52:2e:fc:e5:d4:f4:a4:83:d2:e5:41:14:49:
f7:9c:7c:0a:ba:b6:40:88:42:14:58:fe:0b:d3:d3:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:4B:A9:ED:45:1C:D5:5D:43:24:9E:96:12:0F:BC:29:33:8C:E4
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:73:38:3f:af:31:f6:d4:9b:8c:dc:e0:cc:f6:34:7b:6d:61:
c2:ea:f9:a1:c9:72:59:84:5e:2b:24:11:58:ef:70:24:f6:b8:
ab:d4:43:c9:85:cf:f1:58:ae:cd:27:10:23:6f:68:2f:24:0e:
94:97:0e:a5:6b:37:dd:2e:ed:54:5a:40:c2:ff:43:ef:04:c0:
f1:a9:68:3b:62:29:4d:01:66:8e:c2:7b:e6:0d:67:e3:7c:59:
3f:f1:d8:4b:10:a3:0e:8c:db:f2:56:ea:72:30:3e:8c:46:e4:
89:29:d3:05:0f:3a:1d:d4:e8:63:2f:0b:26:97:fd:71:99:62:
ce:1b:2f:ce:82:4b:bc:68:b3:2f:03:d4:18:ab:df:76:21:67:
b3:06:c7:03:61:10:d9:b5:a9:ba:7d:86:1c:e5:93:42:1b:b8:
c2:5d:ab:72:91:4b:1d:c1:eb:38:de:80:e0:23:bf:56:9e:e7:
69:79:80:3d:7a:04:a9:bf:8b:2b:b9:b5:db:c9:1d:8f:dd:aa:
67:01:8e:1c:11:9d:24:c9:c7:ca:d6:f7:5b:d9:9a:ed:8d:bd:
bb:de:0e:97:a5:7f:6c:28:3d:ec:a4:55:54:a1:fc:c7:1b:3f:
45:ee:65:05:9e:93:f4:6e:d3:e9:3b:d9:52:70:96:7c:7b:30:
9a:94:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:45:23 2026 by rpki-client