Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: MAG4rH11O4mUqsxPE+9cJVCTRV2vftr2ibjofmxv+tg=
Subject key identifier: 4E:B4:A6:CA:88:12:89:E5:B4:FB:AC:6D:FD:7B:9D:F1:F5:BF:F7:E4
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 01A17D72F04F69EB748753F0ED683CEBA58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 12E1
Signing time: Tue 27 Oct 2026 13:00:46 +0000
Manifest this update: Tue 27 Oct 2026 13:00:46 +0000
Manifest next update: Wed 28 Oct 2026 13:00:46 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: brTh25wjXSDYKCtbNbx1bmM9x4NLsG4LVAYcg/7obxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:72:f0:4f:69:eb:74:87:53:f0:ed:68:3c:eb:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Oct 27 13:00:46 2026 GMT
Not After : Oct 28 13:00:46 2026 GMT
Subject: CN=4eb4a6ca881289e5b4fbac6dfd7b9df1f5bff7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:d0:0d:db:37:70:9e:41:57:10:37:e0:4a:
5e:22:d3:c0:a8:d7:ec:24:8c:96:d2:1c:47:ce:87:
e2:46:64:1e:90:ca:e9:46:2b:78:e0:3c:5c:3f:9c:
87:a5:a0:53:d6:ad:2a:c9:d2:48:10:76:cf:7e:6a:
8e:14:be:45:9a:2d:a9:cf:37:e4:35:6a:5b:ea:00:
33:73:fe:64:d1:da:81:33:1c:af:42:76:8f:50:fd:
3a:b6:a2:e4:7f:b8:9f:7c:de:6d:b9:c1:c1:bf:0f:
1a:35:c9:a7:57:06:98:0a:37:1a:bf:2d:31:b2:6d:
83:d9:37:de:56:78:d0:98:77:28:62:7b:76:b5:f4:
32:45:43:68:02:ea:b6:46:b5:a4:98:ff:c1:5e:2d:
7f:78:bc:b1:3d:09:12:52:a3:81:45:fc:1a:10:1e:
0d:b8:71:dd:83:23:ee:ab:9d:6a:c9:83:38:da:18:
f6:e6:2b:29:73:6c:ce:85:3e:d7:93:e4:d3:33:a8:
15:5e:b7:36:16:3f:21:b1:20:bd:51:c1:1e:b1:a1:
5c:cf:63:7e:c7:1c:a7:37:cd:89:75:05:94:81:81:
d4:4e:ce:1c:a9:1c:e2:ee:b3:0a:b5:74:9a:1c:dd:
6e:7d:74:8b:37:34:d0:86:6a:d3:ba:e2:39:ee:64:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:A6:CA:88:12:89:E5:B4:FB:AC:6D:FD:7B:9D:F1:F5:BF:F7:E4
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:29:8a:8f:f3:3b:0d:09:df:ef:be:16:db:1d:9d:41:50:63:
5e:8a:70:39:24:ab:6b:cc:93:d8:82:22:14:db:ec:df:1f:d1:
94:6a:9e:70:39:40:e8:b0:85:83:24:42:f8:62:6d:eb:1d:e2:
5b:5b:9d:05:fd:eb:4c:1c:95:d8:64:f1:a8:22:7d:9c:3b:d7:
79:2c:d8:d3:ea:b5:4f:da:b8:b9:75:5b:b1:5f:35:c7:61:6e:
5f:0b:60:e9:f3:61:f2:f3:06:10:b5:13:a3:96:df:05:bc:c6:
b3:25:e6:77:d1:c7:85:85:ab:ae:2c:c3:1f:b6:3e:e9:68:82:
33:df:87:93:fe:db:a5:e5:9c:6e:d6:93:f9:44:4c:97:e2:8b:
6a:f4:0b:67:0d:9e:d2:bb:32:0d:9d:f5:eb:4c:53:91:34:4b:
3c:ae:e0:63:f0:da:b1:42:b0:0d:fc:d2:bc:04:1f:08:af:de:
4f:f8:a8:fa:00:fe:6d:f1:1f:81:b3:9f:0e:24:56:c4:19:26:
11:04:ea:31:3e:9b:1f:11:30:93:d8:d9:c9:8f:2c:4a:2b:4f:
c7:66:75:ac:75:be:0a:aa:a6:81:33:f3:a4:bd:6d:20:df:e1:
55:92:db:d6:af:d0:61:28:26:c7:11:92:1f:e4:2c:bb:70:be:
3f:06:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:22:08 2026 by rpki-client