Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: PTEsWTtMPdtQkz1VJHDbuSgSihXN4ALs45AS/8f/72Y=
Subject key identifier: 1B:A0:7F:4F:83:EC:7F:30:80:81:EB:11:C6:A1:A5:F3:3D:7C:75:4B
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019D394153447137E3E07565DE79825B64C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0F8E
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa (hash: F4rOeKQIIr+v8+zO3vdMMRp/iT0j1wFRvBSXZLKj3lw=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: 0LPSC6ETYewtoBAkoJ4aQL0V5uFsSG3HafUHxRenv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:53:44:71:37:e3:e0:75:65:de:79:82:5b:64:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=1ba07f4f83ec7f308081eb11c6a1a5f33d7c754b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:53:4b:f4:ef:60:15:84:86:a3:0e:aa:39:
7e:e9:de:f8:b4:ef:45:bd:d3:7e:21:07:e0:70:77:
a3:06:0f:d2:33:27:4f:10:2e:72:89:37:2b:86:32:
0a:8e:cc:6c:ad:8d:01:39:50:50:84:9e:1a:4b:fe:
0f:64:94:81:87:b4:8b:dd:ce:e2:4e:7a:84:6c:dd:
11:16:4f:e9:b4:1e:6c:9a:1c:70:24:67:a5:e3:c7:
e9:36:f1:a9:04:3c:9a:b6:3a:48:2b:d0:10:7d:89:
f1:47:be:43:58:3f:23:00:97:84:c6:94:6f:64:ed:
24:98:ef:56:aa:ae:ea:d3:a9:f3:1b:8a:8d:b6:d0:
94:f1:d5:dc:0b:e6:94:1a:04:05:25:72:5f:23:e7:
7c:8a:73:a6:13:a6:f8:fc:d9:95:69:94:e8:99:56:
9b:0c:ec:31:3f:bf:ff:4d:5e:e7:83:57:be:ec:be:
52:80:1f:61:f8:c4:94:7a:65:6c:54:e4:7c:1b:54:
a8:f6:0a:1c:f5:7c:e1:c3:32:b9:cb:35:24:2b:14:
94:32:e5:60:83:0a:97:2b:dc:8a:a5:a4:9e:ce:0f:
0b:fb:dd:e5:0e:b9:87:32:e8:42:a5:8a:a7:07:1b:
9e:af:5c:a8:c9:9e:b9:d3:be:b7:51:65:42:eb:a6:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:7F:4F:83:EC:7F:30:80:81:EB:11:C6:A1:A5:F3:3D:7C:75:4B
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:21:ec:98:a5:15:ca:e3:ba:76:8d:57:c5:77:b0:b1:0d:51:
60:14:81:db:69:5f:6e:15:ac:f2:e7:29:a6:11:32:01:f4:80:
80:e2:06:ff:86:03:e3:30:62:5b:f9:f9:8a:cd:e1:d3:10:44:
9f:96:99:e1:51:9a:e1:04:eb:9a:aa:82:7d:df:61:f1:88:2a:
18:1d:0e:d5:fe:65:f2:88:7c:06:3a:1c:3d:b1:d5:bc:f8:bf:
5e:c6:04:c6:1b:bd:79:13:2a:90:23:c1:ea:60:f0:ab:d8:aa:
9e:c3:45:92:a9:c7:f0:d3:f6:ed:53:47:c7:ea:8c:2e:34:b6:
18:84:a7:55:44:2b:ba:55:73:56:97:41:2a:90:90:63:b6:01:
b4:90:2c:cc:1b:ab:cf:ad:0d:b3:80:4e:42:9e:78:3d:be:b8:
d5:74:65:f2:c4:10:bd:03:70:ff:bf:2b:fb:5b:dc:5d:9d:db:
15:67:0e:0a:33:b1:b1:d7:4e:08:45:3c:2a:38:2d:87:3f:8a:
5d:7e:d3:b3:1a:20:ed:b9:d9:44:af:48:c9:d4:1d:d6:68:f9:
d5:1b:6f:ae:91:e1:72:23:61:fa:9c:0f:b6:b0:fc:48:99:d3:
42:cc:a6:3c:5c:34:c4:4b:97:d9:cf:16:a8:bc:66:02:f9:92:
f1:47:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:26 2026 by rpki-client