Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: cuWfjtz3drAA71SnooSuow/pNmYQQRPwBgbixyAhkgQ=
Subject key identifier: 1E:3A:5B:FE:9F:17:19:42:19:EF:31:CD:79:8A:7C:27:82:B1:E3:3F
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 019D371BABDD2E8A475DEE4B96C26AF9F814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 01:00:53 +0000
Manifest this update: Sun 29 Mar 2026 01:00:53 +0000
Manifest next update: Mon 30 Mar 2026 01:00:53 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: Uckj7L5YVXoN+tdgT485HCEh6yNBJKyWaicKfmNw0TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ab:dd:2e:8a:47:5d:ee:4b:96:c2:6a:f9:f8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Mar 29 01:00:53 2026 GMT
Not After : Mar 30 01:00:53 2026 GMT
Subject: CN=1e3a5bfe9f17194219ef31cd798a7c2782b1e33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:7c:2e:40:b2:81:a1:fc:fd:c3:87:28:d4:
88:82:5d:0d:de:9f:56:4f:39:2f:86:98:fb:1b:0a:
9d:69:ac:ee:3d:64:a2:dd:48:fd:54:53:4b:84:d1:
ee:d5:a1:10:c8:58:24:3d:39:1f:dd:fe:ca:6d:c3:
19:fa:b9:88:d6:ba:5d:30:8b:12:8d:bc:f0:71:48:
65:ea:8f:df:b9:f0:77:f6:4b:38:c9:b0:29:32:56:
19:17:06:42:51:c5:0f:4b:d6:c3:ca:57:46:41:32:
f5:2c:5d:4a:64:eb:0a:d4:e3:4f:2c:fe:1a:b8:70:
fe:e3:8f:23:cd:a1:7c:e5:5f:4e:98:bf:33:93:4b:
fd:90:ea:de:09:ac:14:d2:93:41:22:e4:69:4e:83:
54:a4:b5:78:a4:2a:84:db:09:81:cf:b9:e7:7b:0a:
d3:0f:8c:ca:da:b1:67:ca:5a:54:41:34:9b:09:e8:
29:dd:d2:fc:0f:ec:d7:48:9c:c4:c5:06:7e:91:43:
ab:9c:14:89:28:72:c4:d2:50:7d:22:8a:f0:ab:fc:
3a:5c:e4:b2:62:cd:69:6e:15:c0:68:27:10:db:dd:
91:f0:c9:67:a1:57:b3:3d:8f:18:8d:da:7e:8c:d0:
39:dd:cd:b2:68:bc:92:3f:62:ca:bb:c6:d7:33:9c:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:5B:FE:9F:17:19:42:19:EF:31:CD:79:8A:7C:27:82:B1:E3:3F
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:e2:0a:85:ae:e7:b1:a7:27:bd:71:1f:c5:44:b4:a2:72:
c1:77:82:ab:8a:16:bb:5a:f2:af:4c:af:5f:97:70:c7:57:44:
1d:50:ac:78:fd:9a:34:6d:91:d2:57:31:da:53:16:a7:74:2b:
f8:e3:7b:99:3a:26:5b:28:6d:36:eb:a8:73:d7:6e:88:e5:4d:
4e:bb:3a:0e:6b:3d:eb:f7:2f:ad:ee:98:a6:ce:db:3d:c9:5a:
45:0c:ed:a2:2a:37:d3:4d:ac:3d:a4:a6:bf:69:fd:ff:e7:e1:
8f:80:49:a7:ce:b5:2c:1e:bf:d1:61:da:3e:52:f8:e2:b8:88:
c5:c5:c8:6b:a9:eb:1d:e4:6c:4e:e3:38:87:c2:50:76:ae:9d:
41:9e:b1:8e:1d:3c:90:23:98:cd:62:21:50:40:e4:52:96:9b:
8a:92:c0:6b:85:4a:38:eb:b3:ad:fe:42:bc:8d:a4:8e:2f:17:
37:cc:5c:29:98:1d:d2:ae:50:61:ba:86:a1:cf:3c:45:51:49:
2d:4c:e9:98:4c:7b:a9:50:ff:18:d1:21:fd:75:99:d8:a0:e4:
1d:33:1e:7a:b4:67:06:6f:7b:84:d7:38:f0:c3:36:6e:4b:09:
6d:75:c4:b7:12:b8:52:7f:dc:0c:0a:85:fe:88:31:e5:b0:e6:
4d:b8:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:41 2026 by rpki-client