Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: PJZs6NWyf3FnE2hSGguRsFQzI2owMBv9mJzfa/cD7JQ=
Subject key identifier: 53:D5:41:14:7C:C3:3D:7C:20:72:FA:01:23:97:CA:C3:30:99:3C:BB
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 019CAC7DEFE6F1CF2CB690660600EF3DE3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1590
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa (hash: fDpAtLsxJawEMxiSb4C7tAx2OdBkgN/gABVjU5t3l/s=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: bQa209CUr3sdlibcQ+O/wsrf7mkf2y2Zxgv+D4CVjxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ef:e6:f1:cf:2c:b6:90:66:06:00:ef:3d:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=53d541147cc33d7c2072fa012397cac330993cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:fa:ce:6c:2e:5f:43:8e:5e:ba:c6:c7:d4:
42:19:c0:4e:db:5b:48:60:a2:9a:46:ff:b5:ac:7b:
8c:a0:09:44:eb:7f:42:27:df:a2:8c:33:74:aa:47:
45:49:5b:6e:80:08:93:03:6c:c4:d9:4d:41:02:d2:
91:d3:ba:06:14:52:93:12:43:8d:1f:8e:fa:aa:b0:
e6:b2:c3:9a:70:95:41:96:5b:13:da:c9:2f:30:2b:
e1:b2:4a:35:1a:75:0f:8a:02:b7:c9:ef:27:7f:af:
f5:04:d4:ad:fe:03:d3:9e:32:f3:5c:3c:df:7f:0d:
54:98:09:9b:88:7c:69:73:3c:55:1a:3b:8d:12:c9:
77:37:2a:03:b2:68:d9:c9:bb:35:b7:bd:db:68:a6:
9c:d1:9c:cc:60:c2:d0:9a:d3:4d:71:2c:2b:ed:e3:
32:45:3a:d0:89:b6:a3:6e:4e:85:93:dc:9f:a2:31:
a9:51:c3:0c:56:a6:ec:2a:a6:b5:24:ac:db:49:e6:
4f:83:8f:fd:1c:44:1d:d4:6a:ff:e7:7d:d8:a1:55:
be:05:d2:5d:28:59:70:32:36:57:fd:6f:03:19:17:
dd:fd:d3:89:8b:4f:71:23:1b:d3:b0:98:f9:8d:6d:
42:3f:9b:8b:fa:68:e9:ac:2b:52:a4:7d:f6:be:01:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:41:14:7C:C3:3D:7C:20:72:FA:01:23:97:CA:C3:30:99:3C:BB
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:29:f1:47:c3:66:62:bb:b8:35:9d:3b:f3:bd:df:42:bd:d0:
b9:6c:95:22:ae:5a:25:c5:6d:09:80:b5:92:88:ef:c4:eb:43:
18:8a:51:30:d1:2c:c1:93:b6:9e:37:36:88:55:c7:3b:3c:7b:
cb:f7:eb:75:d5:8e:11:27:03:90:08:55:a7:9b:49:a5:17:3b:
1b:53:54:cd:b1:8c:ba:ba:85:9a:2f:83:8f:2c:6d:4e:2a:79:
5a:51:61:02:83:23:02:10:5c:aa:c4:bf:b0:ce:52:3a:bf:60:
f4:16:c6:9d:c8:08:b2:d9:a5:d5:ea:01:17:72:1d:0a:12:ba:
d6:6d:8b:fc:94:2c:5f:5c:0b:40:1f:3b:f0:e4:f5:f5:c3:4a:
ba:32:55:1e:bf:1c:3c:ff:f7:ed:62:b9:5f:dc:41:80:c2:e3:
3b:20:d6:e3:f6:92:e6:58:73:8f:46:19:e0:4f:95:41:a5:04:
2f:87:09:cc:8c:d1:c2:eb:dd:7a:58:80:d4:15:d6:13:5b:a0:
52:d0:cc:f1:67:86:6b:57:26:24:18:f0:94:82:a6:1b:9f:35:
d4:fa:39:ba:f0:06:0d:02:8c:1e:6d:21:6b:8c:31:3f:25:25:
4e:48:f5:71:78:ce:63:4e:63:d6:38:5c:1e:bb:ff:5c:32:a0:
8b:87:b9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfe/m8c8stpBmBgDvPeOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjYwMzAyMDMwMTAwWhcNMjYwMzAzMDMwMTAwWjAzMTEwLwYDVQQD
Eyg1M2Q1NDExNDdjYzMzZDdjMjA3MmZhMDEyMzk3Y2FjMzMwOTkzY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAv6zmwuX0OOXrrGx9RCGcBO21tI
YKKaRv+1rHuMoAlE639CJ9+ijDN0qkdFSVtugAiTA2zE2U1BAtKR07oGFFKTEkON
H476qrDmssOacJVBllsT2skvMCvhsko1GnUPigK3ye8nf6/1BNSt/gPTnjLzXDzf
fw1UmAmbiHxpczxVGjuNEsl3NyoDsmjZybs1t73baKac0ZzMYMLQmtNNcSwr7eMy
RTrQibajbk6Fk9yfojGpUcMMVqbsKqa1JKzbSeZPg4/9HEQd1Gr/533YoVW+BdJd
KFlwMjZX/W8DGRfd/dOJi09xIxvTsJj5jW1CP5uL+mjprCtSpH32vgEGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPVQRR8wz18IHL6ASOXysMwmTy7MB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCnxR8Nm
Yru4NZ07873fQr3QuWyVIq5aJcVtCYC1kojvxOtDGIpRMNEswZO2njc2iFXHOzx7
y/frddWOEScDkAhVp5tJpRc7G1NUzbGMurqFmi+DjyxtTip5WlFhAoMjAhBcqsS/
sM5SOr9g9BbGncgIstml1eoBF3IdChK61m2L/JQsX1wLQB878OT19cNKujJVHr8c
PP/37WK5X9xBgMLjOyDW4/aS5lhzj0YZ4E+VQaUEL4cJzIzRwuvdeliA1BXWE1ug
UtDM8WeGa1cmJBjwlIKmG5811Po5uvAGDQKMHm0ha4wxPyUlTkj1cXjOY05j1jhc
Hrv/XDKgi4e5kQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:14 2026 by rpki-client