Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: uJxGAQ/M7GFK3s8UwzSGcsBqkQOg0Yd5PXQnd3Jsdqk=
Subject key identifier: BC:2A:50:23:E2:3E:E8:C6:FA:ED:0A:30:82:9D:81:77:50:23:52:20
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 019CE55B3CBD9252C75023A5F39154B3C5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 1080
Signing time: Fri 13 Mar 2026 04:01:27 +0000
Manifest this update: Fri 13 Mar 2026 04:01:27 +0000
Manifest next update: Sat 14 Mar 2026 04:01:27 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: HK1WH8Tlz4tICUVOLHcm7eVnromJjNtSnfqA9QguzDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:3c:bd:92:52:c7:50:23:a5:f3:91:54:b3:c5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Mar 13 04:01:27 2026 GMT
Not After : Mar 14 04:01:27 2026 GMT
Subject: CN=bc2a5023e23ee8c6faed0a30829d817750235220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:82:62:05:f1:2c:99:34:cf:22:cc:a6:78:
72:6c:25:36:d6:75:41:85:5a:99:a5:9e:03:38:9e:
38:ae:45:1c:62:09:0e:e6:04:7e:7e:c4:10:5d:c8:
34:38:16:a3:99:97:b4:93:dc:5e:d0:e2:22:ba:91:
7c:c2:10:22:0a:79:90:24:83:75:0e:83:1b:e5:0e:
63:e8:e9:ac:2c:5f:1f:61:1a:95:a6:96:2b:f9:e3:
40:95:20:91:91:b6:b9:22:34:2b:ea:9e:e6:77:19:
e6:ac:8e:79:7a:db:0b:69:a6:b4:57:91:5c:87:2a:
92:c9:41:f8:52:19:e7:83:16:e3:62:a6:15:af:f3:
01:c0:fd:36:a1:d7:34:53:ff:a9:93:e2:2e:77:2a:
5e:cb:3c:f3:67:73:a8:13:c0:be:fc:a6:93:67:6e:
f2:b0:54:6e:71:b8:71:5a:81:90:88:41:f8:6c:39:
9a:2c:03:ba:93:ac:72:f9:a0:35:54:76:6d:b1:94:
50:e9:af:f5:f9:90:c9:aa:45:70:7b:ce:9e:cf:25:
28:98:13:a1:96:d9:1b:53:e4:a1:80:ee:6c:9c:c7:
48:6d:ba:22:25:d3:1a:8a:3b:c8:a6:46:ce:6c:05:
ca:9d:7e:e1:19:8e:ff:12:38:aa:c2:60:cc:9c:4b:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:50:23:E2:3E:E8:C6:FA:ED:0A:30:82:9D:81:77:50:23:52:20
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:05:52:a6:66:b9:1a:e5:91:45:bc:2d:5d:3d:21:99:72:5e:
b0:72:86:69:36:9a:b0:d9:fe:68:0d:79:76:77:01:a4:f4:23:
da:76:99:9e:db:3a:d7:a8:05:83:11:bc:7e:af:a0:e5:bd:f1:
9f:02:20:01:e6:6f:1d:4c:77:47:85:a4:9d:c6:d8:0d:2a:c4:
15:29:f0:38:49:ad:71:c9:ce:db:b8:15:7d:92:0b:5b:56:16:
6f:30:2e:5e:d9:a8:1c:2f:fd:8e:b3:c8:74:d2:02:f4:c8:02:
2c:f9:a2:1b:a2:aa:63:cd:4d:ab:c1:cf:90:fc:e8:c2:a9:95:
a6:32:01:c0:e7:2a:e5:74:26:b5:50:06:fe:ef:9d:72:e6:f0:
b4:b7:ef:70:e0:f2:bd:7f:e9:f4:cb:e7:d9:4b:04:52:0d:76:
97:f8:c5:01:f1:bf:4a:ed:a2:af:f1:93:75:ee:e9:67:66:a8:
9c:d9:34:cf:ae:28:45:82:ce:8d:ab:4f:49:92:a8:b7:13:0c:
23:96:a6:9a:c0:ed:0e:73:72:44:f3:76:98:33:03:36:34:40:
00:05:03:23:c9:b0:68:f7:07:cc:68:60:55:6e:76:ba:83:61:
00:ba:14:43:68:70:6f:13:9e:15:58:9d:eb:ee:79:ba:76:2d:
33:99:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:23:43 2026 by rpki-client