Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: C1dbWboZ86A1wTfeD+t4gXQ5fm1wmvtDPtXaBXhgbXY=
Subject key identifier: 36:47:4C:05:73:B6:3A:77:D7:DC:7D:08:40:DF:73:E6:A8:9A:80:7F
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 019CACB4FA42ACD26231AA37E533C92043A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0F1E
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: 5TUn23gpduX07Bm9LPWuVoE59Y1QvmljV7/Q3JgxcjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:fa:42:ac:d2:62:31:aa:37:e5:33:c9:20:43:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=36474c0573b63a77d7dc7d0840df73e6a89a807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:d5:52:48:9b:6e:7b:83:96:8d:4f:1d:a0:
7e:c4:c5:49:ad:ea:11:d0:2f:f2:b2:9f:9f:66:15:
bf:47:c2:6f:74:bd:12:7c:3b:14:4b:d4:5c:03:ec:
dd:4d:d6:24:26:fb:34:a6:75:76:a1:94:18:d4:76:
1d:fe:90:44:88:89:68:37:11:72:ac:54:68:a9:4c:
3b:12:c4:c5:5e:41:0c:53:e4:15:7f:44:b8:50:fc:
82:fb:77:ea:8e:63:31:2b:00:85:cb:f6:ab:ea:66:
a6:63:e8:73:20:a1:f2:a5:05:4f:33:11:a1:67:03:
08:ee:54:bc:97:28:fc:b7:f9:60:eb:b4:7d:ff:07:
1a:ad:3d:1e:c4:7b:18:82:57:68:84:37:86:e3:63:
2f:69:c4:fa:58:6a:91:f4:f7:a2:bc:52:a5:d3:90:
d4:a8:1d:5c:b8:4b:3e:a2:bc:6a:5e:36:70:b2:71:
99:7d:b6:93:28:f3:65:2b:9e:f9:75:c2:1e:12:b1:
b3:d2:53:30:a1:a4:74:90:7e:59:be:7d:a7:9b:14:
c9:d7:9f:47:36:65:cb:65:f6:fe:06:8e:87:e7:a2:
1f:3c:91:44:8c:8b:6f:a4:f1:de:31:6d:89:2e:b4:
55:e8:b1:2e:d5:2f:cb:f0:c2:bf:1a:5c:eb:e1:b3:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:47:4C:05:73:B6:3A:77:D7:DC:7D:08:40:DF:73:E6:A8:9A:80:7F
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:de:ad:93:27:7c:a2:47:6a:7f:6e:26:60:07:71:22:2b:b9:
98:4f:99:c4:71:9d:e4:56:17:6d:67:c2:9f:5c:1d:88:16:36:
f1:5d:a0:23:81:81:f5:ad:35:c5:7d:2f:cc:ed:da:58:07:f0:
d7:0f:e9:cc:32:e3:ff:19:9e:ab:40:21:c4:02:55:30:c9:2f:
23:ec:04:00:98:26:65:0d:51:26:de:eb:ca:d1:88:a3:aa:9a:
50:4d:80:22:e1:2a:3b:0d:bf:44:27:0d:f6:17:73:c4:1e:8c:
b2:0f:ab:78:ae:6b:33:f1:7c:27:91:2e:da:e4:97:99:18:31:
6f:c0:ce:e0:d2:f4:c7:11:32:98:f9:62:de:ef:3c:61:66:12:
d4:bd:e5:ad:7f:67:d4:ad:f5:4e:76:fc:3e:6b:6d:18:bf:46:
15:c1:38:39:0e:cd:16:43:22:64:85:05:70:40:d2:ca:c6:97:
b2:19:65:99:54:b4:dc:2c:87:55:d1:93:3f:8a:d0:c4:2a:76:
43:dc:fd:70:d2:16:c1:ff:af:ad:af:8a:66:78:0d:42:ea:ff:
73:e0:04:80:25:1b:0e:c3:5f:e9:88:68:2b:1d:cf:68:a0:4b:
91:96:04:e7:d7:d7:d1:72:94:f8:f3:78:42:a8:16:d5:de:8d:
ba:ce:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:24 2026 by rpki-client