Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: UKLi1/kT6PMu0on4gl2KS7rOM3zwJ1t33D32O2nbdSU=
Subject key identifier: BB:8B:94:4A:7E:D7:A2:B1:77:AF:4E:7B:64:AD:42:A1:AE:9E:06:AA
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 019CAE35DA3E3422117DCB5BD13F5A80123A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 111B
Signing time: Mon 02 Mar 2026 11:01:30 +0000
Manifest this update: Mon 02 Mar 2026 11:01:30 +0000
Manifest next update: Tue 03 Mar 2026 11:01:30 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: zrZ0wvedOcg42/vZtV1iB/H7d9TPTxAITjvC/tjfYvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:da:3e:34:22:11:7d:cb:5b:d1:3f:5a:80:12:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Mar 2 11:01:30 2026 GMT
Not After : Mar 3 11:01:30 2026 GMT
Subject: CN=bb8b944a7ed7a2b177af4e7b64ad42a1ae9e06aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:72:81:0c:2a:17:77:26:1d:7e:e8:6f:8b:
6b:6a:e6:57:de:bd:cc:40:5a:d2:bf:56:ba:d4:43:
a9:2f:f4:2e:71:35:f7:e6:3b:2d:e3:f2:98:cc:f6:
06:95:47:88:fe:fe:5b:2c:c2:c1:3b:ba:5f:36:0c:
a3:19:18:7a:da:9c:12:8b:09:ba:c9:ff:3b:e8:57:
13:85:d1:31:ff:aa:6b:26:92:87:ce:fd:49:e4:65:
aa:97:c9:8d:9a:b6:d5:d6:ef:a6:36:fd:54:c1:3c:
23:b0:41:0d:3e:12:55:7e:90:74:5a:f0:92:6c:cd:
41:47:37:4b:5d:34:b8:e8:00:3e:44:3c:b0:41:c5:
a9:4a:09:78:f8:9e:82:9b:6a:dd:37:a0:8c:54:2d:
35:f0:24:82:7a:7a:da:b8:ad:6c:6e:9a:5c:64:56:
75:a6:09:85:e1:9b:9f:aa:d6:90:5d:e8:ef:ea:d8:
4e:e6:7d:cb:24:24:d5:9e:1f:77:0d:84:6a:2e:9e:
41:c6:d9:30:3a:af:71:29:7d:1e:ac:ff:6e:18:46:
12:1f:9c:83:38:fe:68:22:e1:ef:b7:66:91:96:c9:
d5:8d:4c:ef:82:cc:b3:c6:5b:07:dc:fd:a8:30:76:
c4:19:e0:74:41:fe:1e:d8:db:22:c3:50:6b:6d:0e:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:94:4A:7E:D7:A2:B1:77:AF:4E:7B:64:AD:42:A1:AE:9E:06:AA
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f3:63:93:66:81:29:d1:6f:8e:36:c1:62:59:67:99:68:49:
0e:40:d3:7f:84:39:04:be:db:2e:6e:d1:8a:e3:67:b0:30:aa:
a0:30:2d:b0:ac:95:18:f2:7b:9d:17:a8:2c:6d:35:dd:2d:da:
92:ea:a2:f3:93:2c:34:e1:2e:e5:eb:ae:45:1e:b4:34:fc:99:
93:49:db:1d:ec:95:95:da:bf:ad:6d:e9:ea:8e:20:54:1f:4b:
05:bd:2c:98:bf:af:67:66:ac:76:c3:04:22:6f:2d:f8:cc:64:
2c:db:d9:24:90:f7:3a:26:80:2d:ee:ad:f2:d0:98:89:9e:c0:
16:e9:4d:c8:f5:87:f1:d1:3c:f5:12:a2:82:bb:8e:c7:98:a2:
0c:06:27:73:46:49:c7:3e:02:df:06:f8:81:22:9b:88:37:26:
49:93:43:5f:5f:bf:78:a3:f8:4f:4b:52:50:f7:21:b8:29:59:
3f:17:4e:d1:78:3d:0d:41:44:f2:17:d9:c8:5d:6d:b0:8f:81:
1c:52:78:b9:9a:f8:c5:66:49:18:b4:38:2b:70:09:f5:72:af:
10:c2:2f:96:32:f5:df:6c:9f:28:a0:07:28:43:e9:dd:24:4a:
c5:5c:d5:88:b0:50:db:5e:91:80:0b:59:f3:75:4f:79:ac:8f:
42:4c:9d:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNdo+NCIRfctb0T9agBI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDQ0ZDU2NTViODZkMjNhNzI4NDEwYzA0MWQzZTU4ZTQ3
MjhjMDYwHhcNMjYwMzAyMTEwMTMwWhcNMjYwMzAzMTEwMTMwWjAzMTEwLwYDVQQD
EyhiYjhiOTQ0YTdlZDdhMmIxNzdhZjRlN2I2NGFkNDJhMWFlOWUwNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq35ygQwqF3cmHX7ob4trauZX3r3M
QFrSv1a61EOpL/QucTX35jst4/KYzPYGlUeI/v5bLMLBO7pfNgyjGRh62pwSiwm6
yf876FcThdEx/6prJpKHzv1J5GWql8mNmrbV1u+mNv1UwTwjsEENPhJVfpB0WvCS
bM1BRzdLXTS46AA+RDywQcWpSgl4+J6Cm2rdN6CMVC018CSCenrauK1sbppcZFZ1
pgmF4ZufqtaQXejv6thO5n3LJCTVnh93DYRqLp5BxtkwOq9xKX0erP9uGEYSH5yD
OP5oIuHvt2aRlsnVjUzvgsyzxlsH3P2oMHbEGeB0Qf4e2Nsiw1BrbQ4jhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuLlEp+16Kxd69Oe2StQqGungaqMB8GA1UdIwQY
MBaAFM7UTVZVuG0jpyhBDAQdPljkcowGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQt
NjQzODJjNTdlZDQwLzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQtNjQzODJjNTdlZDQw
LzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvNjk2aB
KdFvjjbBYllnmWhJDkDTf4Q5BL7bLm7RiuNnsDCqoDAtsKyVGPJ7nReoLG013S3a
kuqi85MsNOEu5euuRR60NPyZk0nbHeyVldq/rW3p6o4gVB9LBb0smL+vZ2asdsME
Im8t+MxkLNvZJJD3OiaALe6t8tCYiZ7AFulNyPWH8dE89RKigruOx5iiDAYnc0ZJ
xz4C3wb4gSKbiDcmSZNDX1+/eKP4T0tSUPchuClZPxdO0Xg9DUFE8hfZyF1tsI+B
HFJ4uZr4xWZJGLQ4K3AJ9XKvEMIvljL132yfKKAHKEPp3SRKxVzViLBQ216RgAtZ
83VPeayPQkydUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:48 2026 by rpki-client