Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: duD8DGXqs73/DhbxnBahMalGWHEpiG+T/ID91tmh1M8=
Subject key identifier: 4B:B3:DB:F9:43:03:77:36:25:C8:50:7D:5A:53:4D:28:6D:AB:14:68
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 019D2703E96DF59238658480C66BB5D7F809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 1347
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: BNliIqfhiSaeRyCpu8EQPm/aQyyWa3z6bJ1//PDXJT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e9:6d:f5:92:38:65:84:80:c6:6b:b5:d7:f8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=4bb3dbf94303773625c8507d5a534d286dab1468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:0a:bc:e5:61:52:9b:5f:68:22:ff:f6:4d:
35:54:5c:ce:0d:a7:d6:18:1b:2c:2b:b3:46:95:c6:
a4:c9:5b:78:3e:93:21:a5:5c:91:20:98:15:19:08:
ad:97:18:fa:60:72:d0:cf:fa:b2:fa:a5:51:e0:2f:
7b:f5:8c:72:3d:c9:80:58:ce:f9:ed:13:8c:42:69:
5a:78:b3:ed:e4:be:4f:18:88:f5:ae:1e:ec:c0:43:
98:96:7f:1d:7c:ac:e0:78:ba:9d:01:75:dd:54:eb:
01:7e:62:64:88:19:2c:91:30:f6:b9:a3:3a:8a:6f:
36:2c:48:b4:64:56:f7:7d:44:f0:db:be:4c:03:ad:
ef:a4:cf:27:a7:c2:38:9d:66:12:0a:36:37:c0:c9:
7b:c5:7a:75:ff:5b:61:02:1c:e4:93:0b:f5:da:c4:
63:e0:15:f4:b0:fd:9b:b6:af:3d:1e:91:1e:b1:45:
48:da:2b:ba:66:e8:30:fc:58:d0:c1:54:1b:2a:3e:
28:dc:3e:d9:f6:e4:c0:2b:01:29:eb:cf:73:0d:52:
61:10:a5:8d:82:57:98:61:5f:1a:aa:2f:f6:48:6b:
31:ec:12:32:c8:47:15:11:fd:d3:a2:74:d4:df:57:
d0:ec:f2:6c:c3:25:e1:16:77:9d:2c:55:65:30:a1:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B3:DB:F9:43:03:77:36:25:C8:50:7D:5A:53:4D:28:6D:AB:14:68
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2c:b6:e3:3f:2d:d1:6a:c7:85:25:59:61:d1:32:2c:26:99:
e9:c3:e8:41:da:04:cf:a2:38:22:fc:47:74:8a:2d:27:13:a6:
9f:6c:8f:04:73:95:86:45:1a:36:26:ca:56:c5:1b:b6:1a:41:
ab:98:aa:c7:31:6a:6e:a9:14:54:79:2e:eb:93:8a:70:03:c0:
46:74:8b:1d:f1:67:c6:22:fe:6f:07:af:b4:10:96:d1:dd:e0:
cb:4c:06:b6:80:8d:cc:31:80:fe:61:9e:b5:31:6a:84:cf:2e:
39:40:9b:e9:ce:9f:b8:c3:f9:dd:5f:e0:00:57:f2:af:fa:1e:
41:a6:dd:19:db:ae:ab:db:47:fd:e1:46:dc:64:b8:55:f2:36:
f7:74:74:f7:14:30:f2:f5:42:fe:db:76:16:28:0b:e7:10:f6:
12:4c:97:13:3b:6c:b7:3e:1a:c3:e1:6e:d0:d7:72:1c:39:18:
88:c6:73:ca:ab:02:df:6f:a2:b8:fc:fb:dd:2f:f7:0e:74:16:
11:4e:6c:d4:fb:c8:c9:41:ec:1a:3b:41:03:e4:55:aa:9a:7e:
26:44:87:7c:a6:23:fa:ab:6f:5d:39:a8:52:77:ec:7c:a2:b1:
1d:3c:ce:fb:12:58:21:d7:0d:4a:14:49:b7:42:63:de:d1:3f:
2c:2b:7e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+lt9ZI4ZYSAxmu11/gJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDFiOTNhYzNkYTY0ZWIzNzY4NWQ3ZWFhMTlhYWI3NGMy
MzdmMzcwHhcNMjYwMzI1MjIwMTAwWhcNMjYwMzI2MjIwMTAwWjAzMTEwLwYDVQQD
Eyg0YmIzZGJmOTQzMDM3NzM2MjVjODUwN2Q1YTUzNGQyODZkYWIxNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zQKvOVhUptfaCL/9k01VFzODafW
GBssK7NGlcakyVt4PpMhpVyRIJgVGQitlxj6YHLQz/qy+qVR4C979YxyPcmAWM75
7ROMQmlaeLPt5L5PGIj1rh7swEOYln8dfKzgeLqdAXXdVOsBfmJkiBkskTD2uaM6
im82LEi0ZFb3fUTw275MA63vpM8np8I4nWYSCjY3wMl7xXp1/1thAhzkkwv12sRj
4BX0sP2btq89HpEesUVI2iu6Zugw/FjQwVQbKj4o3D7Z9uTAKwEp689zDVJhEKWN
gleYYV8aqi/2SGsx7BIyyEcVEf3TonTU31fQ7PJswyXhFnedLFVlMKEmIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuz2/lDA3c2JchQfVpTTShtqxRoMB8GA1UdIwQY
MBaAFM7RuTrD2mTrN2hdfqoZqrdMI383MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEt
ODE2Y2I4NTNhZWRkLzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEtODE2Y2I4NTNhZWRk
LzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiy24z8t
0WrHhSVZYdEyLCaZ6cPoQdoEz6I4IvxHdIotJxOmn2yPBHOVhkUaNibKVsUbthpB
q5iqxzFqbqkUVHku65OKcAPARnSLHfFnxiL+bwevtBCW0d3gy0wGtoCNzDGA/mGe
tTFqhM8uOUCb6c6fuMP53V/gAFfyr/oeQabdGduuq9tH/eFG3GS4VfI293R09xQw
8vVC/tt2FigL5xD2EkyXEztstz4aw+Fu0NdyHDkYiMZzyqsC32+iuPz73S/3DnQW
EU5s1PvIyUHsGjtBA+RVqpp+JkSHfKYj+qtvXTmoUnfsfKKxHTzO+xJYIdcNShRJ
t0Jj3tE/LCt+9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:13 2026 by rpki-client