Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json)
Hash identifier: N4MGMl2RcSGmolBkS6p1jhl1CFMiQ0GnPt5S5a4EzXk=
Subject key identifier: 41:98:78:02:3D:4A:19:27:BB:69:6B:A5:EB:22:FF:10:4E:63:24:1D
Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99
Certificate serial: 019D375315F52792590D8A2785880F07D2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
Manifest number: 01CA
Signing time: Sun 29 Mar 2026 02:01:24 +0000
Manifest this update: Sun 29 Mar 2026 02:01:24 +0000
Manifest next update: Mon 30 Mar 2026 02:01:24 +0000
Files and hashes: 1: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: TlGOBKUKj0OLHGf+u+RFUWiwq3oko4BWWNA7ypnSRiI=)
2: mf_AZ1vDsnNkv0nHtoE1T2hjIH4.roa (hash: gw1fT/9xJl2DFpGmxI3jrXwIRs8KgcauR0afwI0ggNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:15:f5:27:92:59:0d:8a:27:85:88:0f:07:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99
Validity
Not Before: Mar 29 02:01:24 2026 GMT
Not After : Mar 30 02:01:24 2026 GMT
Subject: CN=419878023d4a1927bb696ba5eb22ff104e63241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:3c:64:3c:50:86:35:aa:a3:53:77:15:a2:
7c:e8:99:a2:02:ee:25:0b:f7:34:d3:5d:bb:c5:1d:
2c:2d:82:9f:11:3d:fc:57:a4:a8:ea:0c:4a:32:03:
0d:83:10:67:84:b9:51:f4:2c:56:9b:39:c5:17:ac:
88:7e:77:1c:b5:96:e4:0d:0f:1e:7a:c4:4a:ea:28:
f7:ec:fb:8c:23:10:aa:c9:33:f6:65:61:12:bf:e7:
77:f8:eb:25:31:0a:71:4f:e9:c1:7d:d7:1b:53:b7:
9f:51:6f:06:08:cb:b5:7c:3c:c4:47:f2:aa:8a:bc:
70:bf:f3:67:a2:d1:c5:a7:1d:02:d1:44:90:75:b8:
ce:b3:83:d8:86:41:9e:5a:c7:a8:d7:6f:6f:a7:a7:
57:92:33:53:0b:ac:c1:16:0d:21:f5:a4:2a:a9:47:
49:c2:8e:a0:97:98:d8:04:1f:25:37:eb:94:e5:c8:
6c:97:d1:7f:db:1e:f5:e0:07:bf:c8:2e:2e:99:19:
4a:36:ab:48:36:78:c9:7f:24:69:00:78:90:e9:28:
62:93:15:6e:d1:a8:37:c2:52:3e:e2:26:7c:ca:70:
a8:34:6f:6f:f6:32:75:95:40:e5:37:5f:6e:67:07:
96:c6:13:8f:df:33:8c:f4:3e:f7:93:bc:d6:0d:b9:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:78:02:3D:4A:19:27:BB:69:6B:A5:EB:22:FF:10:4E:63:24:1D
X509v3 Authority Key Identifier:
keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e3:81:00:e9:16:b1:36:3d:0c:1f:42:fb:a9:8e:3f:d5:04:
f3:62:4f:03:8b:b4:93:a6:c7:50:d2:fe:69:07:88:57:5a:3e:
19:c7:e7:53:cb:44:92:fb:21:c2:9b:64:a2:89:d4:be:9d:9a:
3d:a4:68:62:9f:ad:74:48:91:d8:d1:6b:d2:4e:90:cf:91:6d:
b0:99:07:b6:d3:9a:c3:8e:fc:da:cf:0e:14:66:19:d3:6b:1c:
43:d7:63:8a:2e:23:09:b9:73:d6:21:9f:39:07:60:d6:fc:69:
cf:09:7c:69:56:22:1e:4e:f5:03:15:b5:b4:b0:fb:54:c0:ed:
4f:29:f4:33:57:95:6e:fb:b2:9c:0f:d6:46:9f:f8:ff:38:b8:
1b:d2:53:5d:aa:b6:77:c0:ab:ba:62:83:25:57:33:db:62:0e:
58:9f:83:60:92:5a:8e:4c:a9:cc:b5:f0:1a:76:83:a9:9c:f9:
e5:a4:46:41:fa:8b:0d:57:c0:38:1d:98:d7:06:12:1c:b4:ff:
7b:e5:29:a2:19:a9:c9:3d:1f:6f:ff:91:64:b5:bd:a5:6d:fc:
93:01:40:7d:10:1b:e8:92:0d:82:60:86:2c:4d:8b:7f:ed:17:
3c:57:b7:7e:c0:3f:d5:3f:12:53:dc:f8:96:ae:7c:73:2e:04:
74:3a:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client