Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: LA5qeghitWHILsLDc65gGGERJbji4wJ/yqEs4siFi3U=
Subject key identifier: 2E:02:49:57:16:61:D5:A2:BE:F3:F0:17:B8:CB:6D:D2:2F:1F:A9:FD
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019CE55B38C9781962805D82C88965E2DE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 8D
Signing time: Fri 13 Mar 2026 04:01:26 +0000
Manifest this update: Fri 13 Mar 2026 04:01:26 +0000
Manifest next update: Sat 14 Mar 2026 04:01:26 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: 7G8UbujVtb3Xwsj1LFpH7loSibj9lP9RQVY1bEA4Ko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:38:c9:78:19:62:80:5d:82:c8:89:65:e2:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Mar 13 04:01:26 2026 GMT
Not After : Mar 14 04:01:26 2026 GMT
Subject: CN=2e0249571661d5a2bef3f017b8cb6dd22f1fa9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:2b:75:2e:cd:15:1c:fd:3c:08:df:2c:ac:
de:4f:93:ec:4d:63:b1:b0:73:77:78:b1:e8:7c:74:
6e:f7:50:4b:ce:8e:eb:38:ca:01:ca:58:d8:f7:3e:
4c:db:b4:68:46:be:db:c1:d3:b1:b0:f2:f2:28:bf:
5d:d6:19:a6:8a:67:e6:63:71:a5:44:37:f6:bf:01:
04:0a:ee:c6:4a:9b:3b:43:31:ce:d1:81:cc:c7:65:
2d:96:c3:f0:d7:38:1c:16:89:f4:a5:cf:90:ed:ff:
d7:fe:2c:bb:84:9b:98:61:f7:bf:87:f1:c6:08:29:
da:69:44:5a:63:ab:94:48:d9:c8:0b:93:34:49:4c:
37:45:e3:a2:fc:60:27:b5:ee:07:88:e8:8f:06:0c:
b5:51:48:6e:a3:c0:48:c3:31:6e:53:76:b0:73:ac:
54:f7:23:6e:03:91:f2:d3:54:bc:f3:5d:6d:d0:85:
6e:b6:d7:91:58:71:d3:07:40:ef:62:25:e2:5d:dc:
ef:70:79:a3:f0:21:4b:75:49:9d:86:d5:e7:6e:47:
7f:de:f9:45:c1:55:c1:0a:a5:0a:ce:e7:21:ba:4c:
e8:06:3f:00:68:9e:53:1c:bc:82:8f:2c:53:73:9d:
9a:59:46:b3:31:72:7a:b8:33:ca:a0:ab:02:78:df:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:49:57:16:61:D5:A2:BE:F3:F0:17:B8:CB:6D:D2:2F:1F:A9:FD
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9f:57:18:74:da:a2:a2:43:db:4f:2e:10:ee:5c:91:e8:eb:
17:dd:90:e7:dc:bd:f1:f1:17:14:cc:b4:df:75:0c:59:8d:f3:
bb:e3:82:4c:05:d4:ee:d0:c4:8e:f8:5d:0c:51:0a:d2:94:cf:
64:93:4f:7e:33:d7:6e:62:aa:67:70:85:00:98:3c:07:7b:78:
b1:0b:14:d2:1b:af:bc:97:4c:cf:af:90:66:66:b4:6e:f2:ed:
23:73:92:37:59:11:b7:6f:19:47:a8:83:c1:99:68:36:45:59:
7c:ea:0d:63:66:27:61:c6:05:0d:58:ea:b3:ea:c2:eb:82:b1:
1d:bf:ca:e1:43:04:bb:49:8f:e6:04:65:07:91:79:26:12:36:
69:f8:7f:4b:6c:4d:76:c3:76:2d:e0:b3:25:47:e4:d6:3b:00:
50:2d:3e:d8:46:12:45:d6:d5:66:3e:bf:18:cf:72:52:01:c1:
0f:e1:58:78:57:3d:b0:c4:d2:10:83:36:fa:21:42:22:59:5f:
6d:23:47:97:d2:27:1c:5d:50:7d:bb:55:10:4e:c6:fc:da:7e:
a9:b0:d0:9e:33:56:99:b0:01:00:c8:16:a8:33:81:30:32:28:
ee:5c:48:23:08:59:95:80:6d:67:35:68:ec:a0:98:63:54:67:
08:45:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:56 2026 by rpki-client