Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: heyZ3oDE06a5UbI+k/M+iIhPMA0ByBaU19Ps7/TzBZU=
Subject key identifier: 67:AB:6D:D0:59:D0:09:1E:A7:18:82:99:9F:7C:8D:94:60:4A:C3:10
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019FAB9A03019B85D663EDD4DD75ED399932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 02C9
Signing time: Wed 29 Jul 2026 02:00:24 +0000
Manifest this update: Wed 29 Jul 2026 02:00:24 +0000
Manifest next update: Thu 30 Jul 2026 02:00:24 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: 2kRwVAiQ8TpNEb97V3vh3sfLRjAilBpbGUz70+PcJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:03:01:9b:85:d6:63:ed:d4:dd:75:ed:39:99:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Jul 29 02:00:24 2026 GMT
Not After : Jul 30 02:00:24 2026 GMT
Subject: CN=67ab6dd059d0091ea71882999f7c8d94604ac310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:89:92:e1:f9:53:45:1b:a8:0e:2d:65:0f:
a1:6f:f3:8a:3e:2d:7e:0a:d1:74:66:16:a9:06:15:
9a:cc:9b:69:47:6b:fa:b0:32:6b:08:9a:86:97:30:
50:e5:fe:0d:d9:13:72:a4:63:33:5f:44:c2:b0:cc:
74:8a:9b:89:d2:c1:05:a4:de:c5:96:af:dc:d8:c6:
a0:ed:bd:4d:c7:3d:79:93:8e:1b:bf:77:19:ff:7d:
50:e7:07:66:65:8a:43:b8:85:ca:08:0e:90:f5:70:
f3:59:27:5f:ef:25:37:d4:9a:bd:ed:a5:ea:1c:72:
ad:4e:fb:66:2d:6b:d9:e9:82:91:9f:a9:41:6b:05:
4d:47:56:4b:01:7e:bb:48:b2:28:b0:b4:db:80:fa:
3f:53:44:85:9b:dd:84:61:ce:1d:f1:df:0f:b3:25:
80:a9:21:c9:03:14:2a:57:64:3d:83:68:21:4b:b6:
2c:07:df:9c:fa:db:a4:e9:46:46:1b:4c:08:ef:af:
58:b4:86:58:53:fb:b6:ea:ae:8b:21:d5:40:46:ba:
39:5b:ce:8c:04:b2:6c:5d:0a:ad:60:ae:de:c0:f6:
ce:0d:56:a7:73:53:93:41:dc:a3:e4:b3:20:75:d4:
48:33:34:fe:8e:51:cd:99:d8:d9:63:24:8f:0f:2b:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:6D:D0:59:D0:09:1E:A7:18:82:99:9F:7C:8D:94:60:4A:C3:10
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f1:e6:d7:56:90:3a:b7:6f:5d:d1:4b:69:fe:c9:37:11:0c:
8c:1a:30:fb:d2:6c:72:00:1c:9d:7c:04:0d:06:3a:91:54:5d:
47:33:7c:b9:af:97:dc:b0:5b:fe:48:90:92:18:74:3c:31:d9:
b6:64:bc:0e:2d:97:f1:0d:6c:02:92:1a:72:1a:54:ac:5f:78:
c0:20:fd:c4:de:c7:c7:d6:d8:0d:6b:e4:cb:10:1f:ab:02:6c:
cf:ca:8e:d6:5a:23:a6:91:2d:00:e0:23:2b:46:95:68:81:f5:
17:86:ea:40:86:e5:65:46:db:e4:6b:b3:92:14:f7:31:13:2b:
89:36:9a:dc:b6:30:f0:17:cc:06:1b:5c:32:65:40:19:b9:82:
a5:d8:0c:0e:21:e2:a9:d4:7c:4e:60:f1:c6:e9:f9:11:34:7a:
70:09:54:34:84:84:94:30:ec:72:a2:91:12:1d:a6:2a:dc:89:
7e:15:3f:9e:33:d2:b5:48:ce:0d:63:9a:48:1c:e8:2e:ae:28:
c1:42:4e:8a:d1:b5:db:2a:74:f4:a8:54:db:b6:b1:ed:32:56:
d1:f1:aa:ad:91:50:45:c0:b1:f4:98:ef:aa:5a:82:b4:c3:2b:
ad:1b:bc:56:60:eb:59:27:fb:7b:dd:22:ff:18:1b:28:1c:5b:
c9:6d:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:14 2026 by rpki-client