
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: No8CMi03rm0y0pbMLGU3A+D1Sw5E0+otm3vs+CtX0KA=
Subject key identifier: 27:9F:7E:AC:D1:6A:48:26:07:9D:01:81:AF:48:78:03:7B:A3:25:F9
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 019CAFECB7FD7A392AF411156C94F9E5EFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 19:00:52 +0000
Manifest this update: Mon 02 Mar 2026 19:00:52 +0000
Manifest next update: Tue 03 Mar 2026 19:00:52 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: Xx80LLnb0vr7u1EeC6FsuolmUkTwHuX/8k5QzZ+vPko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:b7:fd:7a:39:2a:f4:11:15:6c:94:f9:e5:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Mar 2 19:00:52 2026 GMT
Not After : Mar 3 19:00:52 2026 GMT
Subject: CN=279f7eacd16a4826079d0181af4878037ba325f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dc:4d:1f:c7:f9:43:3b:e3:a5:23:06:3c:fb:
a1:8a:07:b2:55:2b:40:1c:bc:3f:9a:ee:9a:62:0a:
1d:12:7f:78:e2:3f:72:34:48:bd:08:dd:af:bf:b4:
b2:d0:ac:d5:52:40:fe:1d:70:23:e1:c8:22:8a:91:
50:d9:64:d4:95:dc:46:9b:b5:a0:03:bd:cd:86:20:
1e:89:af:e0:81:0a:15:a6:e1:cb:8f:36:d0:63:6d:
d7:f7:7e:5d:f6:eb:b2:ca:7a:5b:f1:83:82:e6:01:
62:96:25:91:ad:ce:9f:0e:44:8c:b5:35:c7:70:41:
4a:f5:15:f6:5e:a9:3d:96:54:a3:d9:8c:15:bf:0a:
e0:d9:0f:64:92:6e:cd:24:52:cb:ce:8e:78:07:c1:
85:67:71:ae:b2:e0:78:a5:53:30:f1:06:e3:62:59:
d7:36:17:44:ca:1d:29:f0:91:0a:f8:d0:51:ba:8e:
19:48:3e:8d:f3:ac:34:ac:f1:23:2d:4a:c3:bc:56:
17:d4:58:1e:9d:a4:4a:0b:90:a4:19:63:50:af:60:
a6:8e:2e:66:8f:b6:ad:42:b4:83:08:58:55:f3:ef:
ae:93:d0:c5:d2:ac:6f:fe:e3:52:8f:0f:09:1d:b0:
a9:58:e5:4f:5f:48:15:f0:4e:a4:98:c7:40:dc:2b:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9F:7E:AC:D1:6A:48:26:07:9D:01:81:AF:48:78:03:7B:A3:25:F9
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f2:15:0b:89:17:4c:e8:7a:f3:2b:b1:14:52:08:82:f1:19:
5b:13:05:f1:4c:02:09:d5:0f:5b:d2:e4:2f:bc:60:5f:89:a6:
f1:5f:84:88:90:2a:0a:8e:c1:91:f3:4b:b0:7a:a0:0b:d7:4d:
6e:ef:a2:3e:70:b5:95:85:60:e5:97:2a:d4:ed:9e:d7:fc:1c:
25:92:2a:ee:d5:bd:3e:cf:a8:85:14:e8:b9:09:46:77:e0:ad:
28:4f:fd:49:ce:8d:90:0b:35:56:82:6d:cb:4c:bb:af:26:ea:
43:1b:df:cd:be:50:24:81:e1:0a:4a:a7:98:8f:26:83:f9:e1:
c0:da:2e:ea:fc:bf:06:90:a3:0e:02:bb:02:3a:50:84:de:41:
99:f8:d7:cf:fe:5e:28:0b:5d:bf:f6:c8:af:6a:95:dc:71:8e:
b5:76:c9:a6:bd:89:fb:c4:fe:d6:da:0d:a4:20:6c:86:f1:9b:
ce:74:94:7e:68:26:88:0c:64:5b:36:94:ab:a3:23:6d:49:43:
63:16:e1:5a:87:c0:b4:0e:81:e9:15:ce:22:5e:bd:79:f9:d1:
30:f1:ef:38:ef:17:c8:df:db:3f:8b:a8:20:c1:df:3f:3b:d6:
98:7b:c3:fb:70:97:fd:11:9f:c1:cd:75:ee:a0:24:7f:c4:c9:
1b:9f:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:51 2026 by rpki-client