Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: 8WtxHpdPhYhNOEHwKDgmgzDBq8Jvlux+3Pq/vEdVQUw=
Subject key identifier: A4:EF:EE:2F:18:08:D9:E0:C9:DF:16:66:D3:71:10:8A:C7:D3:F6:A4
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 019D265F6F38EAAC7B340D0EAD48706B21F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0F5D
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: r8Bl/MFtpRUtFu2EB/2VeTjmfhhkL6/ivcdfVae2A2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6f:38:ea:ac:7b:34:0d:0e:ad:48:70:6b:21:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=a4efee2f1808d9e0c9df1666d371108ac7d3f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:9d:9a:76:b6:3c:c9:40:b5:e2:ee:b5:f0:
ef:92:01:29:0f:4e:29:d1:e7:05:83:1f:bb:b3:16:
4a:09:8b:67:c3:8b:9c:89:83:bb:e7:92:c5:9a:33:
6c:c4:4f:c3:c3:45:e7:f8:e7:27:c5:29:95:56:48:
6b:ef:6a:80:94:fb:ec:56:4b:b2:13:d5:cc:0e:db:
ba:b8:f8:32:4d:d8:43:0c:c5:85:25:bc:8b:e9:08:
08:7a:a7:a8:3a:3c:59:56:5d:f2:6e:d7:5c:d9:c1:
67:b7:1a:d5:7d:7d:14:e3:bd:a6:40:7b:ba:71:5e:
db:53:46:6e:48:cc:aa:8d:b7:d7:a1:3c:12:05:7c:
3d:7e:a8:b4:34:6b:c8:a6:2c:f0:87:76:78:e4:f2:
7e:80:75:7e:56:5c:53:26:4a:6e:18:6c:5f:55:af:
cb:0a:96:de:0d:17:88:ac:b4:e8:40:60:a9:c4:d5:
f2:3a:cf:e0:65:f5:3d:fe:7a:df:1c:81:3a:43:51:
2f:48:fa:78:a5:09:1b:fe:35:bb:c9:ce:f9:22:b4:
44:46:de:a0:aa:b8:6b:32:b5:69:db:82:36:ef:77:
b7:1f:32:f3:10:7b:ed:fd:35:0f:5c:3c:f0:9b:97:
6e:c3:c1:a7:bc:3c:73:79:04:31:56:a3:be:0a:61:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:EE:2F:18:08:D9:E0:C9:DF:16:66:D3:71:10:8A:C7:D3:F6:A4
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ac:2e:87:f5:d2:30:53:7f:98:2d:c0:90:03:9c:19:e4:fb:
b5:9c:c6:67:c2:47:48:30:d6:63:d2:68:a5:a1:b9:03:f9:67:
d4:31:d6:08:03:2d:98:b5:95:f7:33:16:ff:fa:2e:2b:f1:51:
7a:a1:e4:29:83:21:20:27:a6:dd:35:05:c5:ac:0c:ff:0f:2d:
56:01:be:78:66:98:ca:d7:97:a2:2f:fe:01:89:ea:1b:37:6a:
a9:c9:3c:88:e5:95:b1:27:ce:cc:41:68:95:35:82:2e:c0:5a:
40:5b:43:48:d3:f8:d7:0e:25:7e:3a:dc:62:91:0d:bd:d7:0b:
38:91:45:eb:c8:21:cf:87:ef:b5:cd:8c:65:93:9f:f3:95:38:
28:31:cd:21:61:76:7d:0e:b9:22:1e:52:14:4a:c9:26:50:c2:
45:11:a4:89:ef:ba:64:59:9f:84:da:8f:a3:39:79:8e:82:3e:
41:7d:0a:19:65:51:3b:73:c3:16:ab:85:1b:47:56:15:d8:83:
81:c4:a8:b7:24:0f:bc:2c:03:6a:8f:a9:6e:92:89:6b:c3:31:
63:5d:5d:c6:bb:4e:e3:c0:9d:92:3b:19:42:b1:0f:8f:3d:16:
4e:b2:65:a0:48:a1:48:6f:d4:2f:64:78:7d:79:aa:2a:e7:8a:
4a:05:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:51 2026 by rpki-client