Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: na2vuNV1iHZQz8eppHBJSgDABNdxX7zHW4FIX7agZnE=
Subject key identifier: 12:2A:03:CC:65:3E:47:44:79:76:D4:91:54:A1:32:4A:32:9D:8B:54
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 019D9BBF4842253473182FCC38BE940B719C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 1196
Signing time: Fri 17 Apr 2026 14:01:37 +0000
Manifest this update: Fri 17 Apr 2026 14:01:37 +0000
Manifest next update: Sat 18 Apr 2026 14:01:37 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: B9kjj2WtIpHiQTZsd3Hc/3dlp7NYZ73Pu5ubiailHA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:48:42:25:34:73:18:2f:cc:38:be:94:0b:71:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Apr 17 14:01:37 2026 GMT
Not After : Apr 18 14:01:37 2026 GMT
Subject: CN=122a03cc653e47447976d49154a1324a329d8b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:48:2e:96:6c:46:5a:22:d0:49:77:87:7d:
76:85:2b:c1:6e:12:25:b6:06:79:11:db:82:ce:7d:
c9:f2:8a:bb:13:3f:e9:eb:f7:f3:75:52:8d:b5:64:
03:c7:d3:ff:0d:0a:ed:1d:ec:d2:81:f4:03:5e:05:
64:bb:1d:ca:1b:fa:53:e8:f1:be:3f:ee:d7:6d:de:
0d:75:17:fc:fd:8b:ec:53:ca:2d:85:1d:50:b3:4b:
d6:3d:c3:fa:c7:93:17:e1:f5:ea:27:63:24:23:9e:
00:5e:49:5b:ed:cc:43:7a:9e:17:f9:44:e2:2d:f1:
ba:50:91:a5:2d:8c:59:1d:10:b4:e0:32:ee:a7:32:
92:14:88:c4:21:a5:6a:af:5a:d1:7b:42:a0:81:b2:
96:9b:d7:eb:bd:b7:25:07:e6:4f:9b:36:54:32:b7:
46:71:cb:9d:eb:ba:dd:e0:9b:74:41:a7:f7:c3:52:
d0:a2:55:7a:e6:55:8a:05:a1:a0:36:d9:96:6a:42:
6a:69:72:54:88:cc:c7:4d:c9:fa:bf:68:7b:28:83:
c0:a1:61:2c:ab:cc:00:bc:70:30:94:73:c2:b1:47:
7a:ca:e9:31:50:27:00:22:5c:2b:b7:da:2d:c8:58:
f1:67:b0:06:4f:29:c6:cb:ab:3c:9b:d9:1c:0a:bf:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:03:CC:65:3E:47:44:79:76:D4:91:54:A1:32:4A:32:9D:8B:54
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7c:c5:c5:22:50:99:b1:82:76:85:4d:1a:53:3b:3f:24:45:
ce:2e:7e:db:f3:50:d3:fb:04:29:b0:15:b0:9f:c4:6b:ce:6c:
85:c6:5f:af:bd:be:f9:b1:0c:38:a3:8e:a9:44:ef:3f:0d:84:
87:62:c7:59:92:e6:4f:16:93:bf:54:7f:4e:3c:ce:d0:3e:c8:
89:aa:74:d4:2f:62:11:cb:b3:69:41:67:54:65:a4:57:18:95:
a7:31:57:4a:ca:69:6e:f5:1b:ed:d5:d4:59:d9:7a:d7:13:62:
82:db:85:fe:f9:27:a4:45:ce:aa:c5:b5:84:c4:f9:46:45:49:
1b:7c:5d:76:05:11:d6:5c:6d:82:b7:0e:06:67:9f:ce:50:38:
a9:a4:53:d2:65:be:d0:be:24:ad:d9:f1:50:20:f7:fd:f0:4b:
2c:4e:1b:64:fe:33:c3:ea:37:ba:70:03:03:0e:2f:a8:45:9a:
fc:ff:f8:45:17:3c:93:6d:f7:f3:97:9c:1a:1e:41:c7:28:c8:
1e:f6:0c:d7:de:b8:bf:c4:31:33:bf:4e:da:55:8e:88:b5:d4:
5d:bc:b2:3d:1f:58:fa:2c:4e:91:e1:48:f2:16:ef:ec:76:f1:
e2:e8:6c:af:72:07:a5:e9:e1:5b:ea:8e:f1:b9:f7:6c:3a:a7:
f2:6c:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:51 2026 by rpki-client