Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: +qaXIAih/iMcMoW3BCPhI9UD0fk3Hm0e1Q1yGZyeemI=
Subject key identifier: 17:4C:2E:FD:BD:6C:90:F6:48:AE:D1:8E:82:AA:D1:7F:25:B3:3A:64
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 019CAEDA42E1B5C275DFBA5B444BA47E4A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:01:05 +0000
Manifest this update: Mon 02 Mar 2026 14:01:05 +0000
Manifest next update: Tue 03 Mar 2026 14:01:05 +0000
Files and hashes: 1: HwU_8edYuJ4rCmR5x6ykFn1t0do.roa (hash: 01KdeA2Gl7MQNNjhhKHuUHDnBDM56k334jcMgundfH4=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: ZMyyc6MTOZqvoZQq6EnbxIi11+XM2OiOb3o9IyMBF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:42:e1:b5:c2:75:df:ba:5b:44:4b:a4:7e:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: Mar 2 14:01:05 2026 GMT
Not After : Mar 3 14:01:05 2026 GMT
Subject: CN=174c2efdbd6c90f648aed18e82aad17f25b33a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:80:e6:2a:b9:1d:0c:4e:91:9b:1b:cc:2d:92:
e6:3c:da:63:3f:28:6e:0a:13:61:63:b5:33:f0:01:
93:bc:04:1e:6c:05:b5:9f:85:14:2b:fb:94:eb:13:
c8:55:79:80:df:be:7e:65:85:f5:c6:ce:12:8a:73:
2f:e5:13:40:80:6c:cc:86:f3:45:11:b6:ef:ca:c7:
13:b8:ef:db:0e:e9:e2:34:4e:77:c1:23:44:7b:a9:
28:cc:3e:d7:8b:94:42:bf:ea:41:b3:97:af:06:b5:
1b:92:6e:4a:40:06:a0:17:a8:4d:79:4d:dd:06:d5:
75:70:f2:c7:10:90:00:10:ad:fa:40:be:2f:5c:e8:
91:65:72:45:23:06:8a:b4:c7:05:0d:29:55:e5:2f:
d2:94:39:60:61:be:94:95:47:64:65:fe:48:db:e6:
11:dc:d3:41:45:61:91:81:c5:3d:59:48:5e:00:44:
e3:e8:13:0d:90:75:bf:58:78:4b:b6:23:80:9d:62:
9d:68:de:17:ac:28:66:cb:1e:71:c6:3b:27:0e:1a:
89:a8:f8:e9:39:6a:aa:72:a0:7c:6d:85:ec:0e:c7:
c4:66:c5:5f:b0:23:58:ba:0b:8c:f4:49:86:a1:b4:
36:8d:c1:9f:4d:b4:f9:ff:6e:98:d1:69:42:b4:8b:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:2E:FD:BD:6C:90:F6:48:AE:D1:8E:82:AA:D1:7F:25:B3:3A:64
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:96:b3:fc:ab:97:86:5d:52:45:37:64:69:b6:f8:b5:a4:
1d:bf:31:3d:de:19:eb:78:10:f3:dd:fb:da:29:3d:b2:2a:8b:
d7:ae:1c:e0:d8:d2:d9:31:63:38:2a:0b:53:03:c0:8c:1b:c3:
49:03:0b:6f:38:55:be:e7:a2:96:2c:0b:f0:3f:ef:4d:7a:7d:
d0:8a:21:4b:ea:68:64:26:0f:b5:a0:2a:d5:a2:b8:ef:70:6a:
4b:59:35:88:a3:d3:f9:ab:31:51:93:68:f1:1a:24:b3:44:be:
7a:18:d3:2c:74:21:0b:59:9e:12:ad:78:64:27:d0:23:59:47:
61:ff:82:8e:b3:bd:5c:be:15:d8:5d:59:2e:1d:59:5e:e0:75:
c8:84:5d:98:80:ba:bc:74:e7:2b:17:37:fe:78:18:de:fc:59:
51:10:35:f2:82:75:79:a3:50:5a:24:b5:4d:aa:9f:53:6a:12:
e8:1e:e1:7c:c6:bf:11:55:3d:87:11:cb:be:4d:cc:c9:bb:b9:
b4:11:9b:fd:66:1a:12:a2:a1:e5:01:eb:a1:94:a6:14:12:f8:
33:70:c9:d1:91:a5:32:52:5a:01:3f:33:f8:40:ee:ca:70:f4:
77:84:18:f6:c2:b3:66:23:e6:69:54:ff:13:c3:46:ec:27:af:
ee:b5:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:19 2026 by rpki-client