Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: X2oG3iPulrvA3ljR2cLS7TR2s4qCg54UDP68Jd8nGgw=
Subject key identifier: FE:12:D0:8E:F0:B5:1D:FA:88:DB:9F:0F:04:6C:98:75:5A:8C:2C:40
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019DCF071A77E0EF048697BFF0B9449A3D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 0106
Signing time: Mon 27 Apr 2026 13:00:42 +0000
Manifest this update: Mon 27 Apr 2026 13:00:42 +0000
Manifest next update: Tue 28 Apr 2026 13:00:42 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: NkqWAPQOHwQB0d5hBnGBKrxJWxR7k7VEOliJGk8BqXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:1a:77:e0:ef:04:86:97:bf:f0:b9:44:9a:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Apr 27 13:00:42 2026 GMT
Not After : Apr 28 13:00:42 2026 GMT
Subject: CN=fe12d08ef0b51dfa88db9f0f046c98755a8c2c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:42:6d:0a:22:89:d7:77:b1:f8:0f:a9:31:
45:1b:68:18:d4:3f:cd:9d:e0:cb:b7:5e:08:a1:cd:
70:39:e1:49:a4:86:2d:f9:34:e0:95:d7:db:d8:d2:
bc:7a:13:7d:e4:06:e0:0f:3b:39:0b:53:75:f4:10:
5f:69:b4:4c:12:f4:6f:2c:f3:18:82:d7:8c:8c:7a:
d3:e9:66:7d:59:20:6a:e4:05:e1:f4:cf:db:d6:99:
b6:0a:38:75:40:e5:1d:c8:60:09:86:6f:6d:ee:f4:
51:00:d2:63:30:15:d3:a1:13:0d:28:bd:a1:52:97:
98:8b:61:f7:39:ca:2e:99:76:bb:6b:94:a7:cc:74:
01:03:65:8e:ae:22:d9:d1:58:d6:db:44:48:26:61:
a5:16:13:74:03:70:a9:eb:47:ab:c8:95:89:84:e2:
60:82:ea:42:22:3f:89:1c:31:7c:51:9d:b7:1a:3d:
bb:6c:7e:0d:61:53:02:e3:e9:45:1b:b6:87:ec:ed:
57:a2:f0:6f:23:bf:fa:b2:63:90:f8:bb:23:55:89:
2c:15:67:14:4e:7b:59:bc:49:4e:64:86:5d:5e:d8:
e0:55:e1:d7:30:2a:fa:2b:3d:cf:03:23:62:8a:92:
82:a7:43:85:d5:43:e4:a1:56:22:73:c5:f2:46:e0:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:12:D0:8E:F0:B5:1D:FA:88:DB:9F:0F:04:6C:98:75:5A:8C:2C:40
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:9b:81:09:1a:7a:65:a5:ee:88:4a:0d:53:5c:7a:c4:fa:
9e:2e:15:f2:7d:e2:80:67:c2:cd:4c:a8:8b:c4:b0:dd:a2:31:
c6:a9:68:32:ce:dc:92:f0:59:fb:c1:6a:70:fa:93:8a:fe:42:
69:47:6a:2c:53:98:28:30:bf:07:45:9c:20:13:f1:87:c0:6f:
5c:06:7e:a7:87:5e:e7:05:0c:95:e2:16:9e:d1:18:e8:cd:b6:
ec:26:38:4a:6e:a2:26:87:b1:c2:97:df:e6:7d:26:6c:a3:2c:
d5:84:51:2a:76:a4:b0:bb:5c:66:fe:e0:65:47:d0:2e:13:a1:
6b:84:26:6e:6c:c2:f7:8e:41:f6:c8:45:c3:f6:c5:81:a9:15:
60:e4:ea:80:67:c0:32:18:9d:f0:db:8b:58:99:13:db:c4:07:
df:85:48:c9:7d:46:b3:a9:bd:56:f2:a4:f5:32:51:6a:63:83:
fc:05:26:10:b9:ec:c6:54:63:a7:c7:08:87:09:c1:64:52:c8:
4a:17:25:9a:3b:b0:3b:2c:ee:b2:3c:f7:84:a6:40:bd:0a:7d:
58:a8:8d:69:9f:e4:7c:88:ea:0e:ca:c6:6d:f4:b4:4c:85:ce:
aa:b4:ba:28:7d:94:e7:b7:fc:ad:d7:72:7f:1c:ea:f2:11:12:
86:3f:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:09 2026 by rpki-client