Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: VgoexmUwx9/Q7rSYsqjzyKQw/kBmybWSSekPqpfHjz0=
Subject key identifier: 55:98:EF:60:BF:D7:80:A7:69:43:7F:91:45:4D:EE:F5:0F:EC:5E:CD
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 019D9A06EB6A099556882EE4FFCCD55EB7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 160B
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa (hash: fDpAtLsxJawEMxiSb4C7tAx2OdBkgN/gABVjU5t3l/s=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: 9JVBlvOE95ey0e1iNYt4hWJiKhzMomFdFaTWsDfBZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:eb:6a:09:95:56:88:2e:e4:ff:cc:d5:5e:b7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=5598ef60bfd780a769437f91454deef50fec5ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:fe:57:bc:9d:a4:a4:75:0a:e8:4d:c1:89:
b3:2e:b6:e0:2e:fe:3c:4f:f3:67:aa:2b:59:70:4f:
84:b5:97:26:0d:86:fa:90:5e:1f:8f:91:31:c2:95:
d8:6d:87:74:50:93:3e:9f:89:e8:2d:14:f0:da:5e:
d6:a3:a5:a6:29:aa:d1:44:d2:38:a5:ce:ee:d3:e3:
51:48:ec:ac:df:a1:f7:51:4f:5a:bb:53:7f:32:33:
cc:b4:d0:7b:21:ed:f6:0d:d5:57:d8:a3:ac:b3:d4:
ac:c4:5b:61:3f:9e:65:16:a1:4b:bc:f5:5a:10:24:
39:a6:c6:47:31:09:78:13:1f:92:77:c5:7f:e1:e5:
62:ed:02:2e:53:67:ad:cc:41:c0:59:88:35:8a:90:
1a:6c:ca:ef:8f:2f:cf:5f:93:d5:9c:d6:7d:98:05:
fa:52:89:3e:6d:7f:39:65:80:d3:2a:48:d9:e5:b2:
5a:92:bf:d9:24:b8:31:26:35:ab:d6:c8:ae:0c:21:
1a:38:0b:31:a2:94:33:e9:17:31:87:71:ca:f5:88:
4a:a5:5c:32:2d:2e:97:df:54:1e:27:af:a7:5a:74:
79:89:98:5c:5e:22:d8:65:c4:f5:e1:24:98:b6:a8:
4a:26:85:c3:83:85:3f:52:d3:4c:ee:bb:da:a9:4c:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:98:EF:60:BF:D7:80:A7:69:43:7F:91:45:4D:EE:F5:0F:EC:5E:CD
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:78:23:f4:55:5e:5d:33:43:96:91:0f:65:84:94:b0:e9:28:
4a:72:39:32:56:e8:79:76:27:22:2a:81:ac:16:ed:d2:e5:6e:
cf:7d:fd:cf:c5:f6:9b:33:24:c3:73:84:1c:1c:06:4c:ca:82:
5b:1c:fc:c1:19:31:0f:c7:ab:1f:e2:7f:b3:14:e4:2e:da:47:
61:b1:ec:7c:dd:e7:e7:48:fc:35:fd:c6:1b:b2:9c:bd:d3:76:
20:d8:5e:57:dd:48:e6:53:35:34:da:c2:a2:87:50:f2:7d:08:
31:b6:bb:07:c3:87:65:7e:57:a7:53:3b:de:ca:cb:4b:a1:23:
cc:59:14:9b:6a:56:99:bb:7a:4a:48:a0:b9:67:db:98:03:4a:
74:75:8f:72:c0:e6:2d:f4:93:88:bb:33:00:2e:d4:9d:a4:f7:
81:6b:17:d5:32:e3:e7:4c:17:43:ac:3b:27:59:5e:67:54:81:
ba:66:9f:ca:08:92:55:91:65:95:86:67:f0:6f:b1:26:93:52:
58:2f:87:6e:da:c6:a2:eb:80:5e:04:a0:2b:c9:a7:3f:37:ad:
8d:80:de:d4:ba:c2:3b:3a:03:8a:7e:ab:0e:38:d6:cb:56:ae:
98:d3:8b:c0:51:1e:c1:a5:40:18:69:22:5b:9a:04:5b:97:b1:
49:37:c0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aButqCZVWiC7k/8zVXrf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjYwNDE3MDYwMDM3WhcNMjYwNDE4MDYwMDM3WjAzMTEwLwYDVQQD
Eyg1NTk4ZWY2MGJmZDc4MGE3Njk0MzdmOTE0NTRkZWVmNTBmZWM1ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVz+V7ydpKR1CuhNwYmzLrbgLv48
T/NnqitZcE+EtZcmDYb6kF4fj5ExwpXYbYd0UJM+n4noLRTw2l7Wo6WmKarRRNI4
pc7u0+NRSOys36H3UU9au1N/MjPMtNB7Ie32DdVX2KOss9SsxFthP55lFqFLvPVa
ECQ5psZHMQl4Ex+Sd8V/4eVi7QIuU2etzEHAWYg1ipAabMrvjy/PX5PVnNZ9mAX6
Uok+bX85ZYDTKkjZ5bJakr/ZJLgxJjWr1siuDCEaOAsxopQz6Rcxh3HK9YhKpVwy
LS6X31QeJ6+nWnR5iZhcXiLYZcT14SSYtqhKJoXDg4U/UtNM7rvaqUwTeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWY72C/14CnaUN/kUVN7vUP7F7NMB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHgj9FVe
XTNDlpEPZYSUsOkoSnI5MlboeXYnIiqBrBbt0uVuz339z8X2mzMkw3OEHBwGTMqC
Wxz8wRkxD8erH+J/sxTkLtpHYbHsfN3n50j8Nf3GG7KcvdN2INheV91I5lM1NNrC
oodQ8n0IMba7B8OHZX5Xp1M73srLS6EjzFkUm2pWmbt6SkiguWfbmANKdHWPcsDm
LfSTiLszAC7UnaT3gWsX1TLj50wXQ6w7J1leZ1SBumafygiSVZFllYZn8G+xJpNS
WC+HbtrGouuAXgSgK8mnPzetjYDe1LrCOzoDin6rDjjWy1aumNOLwFEewaVAGGki
W5oEW5exSTfAFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:59 2026 by rpki-client