Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: /dBI6ePoBQujR/nimWiEoLLTe4wDMoDLbunKkiAFqfM=
Subject key identifier: 5C:D5:98:AC:31:9B:BE:DE:7A:0F:EB:66:FF:6D:2D:0B:26:05:25:40
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 019D3940AD17B90A5EC1C0461417306EBD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 1163
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: s1hmFw8G3xrEJ+sD852hjSlu6kLM0ZFEVzEI5Onie40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ad:17:b9:0a:5e:c1:c0:46:14:17:30:6e:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=5cd598ac319bbede7a0feb66ff6d2d0b26052540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:48:db:ae:0a:9e:89:42:3f:1b:93:6b:59:
04:42:1a:b1:eb:22:1a:0e:33:df:2f:cf:3e:44:18:
f6:52:e2:34:3a:cc:a9:47:61:4a:af:c0:8d:f3:ed:
3e:4a:7e:c7:73:e4:af:ec:5a:5c:9d:70:84:cf:a1:
a3:1b:25:11:28:d2:0f:12:1c:82:3e:7f:07:ef:37:
9c:9c:8a:26:d5:e6:5a:65:fe:d2:7b:e9:c3:4f:73:
be:4f:cf:d7:b9:f4:e0:38:15:cd:fc:6c:45:28:1d:
06:1b:bd:ac:e8:49:f3:5b:41:9d:39:2b:04:18:1f:
74:1a:a3:ab:79:2f:fa:21:09:40:eb:43:7a:3e:d1:
e9:d7:b9:63:42:12:66:83:51:24:81:d8:da:26:be:
a1:7f:68:95:8c:c6:6d:55:a8:64:75:29:66:f4:1f:
84:4f:82:31:c6:bd:b9:58:74:79:7a:26:3c:99:50:
b3:ac:b2:9e:d9:3c:40:0d:a0:4b:c2:a1:01:01:17:
3a:ad:6c:be:12:80:29:5c:f7:c1:7c:f7:9d:83:b2:
ca:9f:86:98:90:25:ed:26:f7:57:2f:57:57:ed:a1:
b4:1b:f8:14:c9:21:90:bd:f7:ae:0b:48:68:74:54:
22:b1:c8:e1:c9:7b:1b:c7:e6:b3:e7:63:7d:59:22:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:98:AC:31:9B:BE:DE:7A:0F:EB:66:FF:6D:2D:0B:26:05:25:40
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:5c:73:42:c7:69:3f:c0:73:36:a1:01:4e:db:7c:7b:56:
35:96:a7:54:e1:bb:51:74:d2:3f:c4:2f:9e:33:69:de:62:78:
7c:f6:5d:cc:47:da:01:43:ad:8c:84:57:9e:35:d8:e5:57:a4:
48:a9:67:3d:ed:57:f7:00:0c:8a:db:7b:35:21:9f:13:8e:50:
52:51:09:cc:b2:b6:d5:03:a2:f6:b2:45:e4:5d:fa:20:38:4d:
b4:03:f4:bb:85:c8:69:76:81:aa:da:80:58:2a:c3:c9:77:2c:
73:68:c1:e8:91:52:a6:4b:a7:cd:4e:ba:1b:04:7a:78:39:12:
dc:e5:c8:a1:06:4e:f1:a6:59:7f:76:6e:83:90:45:b9:46:c2:
bd:f2:2e:1c:43:26:2a:89:16:7e:d5:f3:f2:73:ca:22:4a:90:
e5:dd:ef:b5:1e:19:bb:3d:10:04:f4:d5:eb:25:1d:36:f3:a6:
d2:be:55:5b:77:cb:de:43:c7:34:f5:d5:44:3a:f4:ee:9a:52:
21:16:53:fd:c6:5e:c2:80:47:85:6e:11:ee:9a:4a:12:fc:37:
6c:9b:8f:61:b3:76:f3:fe:99:48:fd:1c:c4:81:c7:c9:cd:36:
69:0d:fa:f9:9e:8e:9d:83:4d:2c:ac:a5:01:75:d7:75:73:74:
4a:63:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:59 2026 by rpki-client