Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: PKUyU73h+L0HoO48smEzTzDNYuw8/8ABfwb7TffFhik=
Subject key identifier: 15:A5:58:C8:5A:AC:A2:0A:31:73:83:83:F4:87:6C:E3:FD:E0:6E:89
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019D99D0AC3DC3DCBFF595AD00CB0A9B71C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0FC0
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa (hash: F4rOeKQIIr+v8+zO3vdMMRp/iT0j1wFRvBSXZLKj3lw=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: yYuz/jjxtdJYPubqTMwBRmIwrFd3clVL3KiZcTJ6A7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ac:3d:c3:dc:bf:f5:95:ad:00:cb:0a:9b:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=15a558c85aaca20a31738383f4876ce3fde06e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:e8:b0:ef:72:a3:26:28:2e:87:3f:d3:65:
ef:ab:6c:35:f6:1a:4e:6c:c6:2b:ed:b3:d9:80:ad:
f8:c2:0e:43:af:3e:5e:8a:bd:78:b3:b1:dc:a1:f3:
3e:c8:c0:4a:94:4a:a3:34:bd:3f:c4:7f:5a:e4:85:
9e:ca:d9:c4:a2:c2:8c:65:fd:3e:6b:fa:36:7a:ed:
a3:46:89:7c:30:b2:ff:1d:68:ad:5b:b0:a3:ce:d2:
d1:03:44:f0:4c:6d:a4:cf:17:81:b8:f5:91:79:72:
04:7d:61:50:0d:f8:7d:23:ed:f0:3d:a7:29:cf:bd:
53:38:2c:64:8b:97:e9:14:59:7b:f4:60:7e:f1:30:
14:ba:a9:9c:fe:9b:1c:bd:8b:fc:61:38:bc:a4:1a:
d1:1b:1f:cb:0a:34:8b:47:c9:de:f8:2e:6e:0a:ea:
d0:05:6b:d9:a8:2e:3a:b9:5c:ae:b6:6a:9f:76:df:
c9:a0:22:75:7c:3f:dc:e2:32:03:4a:32:96:5e:1d:
1e:85:c1:e1:29:4c:aa:a0:7a:d5:3b:12:ee:fb:c5:
7f:22:7d:a5:da:d2:2c:f4:81:19:7a:70:f7:1a:4d:
aa:50:69:c1:e4:c2:08:fd:d1:0c:ee:53:da:80:6b:
77:d8:91:a5:bc:6a:8e:2c:be:06:6b:06:a9:0d:95:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:58:C8:5A:AC:A2:0A:31:73:83:83:F4:87:6C:E3:FD:E0:6E:89
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bb:3d:5b:1f:01:f7:e0:24:19:36:a3:ac:ac:5d:ee:45:97:
e0:dd:ac:00:28:f8:b3:4e:86:6a:16:34:7c:0e:91:ea:3f:7c:
3e:d4:f2:cb:5a:89:4a:03:1b:66:81:54:7c:90:f2:a9:c2:c6:
8b:6d:db:11:5b:ee:33:71:48:ab:a6:86:bc:63:56:c5:71:f6:
82:56:e5:19:1b:4e:53:68:da:ed:98:f5:91:64:b5:32:95:06:
cf:6f:0c:77:97:91:dc:28:10:e9:0a:f3:33:9e:9d:10:b8:3b:
64:fd:6b:e2:e8:09:56:bf:be:b4:39:12:05:60:f4:13:f8:b6:
a8:bc:e9:2c:5f:d9:a8:27:b8:68:3d:08:86:aa:b7:01:9c:44:
59:da:af:b9:00:98:36:4a:62:64:79:f0:84:64:2e:6f:48:98:
80:da:6b:53:36:01:62:47:e8:0d:43:74:67:55:93:e4:68:fe:
fd:bf:35:c9:34:34:b0:a6:9c:65:0a:69:6f:6b:2f:83:df:5f:
20:f6:27:c1:30:76:da:1c:e7:96:e3:93:f4:1d:a6:f1:a8:60:
f3:bc:1e:ff:1f:e2:4b:1a:4a:99:6e:d7:1b:05:03:d6:29:55:
3e:00:af:ba:3b:04:8b:6c:c7:36:37:d4:74:31:37:60:0a:4b:
84:33:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:20 2026 by rpki-client