Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
File: ztfiRL0eiQxicqhcuA_f1s1uRRU.mft (raw, json)
Hash identifier: kmtvwJab8JxdsW8yNwxCZ8GTq0xbs0NWBG8hXYgq2vE=
Subject key identifier: 9D:4E:61:CA:DC:7E:5C:43:0A:2B:C5:61:26:2A:CF:CB:96:34:61:AB
Authority key identifier: CE:D7:E2:44:BD:1E:89:0C:62:72:A8:5C:B8:0F:DF:D6:CD:6E:45:15
Certificate issuer: /CN=ced7e244bd1e890c6272a85cb80fdfd6cd6e4515
Certificate serial: 01A155543F2CD4AFDA32A9B2674E2F8DC95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
Manifest number: 33
Signing time: Mon 19 Oct 2026 18:02:26 +0000
Manifest this update: Mon 19 Oct 2026 18:02:26 +0000
Manifest next update: Tue 20 Oct 2026 18:02:26 +0000
Files and hashes: 1: LAJ7ntYgqilAuZgahQ26jnC_Ews.roa (hash: haoKXGElWz8hllV96ZtcF0mcECurK1B+A6m77x3kGLM=)
2: ztfiRL0eiQxicqhcuA_f1s1uRRU.crl (hash: 3AloVaIFx1f6pWJawLW5zFOf+KqZW9MFDBwy1GuTy+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:54:3f:2c:d4:af:da:32:a9:b2:67:4e:2f:8d:c9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced7e244bd1e890c6272a85cb80fdfd6cd6e4515
Validity
Not Before: Oct 19 18:02:26 2026 GMT
Not After : Oct 20 18:02:26 2026 GMT
Subject: CN=9d4e61cadc7e5c430a2bc561262acfcb963461ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:21:6a:5d:ed:96:17:51:c7:ef:fe:2b:f7:
cd:ae:0c:70:87:f7:b3:11:8c:80:a3:e2:6a:9c:4c:
91:91:6b:20:de:35:11:be:aa:f4:82:be:a9:2d:bc:
8d:d6:2f:3c:79:ac:9e:cc:6b:db:ad:eb:65:b9:2e:
4d:61:9b:3e:05:83:12:a8:b8:21:0d:07:3c:fa:92:
14:99:a4:2a:f9:fd:09:a8:fb:fb:f3:c4:59:8d:b7:
35:55:2b:6a:57:f6:81:d7:0f:ed:a9:0a:80:93:99:
f2:57:58:7f:87:fa:f3:c3:02:bc:f0:5c:ae:0a:d1:
20:ad:92:35:c3:6a:17:75:21:6e:f0:5f:e4:98:64:
1c:71:16:cf:ea:01:59:19:50:8a:15:09:6f:92:56:
c7:46:57:a7:62:e7:8c:3f:42:59:84:e7:60:f9:e0:
98:8d:a8:fe:b3:4b:65:ea:58:2b:b4:80:49:14:cc:
aa:c0:fc:17:6d:4b:58:b5:a9:87:63:5c:71:0b:82:
61:54:3b:ef:bf:37:f8:4c:82:23:cf:6a:40:7d:ca:
8d:02:3b:c8:8f:95:a4:2a:b8:f9:98:29:c8:d1:30:
0b:bc:44:27:b4:d6:0d:91:fc:21:54:de:60:0d:87:
ff:67:3c:2f:2a:ce:a6:29:2a:b2:61:82:ca:48:43:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:61:CA:DC:7E:5C:43:0A:2B:C5:61:26:2A:CF:CB:96:34:61:AB
X509v3 Authority Key Identifier:
keyid:CE:D7:E2:44:BD:1E:89:0C:62:72:A8:5C:B8:0F:DF:D6:CD:6E:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztfiRL0eiQxicqhcuA_f1s1uRRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ede2c-be61-4725-b271-cfb8ae6298e6/1/ztfiRL0eiQxicqhcuA_f1s1uRRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0c:d9:d1:75:17:ee:f2:09:72:54:34:38:61:61:55:49:bc:
53:22:00:a4:5b:54:60:e8:cc:e9:51:e2:e2:91:62:cc:57:6e:
7d:2e:0c:c7:80:46:d3:79:90:90:64:49:44:76:31:64:bc:56:
c9:f9:fb:68:61:90:2e:af:d3:08:bb:f3:75:32:e2:cb:da:c9:
53:0d:50:6f:7d:c1:07:1e:f8:b0:48:83:9f:88:52:7b:04:32:
bd:ac:6a:12:fb:02:47:c1:46:2c:46:88:84:e3:af:a4:a6:45:
ea:3f:da:fb:be:86:f0:98:ed:38:e2:8d:31:70:88:d4:df:50:
c1:e8:9a:cc:c1:8d:6d:04:86:90:1a:15:e4:ce:d8:5a:a5:bb:
08:b6:c6:a8:be:b9:c1:13:84:05:67:aa:38:c0:07:f9:a7:7a:
22:24:0b:f2:05:59:3e:e1:3e:87:2b:22:9d:5f:2b:0d:11:65:
95:4e:b9:df:4a:49:3b:82:82:f3:52:bb:c5:6a:78:25:50:8f:
21:e6:fa:ea:8d:7e:6c:7a:43:d3:9c:e7:f5:90:3d:90:01:44:
34:61:cf:bd:98:83:dd:fd:7c:8f:51:39:18:4a:4c:75:da:a5:
c8:9f:10:1d:47:98:2d:84:d6:1b:16:87:7b:45:de:93:ad:bb:
37:0f:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:30:33 2026 by rpki-client