Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: /q8+3yFjlIdmBrk8dC6eG90hZcnRkUTXiOSRUd4RXWI=
Subject key identifier: CE:29:48:E6:BF:7B:C2:A4:12:B0:9E:74:7A:18:4B:B8:22:79:03:41
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 019D277296E95B5E88BCB97AB762E1AB5E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 0864
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: t1OLlyMYCg0qeRDfFDdFLVnBgHZJ7ug1m5A6GlW+R7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:96:e9:5b:5e:88:bc:b9:7a:b7:62:e1:ab:5e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=ce2948e6bf7bc2a412b09e747a184bb822790341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:78:e3:c7:98:0a:f6:d5:07:89:a0:90:54:
dc:83:f2:7f:d5:8f:3f:9d:32:c6:ca:99:e4:6a:35:
73:16:88:31:21:03:cc:36:eb:bf:6b:ec:22:e8:e8:
f4:dd:c2:5d:22:6e:57:d0:18:ba:c4:af:31:07:67:
64:70:a8:2b:4d:b0:18:8c:45:51:b2:ba:09:d1:bb:
2e:1d:7a:1f:6f:b5:6e:4b:e3:1e:17:b3:67:81:ab:
35:14:a1:01:c7:37:f4:dd:f6:be:a1:56:d4:e2:31:
54:ae:f2:53:19:18:d0:5d:cf:81:ce:26:d7:18:f9:
b9:19:3f:2a:17:43:aa:2d:da:c1:f1:c9:be:4d:8c:
19:cd:89:8c:be:68:be:94:76:6f:d2:86:35:06:ec:
2d:a9:b9:a6:ef:e1:16:32:0e:6b:af:f7:b0:c1:c6:
b4:6f:39:5e:38:a7:59:3e:d3:b9:d1:97:ca:6d:f2:
5f:47:6d:28:72:7e:41:05:c6:58:fa:31:31:67:33:
1f:27:0f:b4:e3:45:b4:90:61:53:62:39:b6:4a:0c:
d5:d9:d5:e2:25:48:7d:85:59:b0:64:64:14:8f:5e:
59:7b:b2:37:ad:79:c7:61:31:5b:1b:1d:90:38:7a:
7b:49:d6:42:81:23:cb:31:aa:a6:ff:39:66:c0:01:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:48:E6:BF:7B:C2:A4:12:B0:9E:74:7A:18:4B:B8:22:79:03:41
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f9:49:7b:6b:3e:77:d6:60:83:35:ff:6b:b0:10:c7:0d:15:
de:a7:6a:c3:b8:5c:f7:d0:a8:bf:0f:b0:ec:8e:4c:c5:71:eb:
7a:23:c5:47:17:0d:87:e0:e0:3a:6b:ae:c6:c0:78:79:1a:57:
75:a7:17:18:05:e7:8d:30:f9:0f:75:76:bd:14:80:64:b4:5a:
77:91:53:ac:41:b0:85:e2:92:2c:6f:65:cf:bd:c5:36:15:f0:
ca:6c:03:c6:42:74:ab:1e:c5:6a:da:a4:a0:cc:c4:f2:cc:05:
dd:25:7f:c0:54:39:0f:27:21:76:13:21:69:5a:6a:09:10:0b:
1a:77:ad:a8:91:62:44:01:91:08:da:e0:71:19:0a:96:22:77:
90:76:26:46:35:63:0d:5b:d3:91:ce:2c:84:5a:67:90:74:df:
5e:dd:a2:61:61:26:90:6d:44:ad:06:23:a0:3e:de:00:fb:32:
82:c9:62:8f:1c:ea:93:34:b1:69:c7:bd:07:03:06:a8:9d:ed:
55:c0:8c:5c:29:0c:e7:82:7f:92:6d:c1:af:7f:ac:92:d7:6a:
24:66:3e:7a:3a:9e:9e:6e:09:14:db:01:ad:83:40:1e:70:15:
49:72:39:58:56:ba:1b:24:37:cc:b9:5f:1d:36:a6:9a:8d:8f:
79:d4:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:34 2026 by rpki-client