Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
File: zt0ju4440Jd0Yzyw20Llog1-F2c.mft (raw, json)
Hash identifier: NjmE1wfynMYyXCl3BWYKg/77G1umjIgWqfLlG/basT4=
Subject key identifier: 37:7F:7C:F2:EB:9A:97:BB:C1:91:12:53:28:58:B5:19:56:47:20:4A
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Certificate issuer: /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial: 019D389BD1E1C9545076DA28B9366F59FEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
Manifest number: AE
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: FpEkjvz9ExCU8WF_yZEuTynNxEk.roa (hash: 1Ak172v20VjTJ5IkMewnA1XPtCQFB64d4MBqUxG0hTA=)
2: MP8cv65ITY8cNWNWM9JIwSTr0Og.roa (hash: rx4izqKgskJfzl6CODgjsArLoXvxQVPJAAPmsXR/tZI=)
3: zt0ju4440Jd0Yzyw20Llog1-F2c.crl (hash: 5Ho7goMlGC078hZbaL+dCn3khuKKWRLQDL9hKaYJjFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d1:e1:c9:54:50:76:da:28:b9:36:6f:59:fe:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=377f7cf2eb9a97bbc19112532858b5195647204a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:2c:f8:2e:e3:d8:6d:aa:76:b2:f7:24:51:
15:0b:50:ef:60:05:0c:db:9f:86:c9:6c:cc:8c:fe:
97:b1:c0:38:5f:30:06:43:d5:38:39:c2:f6:f2:e3:
08:3b:25:5b:ad:00:47:00:c0:77:17:02:06:ab:49:
9e:c3:fa:62:d2:e6:c5:9a:86:4c:0a:e2:21:0d:67:
84:cf:58:22:44:80:f2:13:70:ff:cf:ea:06:3e:7c:
f9:7b:e5:58:b7:9f:58:ba:82:09:1e:dc:d2:2f:b3:
f2:ea:55:77:58:02:fe:c8:de:4e:49:ec:27:af:5d:
4b:41:c2:77:d3:b8:60:49:0c:5a:9a:1b:5a:0e:e4:
3c:54:d7:e3:d9:d8:eb:a6:c6:a0:77:8d:e2:2f:b7:
ab:ae:c5:9a:be:12:c1:5d:5c:3a:87:bd:c0:b5:8d:
27:b6:c5:4f:6e:16:d1:b8:23:92:69:82:67:56:cd:
ba:ac:19:b9:0e:0f:a6:4f:d7:f6:5c:cd:7f:9a:8b:
94:47:b9:a0:7c:33:b0:27:60:bd:68:70:f0:75:16:
f5:1c:89:17:41:76:15:1b:aa:9c:df:68:a8:e4:52:
af:9d:4b:60:63:b0:00:61:62:85:e4:6a:d3:fe:fb:
5f:7d:29:11:a4:34:71:a4:03:17:0b:f1:0f:20:24:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:7C:F2:EB:9A:97:BB:C1:91:12:53:28:58:B5:19:56:47:20:4A
X509v3 Authority Key Identifier:
keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c7:5d:ab:38:b0:3a:05:30:de:5f:78:e5:f1:84:a3:78:c0:
41:be:27:bb:ed:aa:d4:a3:ff:e4:4f:96:bd:48:b7:92:94:2d:
8a:50:6e:b2:b0:35:8b:dd:89:29:d4:0d:4e:cd:22:5d:a0:4c:
f3:3a:d4:73:f0:b1:bd:26:86:60:50:fd:b9:f1:de:c0:4e:71:
a5:f0:de:f2:09:83:c8:ba:32:12:30:31:a0:67:64:a9:3d:18:
66:94:6a:3c:9b:3d:c3:eb:df:3e:7d:05:4a:f4:71:26:cb:ab:
e9:4c:b2:00:ee:4b:7c:79:21:43:f3:fe:f1:dc:b2:0a:d2:25:
fa:31:50:c1:b1:a9:59:83:d8:05:eb:40:15:77:69:eb:64:2f:
b2:eb:3c:49:4d:67:de:df:1e:66:af:df:36:ea:7f:1a:22:7d:
49:83:16:f5:c8:12:24:d4:16:50:cc:a1:39:a1:d1:9a:32:72:
35:a1:68:cc:f5:b1:9d:90:d4:13:7b:1d:88:50:1f:7a:fe:8a:
32:67:34:a7:7f:3f:67:ae:70:62:40:c6:26:5c:40:5f:f6:4d:
7f:d3:d9:04:bc:43:b3:7f:3a:66:d0:03:d0:a7:d9:82:69:b6:
b0:61:21:cd:66:f7:1a:d5:b0:00:ff:6f:49:d3:fd:6f:38:84:
72:65:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:00 2026 by rpki-client