Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: 43EOCz+9G5IjUPF7vzDNKe+Ur6d9fBXr989yaa8HWM0=
Subject key identifier: 34:CF:90:D2:88:C7:E0:99:8F:E1:44:2D:E7:E5:66:D6:94:72:89:05
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 019D29CDE54D6788F45F2782397E56612DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 115B
Signing time: Thu 26 Mar 2026 11:00:52 +0000
Manifest this update: Thu 26 Mar 2026 11:00:52 +0000
Manifest next update: Fri 27 Mar 2026 11:00:52 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: zuxHujepQ8eqZpNgyz0vs+uyFjtGMCZqCjggv7csdXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e5:4d:67:88:f4:5f:27:82:39:7e:56:61:2d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Mar 26 11:00:52 2026 GMT
Not After : Mar 27 11:00:52 2026 GMT
Subject: CN=34cf90d288c7e0998fe1442de7e566d694728905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:7e:95:14:d4:b3:e9:65:f7:a6:d0:ea:45:
d6:20:8f:7b:f7:a3:a8:db:dc:93:1b:97:3d:0f:a5:
98:27:89:53:4c:9a:b7:25:f3:45:14:b8:95:5d:44:
7c:92:d9:e1:e3:17:d0:47:54:b3:d5:d0:ee:95:e4:
74:d0:98:0f:de:38:bb:b3:85:50:04:19:f7:19:0c:
44:c2:d0:0e:a6:b3:de:7a:a0:49:ad:9d:8f:db:76:
a7:73:d3:b3:a5:d3:ed:47:db:b8:f5:8f:90:ee:7f:
16:3f:54:0a:19:7e:70:99:3e:3e:35:bf:38:f9:00:
e9:bc:6d:db:d2:9e:6c:d0:5b:89:16:07:8a:ba:69:
20:fd:94:00:30:4a:3a:d5:49:10:d1:f6:7b:0f:61:
f2:15:7f:dc:16:ae:26:b0:6c:3f:5b:2b:2b:5c:94:
15:e8:dd:02:17:d7:db:2e:bc:09:6f:21:05:15:12:
0e:3c:4d:fd:0a:83:47:34:74:29:d5:7f:1f:f4:21:
7c:c3:7b:78:a6:80:bc:d0:6e:11:60:b9:45:2a:39:
9d:10:81:54:fe:c8:5c:d2:7c:d3:6a:01:00:b2:40:
b3:47:0e:fa:02:60:1c:c8:f6:35:c9:e1:b6:cb:98:
09:70:66:59:d2:e8:db:e4:c9:89:73:dc:00:78:8b:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:90:D2:88:C7:E0:99:8F:E1:44:2D:E7:E5:66:D6:94:72:89:05
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:93:9b:d4:2b:4c:5b:46:45:48:19:36:b7:d4:17:d5:d6:5f:
b5:63:2d:58:89:ad:3a:74:91:ed:7a:d6:2e:b7:5b:ae:a3:94:
56:0f:6e:fd:d0:3b:ee:8d:c3:35:30:a2:81:f0:91:37:cc:3d:
f4:48:96:e0:97:a1:02:df:9f:a7:70:3c:28:ee:7a:ab:a1:b8:
be:85:78:d6:19:2c:3e:0a:e3:1f:0b:04:32:89:ba:22:5c:1f:
93:34:7a:b1:6b:a1:52:e3:65:68:bb:f0:5a:d2:6c:c7:af:70:
06:7d:aa:1d:88:f8:70:f5:6e:11:46:6a:cc:9b:45:a4:c9:26:
43:35:7d:7c:a8:a7:fc:50:2f:bc:7f:7b:ae:64:8a:53:3a:3d:
33:65:95:a5:73:99:c5:7e:92:ab:62:43:12:73:d8:ea:92:51:
f5:d0:2f:82:ed:78:71:9f:e9:6a:bb:48:19:60:ff:60:c1:e6:
17:86:07:ae:b7:3e:e4:fb:10:4c:0a:7b:c5:59:21:df:86:a7:
e7:dd:7f:75:45:1b:09:d9:02:b1:ca:21:a1:e6:7c:4b:70:1f:
34:41:58:60:f4:7c:52:34:b6:5a:e1:5b:07:8e:66:0b:d3:2f:
fa:4b:00:f8:cc:4d:df:7c:74:3c:40:03:e4:90:cf:a6:aa:5b:
b9:21:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:51 2026 by rpki-client