Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
File: zt0ju4440Jd0Yzyw20Llog1-F2c.mft (raw, json)
Hash identifier: byhoe7of3Wdm4cAAsEEdTLNjyv1LY0N/+LlIzYZivJA=
Subject key identifier: EC:71:85:02:10:E3:AE:3D:EC:D6:F9:30:62:C1:74:EB:BF:2A:6D:4B
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Certificate issuer: /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial: 019CAF7EE5E0D7D76EAD35F58513B4FD203A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
Manifest number: 67
Signing time: Mon 02 Mar 2026 17:00:55 +0000
Manifest this update: Mon 02 Mar 2026 17:00:55 +0000
Manifest next update: Tue 03 Mar 2026 17:00:55 +0000
Files and hashes: 1: FpEkjvz9ExCU8WF_yZEuTynNxEk.roa (hash: 1Ak172v20VjTJ5IkMewnA1XPtCQFB64d4MBqUxG0hTA=)
2: MP8cv65ITY8cNWNWM9JIwSTr0Og.roa (hash: rx4izqKgskJfzl6CODgjsArLoXvxQVPJAAPmsXR/tZI=)
3: zt0ju4440Jd0Yzyw20Llog1-F2c.crl (hash: 9kMQ199RFlUkuI5VHBQlyLMnX9FiveZF8UZfIaiXqfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:e5:e0:d7:d7:6e:ad:35:f5:85:13:b4:fd:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Validity
Not Before: Mar 2 17:00:55 2026 GMT
Not After : Mar 3 17:00:55 2026 GMT
Subject: CN=ec71850210e3ae3decd6f93062c174ebbf2a6d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:94:09:d7:3f:03:e1:30:45:3a:1e:86:28:
8e:97:83:80:0b:a4:01:e1:b0:b2:c2:9c:3b:a8:42:
2d:ed:c1:29:f3:c8:56:94:6f:38:73:20:25:d1:34:
2e:ff:f5:9c:f9:c0:df:31:fd:71:00:c2:6e:83:34:
27:3b:21:93:30:3b:cd:ac:88:65:df:81:ae:09:96:
18:69:54:4b:08:e0:7d:34:4f:0e:bb:b6:fd:ea:0a:
80:0e:cf:9f:82:2d:17:78:1c:eb:d5:6c:1c:90:e6:
1f:85:38:4a:e0:b1:c8:69:b8:11:62:67:2d:c0:07:
76:72:1d:88:4c:d3:30:46:bb:5f:bf:d6:ca:1b:66:
48:8d:d8:a3:3b:dd:d3:f4:5c:06:e9:25:cc:09:97:
27:dc:3b:ba:04:26:75:4e:4c:c9:2a:ba:33:2c:52:
2d:eb:c8:8e:79:e0:f3:97:31:b2:ee:5e:e3:e8:03:
76:76:ab:23:d4:3e:f4:88:b9:56:76:9f:43:35:e4:
51:43:de:25:e4:f7:37:ba:3f:c8:16:cf:1d:33:f3:
c7:46:31:67:96:d6:38:7f:ef:aa:a0:54:b9:4d:a7:
f0:f8:7b:37:65:56:02:ed:2b:a1:2c:45:f4:12:53:
62:d7:7a:e7:e2:6e:27:8f:60:0e:42:ca:ea:d1:53:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:85:02:10:E3:AE:3D:EC:D6:F9:30:62:C1:74:EB:BF:2A:6D:4B
X509v3 Authority Key Identifier:
keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e4:53:74:77:4c:f7:6d:2a:0f:dc:34:8d:53:39:bd:80:ea:
26:b9:85:c5:90:01:4d:4f:3e:b9:06:8c:b1:d9:9a:9e:80:19:
76:44:49:31:69:94:1a:4e:8a:46:dd:f1:4d:c0:33:df:2b:68:
af:43:57:94:1b:30:b8:07:41:37:52:bf:c3:b1:03:f1:25:d4:
e4:16:64:c1:a8:91:eb:14:b1:f3:da:50:33:39:8f:f2:99:92:
d7:4e:bd:e2:e1:84:6c:84:5f:57:b4:73:71:6c:7c:c4:ed:5f:
75:87:31:30:57:92:a4:cf:da:88:81:1e:0f:47:10:9b:a2:57:
9d:f3:8b:25:1c:0e:07:4a:5a:e4:26:7f:15:b9:b1:4e:24:2f:
e4:f8:10:42:41:02:2d:95:d3:7c:c2:ab:ed:bb:b7:15:5a:71:
79:ed:cc:ac:aa:79:f7:e0:de:ae:d2:71:c1:09:dc:53:96:cc:
c4:8e:b6:ec:3f:d7:29:57:15:53:10:cd:4c:7d:c9:0e:d4:60:
6d:7b:ba:26:5d:67:41:85:63:70:3f:86:8f:6f:92:f2:cb:52:
c8:07:90:49:3b:4e:20:28:23:9b:ea:10:42:0c:ea:28:6a:e2:
91:ad:5c:ee:72:a2:31:57:bd:2b:71:9b:d6:50:f0:1f:f3:5e:
66:94:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:00:07 2026 by rpki-client