Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier: mDOWzJmKbRf2/3glyJKHRiJLTiXjE1Nr3UYFpzo8EEE=
Subject key identifier: 39:DB:E1:EB:6E:E4:AA:D0:A4:90:01:0D:25:BD:03:A1:1F:54:F4:85
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial: 019CACB4EABE4545D61310BC00312B2BBA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number: 13D3
Signing time: Mon 02 Mar 2026 04:01:03 +0000
Manifest this update: Mon 02 Mar 2026 04:01:03 +0000
Manifest next update: Tue 03 Mar 2026 04:01:03 +0000
Files and hashes: 1: HJJKjlD8w6pwUXxhSyRU-4S7rcs.roa (hash: ijFhOfJ/0CwOhPEkrD+B1c1Juz952plWRqWilLY1GJ0=)
2: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: Dt+yxQWGSJ8S+Wvfp2pwR0Ba7Lwgh9IH4VH/WsnYWpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ea:be:45:45:d6:13:10:bc:00:31:2b:2b:ba:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Validity
Not Before: Mar 2 04:01:03 2026 GMT
Not After : Mar 3 04:01:03 2026 GMT
Subject: CN=39dbe1eb6ee4aad0a490010d25bd03a11f54f485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:d3:e8:af:c8:5b:a8:90:2a:93:40:34:7e:
eb:e5:61:61:bb:2c:92:55:94:cc:f0:df:1f:b8:4e:
1b:d6:3f:62:1b:20:a7:08:cb:dd:42:72:25:01:20:
6b:29:e5:58:b0:9f:d4:50:22:36:28:88:1a:f3:bd:
05:31:f0:6e:eb:b1:0c:18:94:11:8c:c4:ba:58:ab:
6e:e5:6a:c6:31:22:95:1f:59:ea:92:8a:32:b8:f5:
44:42:24:bb:50:ad:30:7e:3d:12:4d:52:e4:34:c8:
b3:6b:4f:8d:71:f3:ff:3e:5b:75:2e:e7:09:04:8d:
e4:ab:9b:76:70:27:57:b7:19:69:50:79:ac:2b:61:
9e:a5:5f:ad:a9:a3:9c:be:5e:5f:50:ee:46:8d:65:
0f:33:cd:93:1f:ba:1a:a2:ae:81:e0:82:24:70:0f:
06:cb:9a:04:a3:d3:c1:58:e0:84:21:71:69:ba:a7:
8f:32:b6:0e:ad:5a:e5:8a:19:35:87:15:66:17:d8:
c0:61:29:73:83:dc:bf:73:74:b7:9f:95:3c:e0:22:
76:26:b4:09:cd:f4:4b:13:00:56:91:38:92:47:e9:
40:24:d7:05:34:9f:51:9b:d2:ca:1a:ae:78:6e:47:
37:20:17:ba:6d:dc:33:6f:86:0d:df:a5:42:dd:af:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:E1:EB:6E:E4:AA:D0:A4:90:01:0D:25:BD:03:A1:1F:54:F4:85
X509v3 Authority Key Identifier:
keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:48:c4:bb:4e:24:d1:7b:89:db:fe:49:dd:11:82:84:28:
8c:fe:fc:e1:eb:f0:e1:5d:92:47:c5:93:c4:e3:bf:64:65:b0:
a7:7b:ca:a3:05:40:d7:3d:2c:e4:91:c7:75:4e:0e:fb:6e:11:
86:ec:34:d7:e0:dd:b1:1e:1e:4f:1d:89:e3:12:1d:6f:d8:16:
2a:1c:b0:17:80:7c:56:26:53:fb:9c:a2:ca:a1:85:bc:da:66:
36:67:33:57:a9:1f:30:90:4f:f6:1e:3d:03:b8:ba:0d:18:d1:
cf:51:cd:c6:82:83:f6:88:9e:82:6d:b7:fe:ee:9b:c8:15:3e:
b6:82:aa:ec:7e:49:30:7e:38:ff:48:8c:3f:dd:92:33:f3:ad:
03:0b:e4:7b:09:b0:15:06:f0:4e:de:7e:d9:49:cd:3e:b2:91:
b2:44:e5:6e:49:57:df:83:0c:89:96:38:00:8f:d2:07:8e:8f:
b6:ed:ff:f4:7f:04:a3:3f:57:e1:37:29:dc:0f:7d:5d:1f:81:
7a:a9:3b:d0:d3:d1:b5:78:b3:7c:35:c6:be:9b:fa:4a:3d:8e:
20:1e:55:9f:8d:65:31:a5:3b:14:04:84:22:dc:5d:69:64:52:
4a:39:e8:c6:65:fc:3e:d2:c0:9a:51:3e:ca:0f:45:26:d5:94:
5c:96:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:32 2026 by rpki-client