Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: o6lDSudEmXhXGjR+e8QGDzieoEWnW2yluji5HG4T9xI=
Subject key identifier: 73:5C:58:EF:EB:E0:EE:75:39:D4:50:EA:8B:72:02:A1:85:B1:A9:DF
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 01A0D94D17357AAC1625354BEC4D41737C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 0299
Signing time: Fri 25 Sep 2026 16:01:43 +0000
Manifest this update: Fri 25 Sep 2026 16:01:43 +0000
Manifest next update: Sat 26 Sep 2026 16:01:43 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: mWrL1vTxOMs9+RtA7Gqy0T310Z+7QAWDlxrVUn9xj5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:17:35:7a:ac:16:25:35:4b:ec:4d:41:73:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Sep 25 16:01:43 2026 GMT
Not After : Sep 26 16:01:43 2026 GMT
Subject: CN=735c58efebe0ee7539d450ea8b7202a185b1a9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:88:c6:d7:13:78:45:49:25:73:b8:45:fd:
96:bc:7e:3a:fb:cd:a6:34:a2:bb:84:65:a3:8a:c9:
a2:af:1d:99:c7:a1:08:84:aa:6d:87:cd:d7:2f:49:
87:20:7e:f8:ec:d6:40:74:9b:19:c9:06:1c:00:e0:
70:6a:45:ee:a9:39:f6:b0:c2:32:92:0c:fc:73:69:
6a:74:05:b3:3c:07:fb:b6:60:b3:4d:6f:de:9f:71:
14:e9:87:1f:66:8d:24:35:2f:f7:dc:0e:02:12:86:
af:d6:c5:84:6d:9d:99:fc:2c:2f:a7:dc:dc:05:fe:
37:b9:67:be:99:4b:e4:36:83:e2:32:b1:3d:6b:5a:
d9:3d:41:69:5d:7d:d2:27:ed:00:c1:df:86:b4:69:
14:6e:14:9b:83:98:c2:b8:2c:cc:c5:74:81:1c:f7:
ee:cb:8a:75:fb:c5:d0:1e:f2:78:d4:36:82:92:ca:
e5:a5:57:74:38:34:b0:c7:04:b8:68:74:24:12:f3:
d3:4b:d3:c6:4b:0f:80:71:fa:df:b8:4f:07:77:7f:
34:74:11:41:dd:37:05:60:22:03:65:ac:bf:30:27:
29:84:d5:07:cc:99:44:fd:79:fc:62:36:2f:80:d4:
90:1d:d2:6d:95:5f:d9:52:c6:f0:d7:f4:86:bb:19:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:58:EF:EB:E0:EE:75:39:D4:50:EA:8B:72:02:A1:85:B1:A9:DF
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:40:75:7b:4d:3f:f5:e0:df:a3:ae:33:ed:a8:69:82:ab:
0a:02:3f:1a:74:f8:6b:94:2a:fc:cd:eb:a4:59:02:b2:41:ec:
4b:98:bb:de:4c:36:9b:f8:46:e1:0f:18:d6:ec:7b:79:ec:23:
df:2b:28:bc:48:e0:51:d5:7f:7e:67:41:18:03:d6:84:4a:52:
1b:2a:57:b2:3b:0f:4b:8d:72:8c:75:b9:0b:f0:2f:10:e7:cf:
44:c9:d3:19:41:c8:26:4a:55:19:3f:95:94:67:17:c9:5e:aa:
45:be:fc:ba:01:24:8e:a9:65:f4:0d:ad:2f:0e:1b:f4:6c:a2:
61:c3:5d:13:30:a3:2f:49:e0:a2:21:13:9e:60:75:4d:82:72:
41:fd:34:64:cb:25:58:4d:78:1a:10:0c:b7:0f:11:b8:71:b0:
f3:98:0b:80:ad:e0:c5:3f:ae:91:bb:b8:0a:6f:e4:27:0b:78:
59:3c:c6:d5:a9:de:a0:bb:b6:c3:28:5e:8a:6e:7d:31:0f:ca:
0f:ed:39:6f:37:00:53:fa:28:e9:02:a2:6e:3d:03:c7:4e:fb:
5d:20:f8:41:7c:80:9e:50:ed:2f:12:8a:a1:cf:ab:2c:2d:33:
9c:fa:3d:f8:db:fd:e9:c3:94:9a:a3:04:65:3d:39:03:d7:03:
52:e6:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:50:45 2026 by rpki-client