Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: 2xM2SLXPUtTHBlCezKfYi7yDuQk9DXqlAFPMeetJDLM=
Subject key identifier: B8:19:A0:E9:26:ED:9B:63:90:56:FE:1D:75:17:13:A4:05:45:40:D0
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019CAA59136AC818159D35FC68804E54A1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:01:30 +0000
Manifest this update: Sun 01 Mar 2026 17:01:30 +0000
Manifest next update: Mon 02 Mar 2026 17:01:30 +0000
Files and hashes: 1: R9EYWDWbFyIowERkQv1v0JtSffs.roa (hash: UZd3m4a2szallkaOjNZ7VHm5NhVRaDO2lmc6VL9YvRg=)
2: X3fPlEcezz2LtewMmlGePOr2KHg.roa (hash: 5g36Sq2zpkP21Y5qWvGwR57g8qXOqKbe5sby4b2OVKE=)
3: ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa (hash: 43aIR8uvVvqvIYOmN9YnPWlwLHPz7ywPbdcbAEwBcvs=)
4: uYt3LwvbCynztKYkWZlfCwbeA9U.roa (hash: lkVlyA3OypIzfME9Kh6ROBp1XjLEdpw7ZJP7xjy2Vqw=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: DJpL5zLVGDKEAg840LNqq0Tr4dJz9w0meQBOAIltjKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:13:6a:c8:18:15:9d:35:fc:68:80:4e:54:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Mar 1 17:01:30 2026 GMT
Not After : Mar 2 17:01:30 2026 GMT
Subject: CN=b819a0e926ed9b639056fe1d751713a4054540d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:49:d6:49:f1:53:b4:77:cb:84:80:a3:9e:32:
e0:86:b5:4c:f6:c2:c3:3b:62:d4:63:ff:7a:1a:ac:
66:e6:54:2e:89:bd:96:81:99:9b:23:68:7c:22:4c:
f2:63:bd:d2:2c:27:ae:46:e7:fe:5f:d2:ab:da:92:
12:eb:12:e6:1e:53:3c:22:e7:8a:eb:66:c5:e1:cf:
29:4d:a3:7b:90:a5:da:da:05:71:ba:14:c2:7e:d1:
a7:da:e0:d1:57:ab:3b:78:02:8e:1f:99:29:1c:e2:
38:a6:aa:88:12:ce:e1:5e:d8:ef:a4:93:3c:b5:98:
97:c0:03:d9:81:a1:c1:ec:df:52:2f:e2:55:65:92:
ee:32:05:73:d5:83:b2:04:16:92:52:1e:20:b9:29:
9a:64:e3:2d:dc:46:8c:43:b3:a3:6c:a7:72:1c:a5:
0f:5a:1c:b1:47:13:66:d2:42:7d:86:15:0b:0e:16:
5a:20:b8:ab:c9:07:c3:c9:92:1c:10:37:76:e0:5f:
53:4f:06:19:88:35:90:b1:b2:0a:b1:df:68:db:6a:
73:03:64:fa:c5:6e:45:8b:4c:02:28:8d:9a:59:7f:
60:ca:77:84:dd:e9:d5:a7:4e:ab:9e:a0:c1:68:20:
8a:8e:01:1b:be:51:d6:c6:52:c2:27:c7:5b:90:0e:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:A0:E9:26:ED:9B:63:90:56:FE:1D:75:17:13:A4:05:45:40:D0
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:74:f0:78:50:aa:f6:4e:02:67:ab:36:b6:48:f3:64:82:97:
3b:df:fe:7b:ed:43:1e:ad:c6:a5:9a:e0:21:1b:47:b2:5b:90:
b3:94:6f:87:06:16:35:b5:e7:a8:02:70:34:c9:81:3c:94:e5:
0d:20:d4:1f:fb:ba:95:b7:85:5b:a9:b4:e5:7f:2f:e1:8a:bf:
0f:ce:68:8d:a9:e6:c4:5f:c0:3a:36:af:c4:48:a9:90:f5:a1:
06:12:1f:d3:7a:65:90:4d:a2:fc:eb:a6:99:6b:31:22:c7:72:
18:4d:bb:f6:bb:03:ce:10:7b:11:d1:a9:77:21:c7:20:43:84:
cb:dd:14:cb:7a:93:8f:18:89:bc:25:d7:e6:e9:88:1c:e9:d9:
95:78:51:74:47:42:f3:64:4f:ba:02:fc:f9:ab:ea:33:d0:6b:
cc:22:90:b3:f0:d2:97:3d:9e:40:80:60:85:0c:c9:d7:cc:ef:
0a:b5:23:d5:0f:fe:a7:ce:e4:f8:5d:6e:25:c1:e6:ae:84:1f:
5a:3c:ba:81:e5:dc:d1:e5:99:36:78:fb:31:30:95:7d:bf:fe:
d7:d0:d4:8c:40:07:a2:44:95:e9:03:e3:6a:03:b7:db:3e:72:
08:b6:2b:dc:f8:97:52:9f:63:b6:5a:c1:bc:a5:ef:d5:e0:55:
8d:bf:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:14 2026 by rpki-client