Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: 7+4vE7T97mDbLtJWlOKmb25zVQSYBcO+EcnF+Ujdtas=
Subject key identifier: 2E:17:67:A6:88:B0:AF:AE:B4:5B:0A:24:3D:73:39:D3:B7:21:67:3A
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 019D27047CE53AF1A0F962CEFB4224725EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 10A2
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: HtRvb/TdvsKySIg4BdgXHQOQVMJ6YuvoF2tNUg4RzXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7c:e5:3a:f1:a0:f9:62:ce:fb:42:24:72:5e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=2e1767a688b0afaeb45b0a243d7339d3b721673a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:2d:22:ef:54:3d:be:6e:88:c0:a2:7f:31:
53:d1:08:2d:22:9e:4c:f8:c3:48:e5:9c:b0:7e:5f:
c6:5d:6a:23:1a:32:61:5a:df:78:bf:95:b8:96:46:
25:c6:54:88:96:19:68:fd:9d:30:77:6b:50:dd:22:
14:77:b0:7b:89:85:78:9c:5f:fc:15:bc:74:89:51:
32:54:37:67:10:54:9d:77:b2:54:16:ca:7a:f2:ba:
88:95:5d:36:90:d0:24:87:a5:6f:78:06:e8:6e:f3:
6e:1c:74:d7:63:52:dd:d8:c4:0c:07:42:aa:8e:3b:
ba:c2:eb:74:da:f0:3e:30:eb:53:12:a9:4f:77:24:
5b:cf:0b:3b:82:8f:ec:cd:21:ed:0e:0d:f4:86:6e:
6a:30:9b:de:95:5f:9f:ad:ae:89:2a:f3:50:30:af:
fe:5b:16:55:48:4b:07:2f:31:01:e1:e6:96:e4:5e:
05:9d:24:b7:81:61:c2:c7:02:8c:52:bc:fa:ab:16:
dc:c0:af:69:94:19:fd:62:88:b6:e0:4a:e7:fb:f3:
31:83:5e:7c:f8:40:3e:88:a9:e6:93:9b:2c:66:37:
c1:32:8d:62:ec:5b:83:e3:5e:36:fd:67:d3:5c:ff:
0c:40:31:23:ac:1a:c4:93:7c:64:c2:07:8b:73:30:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:67:A6:88:B0:AF:AE:B4:5B:0A:24:3D:73:39:D3:B7:21:67:3A
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4a:66:0d:11:f1:2f:84:4f:3c:27:2f:d2:66:1e:ad:90:c7:
9b:4f:f4:96:77:dd:71:2c:12:c2:57:d2:ad:29:78:9b:9a:71:
8c:a6:23:42:6f:f2:a9:ba:d8:31:49:07:10:16:ed:5b:a9:ef:
94:ba:f5:5f:8c:46:bd:15:3c:d2:08:9d:8e:fa:69:2a:7b:31:
dc:0b:f9:e5:f8:40:40:f2:da:71:3c:af:76:d1:6a:f1:13:70:
1d:71:9b:ee:15:69:23:61:d7:5c:5a:f6:55:75:54:05:fc:1d:
37:47:84:b0:b0:9a:3c:79:91:5f:ae:61:ec:04:6a:02:f0:a8:
b7:a9:f9:bd:a9:00:2d:67:e9:07:d0:99:18:5a:e3:8b:4b:76:
4d:e5:db:3b:1e:04:67:4e:a9:d6:6f:51:d8:94:d5:f5:b9:d6:
a0:90:54:5e:61:82:da:f9:aa:c2:1f:5b:1e:38:aa:a0:b5:3f:
1a:bb:92:88:5a:89:53:06:d1:93:55:a7:04:e8:3e:d8:44:8f:
82:38:f3:51:c5:f7:41:c3:3b:84:41:0d:e9:35:63:30:dd:d2:
d6:92:21:0d:86:eb:92:34:0e:89:53:9b:70:b6:18:12:2b:74:
19:23:54:13:9b:03:98:59:cc:67:fe:f5:e3:b7:a4:21:3f:85:
c9:2e:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:40 2026 by rpki-client