Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: JFXWD+5wAygZRi0Mx7J4C+yFaV4uY2bolBDTcxTnJDQ=
Subject key identifier: 3D:27:13:E1:69:31:5E:81:2B:66:81:BB:B3:DA:6D:88:AB:3E:C8:3E
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 019D2B84E138048A7EB4EC923D07FB1738EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 19:00:21 +0000
Manifest this update: Thu 26 Mar 2026 19:00:21 +0000
Manifest next update: Fri 27 Mar 2026 19:00:21 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: Asm1Wsh3aI40tlALybWYBlnFiwuKUT3jOdQmwzTvEV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:e1:38:04:8a:7e:b4:ec:92:3d:07:fb:17:38:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Mar 26 19:00:21 2026 GMT
Not After : Mar 27 19:00:21 2026 GMT
Subject: CN=3d2713e169315e812b6681bbb3da6d88ab3ec83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:32:64:f4:e5:86:6c:e2:b7:f6:25:8a:de:
28:ba:47:49:9b:98:17:30:51:05:c6:fb:80:e2:2d:
d8:0d:89:6f:3b:11:c8:a1:fb:59:ae:5d:e8:95:b0:
55:65:04:a8:65:85:f4:7c:5e:44:e7:c2:b1:45:2a:
0c:19:2d:2d:dd:1d:d6:5e:03:16:41:ad:e3:47:63:
5b:68:ad:41:37:44:be:6d:4d:2b:53:f0:42:da:2d:
28:5b:a7:f6:de:af:97:99:1b:c4:65:b8:69:a9:3a:
71:91:35:ec:8f:a8:c5:3d:46:e4:78:78:ab:06:25:
c8:9c:74:73:3a:5e:c1:8c:63:f6:e3:8f:40:27:a9:
48:1b:91:19:70:e2:31:f5:7f:32:f2:8b:c6:f5:4a:
32:4f:3e:8e:2a:fb:1c:12:9e:52:9a:af:59:9c:7e:
be:66:1c:f4:13:b6:30:83:d5:ec:01:f5:fc:2e:ae:
83:45:96:3d:ec:41:8f:1e:ef:92:22:66:38:34:49:
6d:49:c3:6b:68:32:85:1e:7f:45:7a:bd:c5:24:2f:
e6:53:13:c5:95:2b:8a:80:93:e4:02:33:96:81:f2:
94:4b:3a:c3:e2:76:8f:a7:41:a3:39:6c:4a:4e:a4:
ad:fb:e6:e8:99:d5:c9:24:54:73:fe:1b:0b:30:04:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:13:E1:69:31:5E:81:2B:66:81:BB:B3:DA:6D:88:AB:3E:C8:3E
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:e5:0a:08:cd:5a:9e:79:ef:49:3d:52:d2:02:24:fc:a2:
ec:ad:2f:7d:06:d4:23:90:5b:fe:bf:8e:e3:22:7b:6f:68:52:
5a:ac:75:74:ae:91:dd:a6:bc:18:cc:ee:63:83:0b:48:3b:de:
d3:7f:de:70:80:bc:f2:3f:48:18:56:b8:01:a6:4b:03:8b:3b:
8c:b1:30:ee:7c:8f:5e:de:3d:bf:9c:ad:19:37:13:c6:13:34:
71:a4:97:f7:d6:bd:81:4a:e0:03:fe:fc:81:cd:f5:5e:40:c3:
7b:01:62:5d:b2:e8:73:e0:71:32:a9:d1:56:f9:d7:93:7c:c8:
4e:4a:99:98:b3:63:85:a5:57:23:69:ba:0f:64:fc:26:84:8f:
ec:0d:7b:fb:d4:dc:d9:c7:fc:45:3e:9a:be:f9:6b:3a:88:3b:
e2:f8:60:40:77:55:cd:c5:5a:2a:88:ba:02:1b:81:83:c3:4d:
c7:4b:29:42:dc:d2:c6:d7:16:d5:89:22:7a:fc:b8:9b:49:96:
f4:db:54:5f:f8:1a:f8:17:c5:56:08:d8:7d:63:98:8f:4b:05:
7b:c5:88:02:58:6a:28:d8:f1:e7:fb:b6:b9:89:66:9d:0a:5b:
c6:48:54:47:93:f1:4a:31:9f:ca:c5:f1:e8:63:6b:ca:c4:7d:
62:f0:14:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhOE4BIp+tOySPQf7FzjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDQ5YmJmODRjOTlmYmU4N2FjZmUxYmJlMGRiZjdhYzYz
YjQzZGYwHhcNMjYwMzI2MTkwMDIxWhcNMjYwMzI3MTkwMDIxWjAzMTEwLwYDVQQD
EygzZDI3MTNlMTY5MzE1ZTgxMmI2NjgxYmJiM2RhNmQ4OGFiM2VjODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloyZPTlhmzit/Ylit4oukdJm5gX
MFEFxvuA4i3YDYlvOxHIoftZrl3olbBVZQSoZYX0fF5E58KxRSoMGS0t3R3WXgMW
Qa3jR2NbaK1BN0S+bU0rU/BC2i0oW6f23q+XmRvEZbhpqTpxkTXsj6jFPUbkeHir
BiXInHRzOl7BjGP2449AJ6lIG5EZcOIx9X8y8ovG9UoyTz6OKvscEp5Smq9ZnH6+
Zhz0E7Ywg9XsAfX8Lq6DRZY97EGPHu+SImY4NEltScNraDKFHn9Fer3FJC/mUxPF
lSuKgJPkAjOWgfKUSzrD4naPp0GjOWxKTqSt++bomdXJJFRz/hsLMAQoVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0nE+FpMV6BK2aBu7PabYirPsg+MB8GA1UdIwQY
MBaAFM7Um7+EyZ++h6z+G74Nv3rGO0PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYt
OWVjOWI2N2RkYWY5LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYtOWVjOWI2N2RkYWY5
LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIHlCgjN
Wp5570k9UtICJPyi7K0vfQbUI5Bb/r+O4yJ7b2hSWqx1dK6R3aa8GMzuY4MLSDve
03/ecIC88j9IGFa4AaZLA4s7jLEw7nyPXt49v5ytGTcTxhM0caSX99a9gUrgA/78
gc31XkDDewFiXbLoc+BxMqnRVvnXk3zITkqZmLNjhaVXI2m6D2T8JoSP7A17+9Tc
2cf8RT6avvlrOog74vhgQHdVzcVaKoi6AhuBg8NNx0spQtzSxtcW1Ykievy4m0mW
9NtUX/ga+BfFVgjYfWOYj0sFe8WIAlhqKNjx5/u2uYlmnQpbxkhUR5PxSjGfysXx
6GNrysR9YvAUDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:38 2026 by rpki-client