Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: mQsDTDw8N1B9r/Kmo4sOWmxUEdKtFX30aJiRGwmhZQk=
Subject key identifier: FB:30:61:89:1A:B9:D3:9A:40:85:04:7B:EE:28:53:1D:B3:9C:3D:A0
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019D99D0A2826C3643A650032ECFDD3E0D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: R9EYWDWbFyIowERkQv1v0JtSffs.roa (hash: UZd3m4a2szallkaOjNZ7VHm5NhVRaDO2lmc6VL9YvRg=)
2: X3fPlEcezz2LtewMmlGePOr2KHg.roa (hash: 5g36Sq2zpkP21Y5qWvGwR57g8qXOqKbe5sby4b2OVKE=)
3: ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa (hash: 43aIR8uvVvqvIYOmN9YnPWlwLHPz7ywPbdcbAEwBcvs=)
4: uYt3LwvbCynztKYkWZlfCwbeA9U.roa (hash: lkVlyA3OypIzfME9Kh6ROBp1XjLEdpw7ZJP7xjy2Vqw=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: mNR0Cx/5CXEzmRKCJblLhUSTe+2/8g94N0Ek+1THykE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a2:82:6c:36:43:a6:50:03:2e:cf:dd:3e:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=fb3061891ab9d39a4085047bee28531db39c3da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:64:2d:9d:d1:d9:c9:8f:af:7d:b2:9d:01:
2d:27:aa:c6:12:9b:ef:aa:ca:7e:00:22:17:91:ac:
2c:1c:ab:4f:c8:d3:23:49:31:a9:a5:1a:3e:83:57:
ed:6b:05:f9:3f:32:d7:ef:b3:83:22:04:28:64:8c:
f2:34:cd:c2:e5:dd:5f:94:d7:a7:b5:ee:30:c4:26:
78:07:9c:2c:cf:9c:12:2c:52:7b:16:57:c7:05:81:
76:ab:51:2d:80:22:12:36:03:f5:b6:15:12:c9:b3:
14:6e:05:62:69:f0:81:1b:a7:b9:c7:d2:6b:e5:28:
b0:fd:f1:02:f4:9a:7c:d4:dd:10:43:05:6d:61:87:
e0:93:65:56:34:ef:fd:5c:4a:a0:52:1d:2b:6d:2b:
89:8f:4d:13:09:a9:dc:0b:d4:2e:0c:8c:57:f2:ab:
1b:17:4d:a1:36:d4:14:77:bd:c9:04:fc:0b:92:93:
3b:41:89:96:13:06:a0:8f:3f:90:b2:3b:ac:48:e4:
87:44:06:d4:4c:bb:f9:6c:20:39:46:e0:ba:dc:18:
bf:3a:a3:cf:ac:54:fc:ff:2c:cf:a6:3b:32:1e:b5:
d6:0c:eb:80:9d:94:8d:b1:f2:31:0b:25:a3:cb:4d:
94:d7:2c:d4:83:b3:91:07:44:d4:98:67:9d:cd:a9:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:61:89:1A:B9:D3:9A:40:85:04:7B:EE:28:53:1D:B3:9C:3D:A0
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5a:f0:a6:46:c1:1b:d3:d3:cf:07:1a:b9:02:3d:79:7d:06:
46:08:03:e2:0c:ea:17:53:5c:39:0b:c1:b6:97:1b:43:d4:cf:
34:55:5f:5a:b3:64:0f:6e:78:62:d2:b2:3d:f9:69:30:dd:c9:
07:b6:96:7e:a0:1d:29:be:df:92:5d:7e:40:94:73:dd:ae:7c:
81:b8:7f:1c:51:29:64:a4:94:0a:2c:d0:d3:57:b6:73:62:18:
4f:4b:cf:f3:bc:0e:93:63:57:f7:12:a8:bd:30:c9:28:7f:7e:
78:31:d4:df:9d:ee:65:94:7d:8f:df:d5:7f:8f:e7:af:08:25:
d6:4b:0c:7b:15:0b:97:4d:48:06:3f:e7:e9:89:2d:20:c3:71:
98:f8:a4:0e:db:f8:95:e3:6c:06:03:fb:c7:e5:a0:95:31:59:
5d:2a:65:fc:fc:43:3d:23:fa:02:55:bd:92:b9:00:82:a8:fa:
d8:7c:6f:33:c3:9f:08:91:ad:6e:54:4c:30:c7:1b:9b:b2:4b:
f9:e5:75:cf:01:65:f8:77:e3:2d:61:19:e4:dc:67:1b:db:db:
f6:0b:6f:f2:49:11:42:89:75:9e:35:af:3a:83:d3:09:e2:fd:
2b:4d:a5:d6:ce:a8:30:a6:e0:1b:ca:79:5a:9d:09:65:b0:44:
80:a9:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:16 2026 by rpki-client