Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: fF4hf7CTZm/gmDOopirKASnV2WcrrJq8Lax+NQKvMN4=
Subject key identifier: 27:E8:5B:13:06:BA:FB:36:50:01:ED:8D:F8:8E:96:C1:6C:DF:1F:DC
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 019EB8B4965D6FD6525980E5CABFAC14F2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 1417
Signing time: Thu 11 Jun 2026 22:01:43 +0000
Manifest this update: Thu 11 Jun 2026 22:01:43 +0000
Manifest next update: Fri 12 Jun 2026 22:01:43 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: f8X2Ivmr5kFdvGYxzBadR81CK5wU6YeZjgEb6CqT7Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:96:5d:6f:d6:52:59:80:e5:ca:bf:ac:14:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Jun 11 22:01:43 2026 GMT
Not After : Jun 12 22:01:43 2026 GMT
Subject: CN=27e85b1306bafb365001ed8df88e96c16cdf1fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:00:98:2a:ab:80:38:28:fd:9c:28:76:33:
73:c2:42:0b:14:88:8d:66:7d:67:08:66:f9:14:7f:
18:7e:ee:03:ea:10:d4:a4:1f:14:5f:50:67:e6:25:
a6:62:1d:01:5a:ff:7e:92:a3:d7:65:9f:5f:a5:e3:
89:8b:8f:ae:3c:68:96:2d:07:95:86:31:be:29:73:
e7:81:35:3e:24:06:50:31:34:da:3e:39:d0:2d:ed:
d0:34:b9:e3:fa:c3:56:b5:57:11:af:89:29:35:6c:
6e:53:1d:28:32:3d:d3:b3:61:db:a7:93:26:71:45:
a0:67:42:6e:5b:c7:ad:06:db:c8:51:ee:7d:69:1b:
81:db:1a:8d:b4:7a:21:3a:b0:64:40:0c:f3:b1:12:
03:28:a9:5c:e4:bc:9a:95:c5:50:b3:2b:a4:e1:b4:
f1:48:74:f2:7f:07:90:98:52:2f:ad:59:bc:0f:25:
c8:a3:ff:66:2d:87:57:92:93:62:a7:fa:60:dc:62:
9b:0d:18:1d:24:0f:00:6c:b4:42:32:21:fc:a9:a7:
63:94:3b:3c:39:51:33:72:4e:39:9c:73:21:39:5f:
8d:a5:40:ca:84:7a:33:9d:f9:21:83:ab:a3:66:cf:
81:90:e1:82:3e:ce:f3:24:7a:b8:fd:fe:8e:25:96:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E8:5B:13:06:BA:FB:36:50:01:ED:8D:F8:8E:96:C1:6C:DF:1F:DC
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ed:30:2d:e1:61:22:f1:2c:4e:21:dd:6c:e0:fb:94:46:8b:
6e:40:c9:5a:ed:fd:e1:66:48:09:22:79:13:88:40:87:53:49:
f5:ee:dd:e8:82:79:d7:0a:08:9d:bc:fe:3e:19:56:21:0b:cb:
54:f5:7d:92:89:a9:9a:b2:0c:28:ea:21:72:80:f3:14:3d:ad:
bc:3c:66:49:4c:e4:d2:1e:0c:ff:82:28:12:f4:1f:6f:d9:f1:
79:19:c3:0b:e1:28:8c:ec:9d:d5:04:a6:92:ed:48:37:c0:87:
c9:fa:95:e4:d1:7f:f3:8d:3e:cc:ae:00:87:5f:0d:32:fa:90:
3b:85:64:3b:a2:32:28:f6:e7:82:4b:81:1e:cd:8d:5c:7c:94:
47:9f:58:ec:4f:ec:71:6f:3a:ea:11:d1:b3:0d:4c:45:f5:5d:
14:a4:b1:9f:57:54:1c:19:3a:39:f2:a3:b6:34:0c:7c:23:41:
34:02:d5:04:82:c4:32:d3:07:60:61:c7:13:fc:1a:e6:d3:79:
ab:44:37:78:d6:8c:4a:e3:9f:3a:b2:cb:b4:07:69:af:0d:dd:
89:2f:f0:2a:80:6b:a6:73:0c:0c:5c:46:5a:b9:3c:e0:3d:a3:
c7:7d:40:e8:75:fd:26:d4:8c:bd:6c:43:12:d2:ff:a9:13:1a:
69:b2:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:15 2026 by rpki-client