Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: f8KuHw3qLUyzju/jvOGka+fBdxen7+gPX/BuOhG343k=
Subject key identifier: 09:D2:15:EB:52:7F:40:20:8A:B6:DD:AE:E0:5B:CC:BD:7A:13:3B:C2
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019EBFFF29E01549AB035D5E22D325483173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 024F
Signing time: Sat 13 Jun 2026 08:00:31 +0000
Manifest this update: Sat 13 Jun 2026 08:00:31 +0000
Manifest next update: Sun 14 Jun 2026 08:00:31 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: gzb6tlxMZEQ7z4yVY/2Raoni+2TEttUt39N2feM8xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:29:e0:15:49:ab:03:5d:5e:22:d3:25:48:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Jun 13 08:00:31 2026 GMT
Not After : Jun 14 08:00:31 2026 GMT
Subject: CN=09d215eb527f40208ab6ddaee05bccbd7a133bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:af:82:18:75:1f:7c:3a:7a:4f:59:d2:44:
6f:60:e3:c8:dc:95:ca:69:07:82:97:ac:ec:16:80:
ed:9b:9a:e4:08:26:3e:b4:19:9f:af:5c:e8:4e:3d:
b1:1c:a5:82:09:11:58:42:50:b9:95:41:93:c5:b7:
24:ed:97:d1:24:9a:13:94:ec:3f:a9:5f:d1:74:c4:
a7:66:eb:82:73:d2:15:6c:31:8a:ba:92:15:63:df:
39:06:68:71:84:11:7e:83:9b:b9:ba:b4:1f:86:53:
77:5c:70:20:d1:40:10:95:7a:13:28:c4:a6:11:7f:
19:76:57:83:bc:e4:32:72:96:1a:fe:e9:be:cd:7b:
7f:d2:40:94:4a:eb:9f:33:ce:51:fe:a7:77:c4:e8:
bc:48:47:50:3b:08:ab:e7:3c:87:a5:52:c6:00:09:
ce:2f:1e:05:2d:49:91:e4:5c:b5:c9:74:04:b7:a0:
89:70:c4:f9:7f:cd:89:58:87:09:e0:f0:c9:26:5c:
f6:87:ea:f9:61:14:e8:49:e8:8d:b7:de:d4:74:29:
d1:87:be:a6:01:0e:1f:da:b0:4d:e9:8b:03:4c:6f:
88:12:2c:81:41:cb:67:8a:61:49:1f:73:ed:b9:8e:
51:46:e8:cf:f6:b7:b9:81:d6:b0:6a:78:64:a7:60:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:15:EB:52:7F:40:20:8A:B6:DD:AE:E0:5B:CC:BD:7A:13:3B:C2
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:30:6a:65:2b:87:95:18:8b:ce:a6:0a:7f:0a:5a:f5:96:d1:
8c:e6:38:a8:ac:d1:e8:2d:a1:82:b6:c0:79:50:f3:69:55:4f:
89:4f:90:4c:9f:b8:65:e1:1f:37:27:18:de:fa:7f:09:d1:46:
0b:26:84:4d:bc:e7:de:9c:d5:88:7e:aa:ed:03:a1:4f:02:89:
1c:35:ba:f3:4a:f9:c7:ce:e0:6d:bd:90:e1:60:16:89:eb:df:
3a:27:45:66:a5:5f:ac:e6:11:29:34:44:65:32:bb:62:8e:bb:
03:bb:5b:05:3c:99:4f:0a:ea:ac:a4:5b:8f:5f:ad:fb:1f:c0:
f3:62:0e:ae:8e:67:28:94:10:c6:ac:d5:54:78:50:1a:7c:82:
0a:4d:7e:d5:de:52:df:e2:59:9d:7b:77:87:02:dc:dc:b8:1a:
a3:19:f8:71:ae:20:53:bd:ac:53:0d:24:0f:06:cb:90:2f:cc:
1a:7a:88:27:2b:dc:19:dd:9f:9a:db:6d:91:e4:b2:02:f0:b9:
f5:56:88:25:52:b5:85:87:2a:60:6e:74:5c:e5:84:a6:e5:fc:
0f:2c:7b:54:f5:c8:6d:a3:ed:46:30:3b:8b:92:7f:cc:bc:74:
d7:2a:84:86:1a:bc:d8:92:a6:a1:04:8a:9f:85:06:b6:86:29:
48:ba:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:40 2026 by rpki-client