Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: gz2IvBVzzSFJNQlPqMJT9z7kjg9Uds5DAa9/0L0TXWs=
Subject key identifier: 03:DA:49:02:9B:96:41:61:5B:AB:13:AF:35:0B:4A:4D:71:CC:FD:AA
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 019D38D3211C2DA819DB81931E7518307AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 086D
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: vhFdDDg4qX2ttAcoGJ7kXNVImyVnLBqYxmuFRTvWPiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:21:1c:2d:a8:19:db:81:93:1e:75:18:30:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=03da49029b9641615bab13af350b4a4d71ccfdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:86:35:2a:cc:9e:be:09:00:99:5b:cd:91:
e2:ce:dd:23:c5:4b:d4:42:d0:25:fe:a5:71:e4:64:
de:d0:16:51:8e:3f:c8:72:40:3e:65:f4:1a:b5:88:
4a:26:85:01:03:92:6e:ea:10:f8:ea:59:4e:21:c5:
64:7c:3c:80:16:e5:f7:aa:0e:4d:67:1c:90:f6:fc:
ef:f3:67:0c:93:9c:5e:38:57:cb:30:73:0f:ae:4a:
9c:b0:9e:50:ec:f9:e0:70:c9:8c:9a:af:70:10:45:
e8:4f:91:29:9d:6c:3e:1e:8f:ca:57:79:44:c4:d2:
00:da:df:a6:40:3c:82:75:3b:dc:29:17:fe:93:ca:
c5:f6:37:37:80:7c:01:ca:d7:0a:63:a7:93:a8:c2:
82:98:97:de:b7:41:71:71:f5:c0:a1:82:b4:07:ff:
7c:f5:1d:cb:95:8d:f9:97:57:69:35:37:4b:34:26:
0d:2f:4d:7e:69:64:c4:9d:7b:fa:df:47:ab:59:ac:
50:dd:ef:57:4b:28:44:f7:ef:6d:10:72:2f:e1:ed:
59:5a:46:d4:d1:ce:81:eb:e5:5f:15:f5:d3:d2:bf:
55:b7:94:f7:bd:de:c4:74:c3:26:9b:a6:af:16:68:
d3:0f:29:12:e2:4c:80:70:5c:f5:51:da:54:21:6c:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:49:02:9B:96:41:61:5B:AB:13:AF:35:0B:4A:4D:71:CC:FD:AA
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:a8:f4:2d:19:a1:90:3d:ba:1b:9e:fb:6a:f3:88:d0:87:
1e:26:8f:bf:04:ec:05:3b:5d:eb:b7:34:5d:f9:32:e0:e9:37:
e7:08:5c:01:0a:3f:3b:13:1b:28:59:7a:ca:7f:82:4d:d4:be:
49:33:7d:93:15:e6:6b:d7:3d:98:40:93:ef:fb:45:aa:3a:78:
15:ea:80:aa:aa:cd:db:91:6c:6c:83:68:2d:09:43:bf:b3:d1:
31:99:28:e0:31:40:a2:91:d3:07:d9:63:2f:8b:db:ef:a2:7a:
79:c4:2d:c0:82:3b:da:46:9d:d8:8b:e0:ed:56:7a:66:32:ad:
ed:0a:bf:b6:9e:71:5a:1d:4f:b4:9b:f9:ed:0a:82:fc:3e:2b:
e9:fe:09:83:fa:09:89:37:fb:10:a5:8c:f7:04:28:3d:55:f0:
58:47:db:50:f6:09:45:a5:d4:d7:95:35:32:99:3c:21:57:16:
59:b0:b4:ef:78:ee:dc:1f:dd:74:42:90:5b:7f:15:4f:25:c2:
49:1c:9c:4f:30:f3:60:01:bc:fd:c4:05:29:7a:c1:ac:15:d6:
c6:f8:fd:f7:d8:a0:33:43:33:aa:61:33:b7:ee:4c:30:aa:2f:
9e:a8:b7:58:f0:74:c8:d9:aa:e0:6b:44:1f:4a:86:74:37:ed:
52:9f:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:52 2026 by rpki-client