Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: WgVCvuFOQ5b4lHDFnc5inNic3LEeRcNX1j4QEwPQ14Q=
Subject key identifier: C6:BD:F9:95:CA:E3:FF:B9:55:89:A0:FE:E7:C3:8F:41:1B:77:B4:B6
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 019D3865912E07F351AECD22AAE5D3A74110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 1350
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: JmhNTL0BqBgrXCCXnv0WQGmAJQgffQSVSbt3R2Dbuh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:91:2e:07:f3:51:ae:cd:22:aa:e5:d3:a7:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=c6bdf995cae3ffb95589a0fee7c38f411b77b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:fa:44:90:23:5e:ec:23:4a:11:4e:c4:34:
2c:ce:1a:23:8c:84:c9:e0:3e:4c:e9:d5:42:70:d4:
aa:e3:c3:84:2a:16:60:84:72:7d:66:e4:6d:61:2b:
a5:15:11:fc:4e:6e:fa:30:da:11:c7:ee:24:4a:8c:
45:f7:3c:32:01:a0:c8:c6:c8:1d:eb:3b:6a:4c:01:
87:0c:67:f9:4a:86:72:5e:ee:de:c5:cd:47:f6:72:
c6:58:68:a9:e2:37:f4:38:59:ee:8b:c9:fc:3a:af:
8f:cf:2f:53:f7:26:e1:d1:4b:af:34:f2:a8:2b:52:
33:36:f0:7b:2b:44:99:bc:43:77:d6:11:2f:6d:cf:
4e:30:75:d8:ee:22:91:eb:d6:ed:a8:28:fc:d3:9b:
98:03:9b:34:ac:f3:10:10:0c:eb:ab:2c:f0:21:62:
88:63:0d:df:5c:f7:58:d0:5d:be:72:7e:11:2d:c6:
44:aa:64:8e:ee:ce:5f:3f:fc:37:5a:c2:92:40:61:
ef:68:91:d7:bb:9f:fb:75:53:bb:92:ab:b6:2e:d0:
1b:d7:53:39:fe:d6:e0:ef:bd:2c:93:07:e7:49:f7:
e4:25:70:c1:96:9f:d6:8b:af:76:f0:13:09:ce:79:
ef:7e:a5:68:80:75:a3:33:e0:c3:60:01:67:70:e7:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:F9:95:CA:E3:FF:B9:55:89:A0:FE:E7:C3:8F:41:1B:77:B4:B6
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f9:9f:66:e9:38:65:69:5b:66:e1:da:e1:0f:36:22:ca:77:
b4:44:aa:f1:ee:4b:00:05:4f:5d:9a:67:63:49:03:11:88:ee:
2e:8c:b4:e2:5c:db:4b:5d:12:1f:9b:cc:cf:d5:fd:a4:c3:a0:
01:80:a4:8c:4f:90:b6:a5:64:ff:3d:4b:b1:cc:08:74:95:cc:
cb:e3:d3:a8:6d:73:5b:26:03:a4:d0:83:b3:6d:28:78:7a:03:
ff:8a:4d:63:15:e9:35:06:74:6a:64:1c:e0:7a:04:b9:2a:38:
17:62:6b:78:f5:1d:ee:f1:c6:da:76:73:6d:a6:e9:2f:96:13:
c1:b0:0a:a3:40:13:af:06:f6:8f:2f:63:41:6c:b9:91:ac:43:
4f:57:1e:2b:a2:4f:e0:13:17:da:f1:83:8d:b2:c8:6c:c5:62:
ce:2a:be:1b:36:91:e9:fb:c8:85:7c:a0:23:73:f0:39:ec:e6:
95:93:dc:78:54:0e:bb:b3:e7:8b:44:85:23:99:e5:cc:25:9b:
85:6d:34:fd:b7:cc:f7:24:61:9d:07:c1:3d:ef:6c:07:69:77:
fb:af:1d:3f:87:18:51:99:ea:b5:70:8c:7d:6e:08:62:6e:8a:
2c:92:9b:77:e9:22:f6:08:bf:5e:19:2f:cc:ca:47:15:2b:fe:
8e:79:0b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZEuB/NRrs0iquXTp0EQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDFiOTNhYzNkYTY0ZWIzNzY4NWQ3ZWFhMTlhYWI3NGMy
MzdmMzcwHhcNMjYwMzI5MDcwMTEzWhcNMjYwMzMwMDcwMTEzWjAzMTEwLwYDVQQD
EyhjNmJkZjk5NWNhZTNmZmI5NTU4OWEwZmVlN2MzOGY0MTFiNzdiNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunD6RJAjXuwjShFOxDQszhojjITJ
4D5M6dVCcNSq48OEKhZghHJ9ZuRtYSulFRH8Tm76MNoRx+4kSoxF9zwyAaDIxsgd
6ztqTAGHDGf5SoZyXu7exc1H9nLGWGip4jf0OFnui8n8Oq+Pzy9T9ybh0UuvNPKo
K1IzNvB7K0SZvEN31hEvbc9OMHXY7iKR69btqCj805uYA5s0rPMQEAzrqyzwIWKI
Yw3fXPdY0F2+cn4RLcZEqmSO7s5fP/w3WsKSQGHvaJHXu5/7dVO7kqu2LtAb11M5
/tbg770skwfnSffkJXDBlp/Wi6928BMJznnvfqVogHWjM+DDYAFncOdkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa9+ZXK4/+5VYmg/ufDj0Ebd7S2MB8GA1UdIwQY
MBaAFM7RuTrD2mTrN2hdfqoZqrdMI383MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEt
ODE2Y2I4NTNhZWRkLzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEtODE2Y2I4NTNhZWRk
LzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/mfZuk4
ZWlbZuHa4Q82Isp3tESq8e5LAAVPXZpnY0kDEYjuLoy04lzbS10SH5vMz9X9pMOg
AYCkjE+QtqVk/z1LscwIdJXMy+PTqG1zWyYDpNCDs20oeHoD/4pNYxXpNQZ0amQc
4HoEuSo4F2JrePUd7vHG2nZzbabpL5YTwbAKo0ATrwb2jy9jQWy5kaxDT1ceK6JP
4BMX2vGDjbLIbMViziq+GzaR6fvIhXygI3PwOezmlZPceFQOu7Pni0SFI5nlzCWb
hW00/bfM9yRhnQfBPe9sB2l3+68dP4cYUZnqtXCMfW4IYm6KLJKbd+ki9gi/Xhkv
zMpHFSv+jnkLIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:21 2026 by rpki-client