Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json)
Hash identifier: SrD1EevYLACZUF1XhntI2VWK0jPQwCVXnvWfmf6gydo=
Subject key identifier: 67:40:79:4B:1F:53:C0:68:8D:55:74:B3:4D:5E:B5:EF:C7:BE:FE:8B
Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Certificate serial: 019CAD597504DF3003B1AA47AF154F783A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
Manifest number: 70
Signing time: Mon 02 Mar 2026 07:00:46 +0000
Manifest this update: Mon 02 Mar 2026 07:00:46 +0000
Manifest next update: Tue 03 Mar 2026 07:00:46 +0000
Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=)
2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: c+R3TXwZSRLmVYY5qDvGFhoesDv1jl4FbxxRl+/G5Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:75:04:df:30:03:b1:aa:47:af:15:4f:78:3a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1
Validity
Not Before: Mar 2 07:00:46 2026 GMT
Not After : Mar 3 07:00:46 2026 GMT
Subject: CN=6740794b1f53c0688d5574b34d5eb5efc7befe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:df:0c:42:c5:8e:31:63:5a:4a:b8:0b:79:
53:4d:26:f3:8e:a0:7c:26:1b:5b:5f:aa:d3:73:c2:
c8:d3:27:82:96:4c:a5:9c:06:33:6b:f7:ae:b4:7c:
bd:b1:8d:a1:05:b4:a4:66:74:1d:0c:0d:6c:b3:f7:
70:1b:04:26:3e:f3:b2:2a:66:ab:04:b5:e6:04:db:
04:68:2f:40:50:2e:f3:c1:db:f6:b1:83:70:45:46:
8e:0a:38:21:f4:dc:2e:ac:01:28:1a:8d:b8:4f:3c:
e3:81:90:ac:86:c4:f8:66:8f:5d:0a:05:d5:76:55:
bf:61:51:48:ca:a2:f3:81:ed:53:ae:e5:f9:cf:ba:
4c:a7:30:e9:63:29:6a:60:99:82:62:e8:ec:e0:1c:
16:d1:ea:f5:3a:6e:a4:e9:d2:a4:d9:00:b9:6d:be:
20:88:22:11:6c:51:53:88:20:bd:7c:11:e2:90:01:
25:ce:c2:ff:0a:f7:79:1e:28:86:53:0a:e8:b1:5e:
e4:85:dd:17:23:50:7e:3e:fa:fa:54:58:62:e7:bd:
1a:54:57:de:53:19:1b:0f:6c:1e:e7:5d:9d:59:e5:
28:1c:47:4c:3b:28:7c:0b:c6:4d:ca:b7:4e:74:48:
3b:e2:5b:f3:f0:f5:d4:b5:7e:32:ff:2f:9c:99:7e:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:79:4B:1F:53:C0:68:8D:55:74:B3:4D:5E:B5:EF:C7:BE:FE:8B
X509v3 Authority Key Identifier:
keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8b:b3:6e:4d:0d:da:8e:1a:59:6d:61:09:07:72:e6:ec:6d:
e5:49:83:16:cb:40:7b:46:a2:b8:a9:54:00:02:97:a4:9b:6a:
cd:4a:a9:ab:f3:5a:24:b9:68:ee:b2:9f:5f:5e:43:fd:7e:40:
ac:99:09:bd:02:60:51:cc:c2:80:9a:d9:fe:87:04:77:81:3b:
fb:cf:43:fe:9c:6d:3c:ca:7d:24:9a:66:7a:be:ac:4f:7e:20:
10:a9:48:6e:9d:ee:68:44:89:b1:3b:da:87:f1:9e:6f:04:17:
71:1c:3f:23:70:58:31:29:a4:39:11:50:f6:80:54:85:ec:47:
24:0a:2f:2b:5a:5c:8f:38:f4:96:48:3f:68:46:fb:ac:40:b4:
89:1b:92:09:90:af:a2:b0:15:dd:30:09:99:2d:73:03:32:6c:
9a:ca:99:66:de:af:aa:b1:14:12:ec:e0:3a:07:6f:ed:06:3e:
29:40:f9:db:0c:ba:52:ae:5d:87:01:46:84:cb:17:ac:fd:0f:
aa:86:72:62:1a:78:d3:74:60:2d:2f:37:12:cc:87:62:c9:34:
0b:2e:ca:0c:20:21:7f:8f:24:3f:ab:f5:c6:ff:fd:30:c7:60:
3f:3a:c9:33:30:71:4f:25:b2:93:99:66:e5:57:e2:51:a9:75:
9d:e7:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:38 2026 by rpki-client