Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json)
Hash identifier: SluZVbKrTWnoaLi+aWp52aS+MGsQOuyse9It+xUl+ks=
Subject key identifier: 76:17:4D:8C:25:78:E7:95:0A:63:F1:93:A9:F9:7F:ED:90:11:E9:DD
Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115
Certificate serial: 019D9A74E5B95D449BE8AEC29A6E29A898F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
Manifest number: 01B7
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=)
2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=)
3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: 8vkYg0sFQYxTUmJTb88GLoEzaNWN99kfSCsMvOgbD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e5:b9:5d:44:9b:e8:ae:c2:9a:6e:29:a8:98:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=76174d8c2578e7950a63f193a9f97fed9011e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:91:33:df:a9:8f:27:cb:ae:31:db:8c:63:
e0:7f:20:de:ba:8e:89:13:49:be:a9:c2:ad:6a:f9:
6b:b2:b5:a4:d7:9e:6e:44:70:12:aa:90:7e:ca:78:
8b:9d:ef:e6:ab:61:88:98:11:ad:6a:57:57:3d:0f:
74:60:95:b3:0c:b8:87:01:0d:d0:e8:cf:1f:36:0a:
53:d4:25:52:d6:30:56:bd:fb:19:69:fd:ae:bf:02:
78:96:88:2e:b3:b4:84:a0:21:10:db:ee:c0:8b:80:
6a:5f:7e:b2:84:ed:c8:79:54:cc:7d:4b:9a:ad:9f:
9e:0b:bf:cd:1e:70:e1:43:a0:91:a3:16:cf:24:91:
0a:35:5e:ea:88:22:a8:45:c2:3d:49:9b:20:1e:35:
6f:09:3a:8e:d4:4d:f6:32:62:0e:60:81:25:64:33:
ec:2f:40:d5:9c:c5:77:26:c2:24:f6:6d:ee:8d:3b:
03:f7:c2:86:ec:9d:84:8f:35:40:dc:3c:19:20:43:
7d:f7:8b:fd:ef:27:94:b1:69:9f:b6:4e:15:8d:6f:
22:1b:b2:e3:89:84:69:11:10:aa:51:fa:a8:6c:a5:
9a:96:e4:10:6d:1b:68:7a:fd:81:45:54:63:3b:0e:
74:df:b1:af:87:30:96:06:2c:ee:6f:cf:c8:be:8c:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:4D:8C:25:78:E7:95:0A:63:F1:93:A9:F9:7F:ED:90:11:E9:DD
X509v3 Authority Key Identifier:
keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:1f:5c:57:25:49:55:ec:39:7e:be:67:a0:51:3c:1b:ba:
c5:f5:bb:7f:4f:0c:dc:ba:ea:36:c5:65:d7:24:fe:21:cb:0a:
96:e7:f6:2f:5e:f2:a6:7c:1d:a9:b5:45:b9:80:9f:4d:d0:d5:
03:2c:db:eb:42:01:d1:25:61:e9:fc:be:c0:11:5f:cc:da:d3:
5f:b3:ea:66:03:46:5e:37:ad:12:51:e0:a5:3c:9f:28:18:9e:
54:75:fa:90:a7:c6:12:18:25:d5:6b:b4:34:9c:94:e5:d7:52:
e6:a5:7a:0d:99:ec:f8:df:e4:49:31:2c:ba:86:f3:9c:87:b7:
c2:cd:65:57:d2:86:cc:22:b3:ee:63:58:60:d5:c4:74:f2:59:
b5:1b:90:dc:39:8c:d5:e4:66:cd:5b:05:74:07:e3:ce:65:73:
35:c2:12:81:36:e5:d8:4c:17:6a:9a:81:11:d2:f6:3d:6b:d6:
f4:ea:97:81:6e:bb:ef:0d:a7:38:60:06:91:ec:ae:18:f9:70:
6d:de:95:f3:a3:34:ce:9c:ac:8d:6f:d9:64:bd:9e:e5:2f:ae:
7a:57:2b:fe:0c:f9:2c:e7:56:a6:e4:ac:12:de:15:36:7a:2c:
aa:62:0f:17:52:70:aa:c8:4a:a5:fa:7a:a6:87:97:e4:15:13:
1d:f6:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:33 2026 by rpki-client