Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: WqapIC8u44LFK8/mnE22zB7zz0cPUMaq0wLgUu5yXJY=
Subject key identifier: 95:BB:CE:30:DB:5A:E8:CE:EA:DB:51:E0:7D:B3:A0:67:20:22:C0:0F
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019CE6DB28B7997DC54A4D43C8F873AB8396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 015A
Signing time: Fri 13 Mar 2026 11:00:48 +0000
Manifest this update: Fri 13 Mar 2026 11:00:48 +0000
Manifest next update: Sat 14 Mar 2026 11:00:48 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: rbeEN02VGBjro/sA5DBOAeTsbW/pj9j/kjm/zWQGR78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:28:b7:99:7d:c5:4a:4d:43:c8:f8:73:ab:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Mar 13 11:00:48 2026 GMT
Not After : Mar 14 11:00:48 2026 GMT
Subject: CN=95bbce30db5ae8ceeadb51e07db3a0672022c00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:17:da:6b:9e:00:88:8c:3a:c2:83:ff:a7:
9b:1a:f2:5e:14:a1:b1:e5:61:a1:08:c9:4e:43:9b:
de:7b:68:53:cf:cb:d8:1f:42:38:08:0d:4d:ad:7a:
ff:e5:55:30:ae:ef:83:91:04:3a:14:a9:13:0e:d7:
d6:70:49:4e:8f:17:47:61:56:39:98:a1:52:92:04:
d5:e4:2a:1d:a0:86:48:ac:7a:b1:79:4d:dc:b5:84:
f0:76:48:8a:84:1d:4f:6d:20:05:10:2e:11:4b:c2:
f1:43:7b:b4:62:16:21:47:a5:2e:81:eb:bc:c0:03:
f0:c4:7a:4b:6b:b8:c3:fd:c6:61:43:81:2b:f5:c9:
e1:a5:61:2c:ac:89:81:c5:c1:e7:1e:ab:0c:25:e6:
56:09:ca:aa:9c:97:2c:06:38:7f:52:1e:b7:36:38:
8d:df:9e:06:46:c0:63:3a:15:fc:2f:4a:93:f6:bc:
59:83:cb:8b:01:f7:6c:bf:e0:ff:b5:dd:8a:90:d4:
d0:af:3a:07:f0:63:61:7f:55:62:ae:42:1a:0d:e4:
fb:3c:e1:55:e5:44:ff:8c:30:96:75:d0:fc:49:1a:
84:a7:63:ef:40:16:38:58:b7:77:84:88:b7:d5:03:
33:40:6d:0b:7f:7d:96:19:01:48:8a:03:96:75:71:
85:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:CE:30:DB:5A:E8:CE:EA:DB:51:E0:7D:B3:A0:67:20:22:C0:0F
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:21:70:da:de:26:bc:d0:22:8c:75:0d:66:db:d9:80:1d:
10:67:0a:dc:18:7c:03:e5:48:89:9b:09:c0:04:fb:c8:0a:4e:
d9:16:ab:f3:bf:dd:48:b5:95:b2:c8:14:fb:d7:63:bf:4e:01:
95:8b:29:71:c2:11:b0:84:d8:e8:bd:35:08:16:e5:fb:ed:2a:
35:05:53:23:78:af:1a:41:29:09:23:27:32:5f:e0:f4:53:39:
9e:d1:48:94:2d:d0:12:38:09:3b:a6:c4:01:61:fc:14:fe:3b:
71:3c:6d:dc:1b:35:88:5c:b9:a9:fa:a6:1c:0f:92:bc:68:70:
31:02:89:6a:6c:72:1e:d0:b3:a2:38:32:6e:1c:37:d7:5d:41:
b0:9e:4b:69:b0:14:f9:ec:aa:8a:1c:fd:f6:e6:17:61:4b:3d:
29:1a:b4:10:91:71:5e:e7:9a:80:28:6d:fb:40:88:d7:6a:ec:
6a:7d:57:17:9f:be:d7:8c:90:4b:e0:f7:b4:59:c2:ae:22:42:
86:60:2d:0e:15:ef:2d:a7:dd:8b:03:2b:80:a2:ac:18:16:78:
eb:17:34:bf:29:8e:03:b3:3e:71:9f:c7:63:fa:0c:1e:36:0f:
89:8f:fd:e5:5a:0e:72:f3:ee:e5:e9:ef:79:53:82:59:13:26:
a3:53:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:51:08 2026 by rpki-client