Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: zjxhwH43AJYoyrrQqcH4H0HE/9oFlXts0B9w5JImJtE=
Subject key identifier: D8:B8:CA:18:AB:59:01:C6:6A:5C:FC:80:77:56:F9:A5:8B:F7:29:0D
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019E1C0F885113CD293897A4F6A55C102C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 1640
Signing time: Tue 12 May 2026 12:00:40 +0000
Manifest this update: Tue 12 May 2026 12:00:40 +0000
Manifest next update: Wed 13 May 2026 12:00:40 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: 7qVmRetinFDLiMWQebGTMxiOB2ri/8hY9i2dhp6KzfA=)
2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:88:51:13:cd:29:38:97:a4:f6:a5:5c:10:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: May 12 12:00:40 2026 GMT
Not After : May 13 12:00:40 2026 GMT
Subject: CN=d8b8ca18ab5901c66a5cfc807756f9a58bf7290d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9e:7a:23:dd:0a:42:ee:44:3c:33:2a:f3:67:
df:fa:4c:4d:62:58:30:d3:80:43:37:4e:a9:d8:55:
8b:da:81:3d:61:98:59:4f:80:bc:b1:21:9a:a6:7a:
be:24:f3:98:67:37:78:4f:54:0c:e6:ad:3d:44:c5:
ba:b9:ad:be:6d:9b:68:e6:3d:eb:97:ab:8a:f6:9a:
86:49:eb:f1:f2:60:49:43:fa:98:05:40:3f:59:52:
a4:50:14:58:d5:8a:85:0a:92:fc:51:5b:89:54:e3:
31:3e:ef:73:c8:f0:0d:f1:2c:9c:16:14:32:05:44:
00:e0:37:d5:f5:86:cd:f3:93:54:58:9d:df:34:79:
9f:fa:dd:79:d1:3f:46:3c:da:42:ab:10:11:cc:d2:
d1:49:21:74:a5:e6:9e:5d:1e:36:c1:50:61:bf:1a:
4c:93:0d:68:dc:69:d8:cf:35:9a:64:a8:ff:0f:28:
ca:24:ce:d1:f4:47:dc:25:2d:81:da:e1:80:40:21:
32:83:59:57:4f:e1:20:d8:19:16:9b:bb:6d:cc:11:
dd:17:50:12:40:75:11:1b:31:b7:f4:68:1f:50:91:
40:14:02:e0:a7:b7:fd:c2:fb:78:27:cc:50:af:03:
f7:5c:d7:41:fc:a5:93:cb:04:7c:3d:5a:ad:7b:21:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:CA:18:AB:59:01:C6:6A:5C:FC:80:77:56:F9:A5:8B:F7:29:0D
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e4:eb:f3:64:d6:9e:e3:56:4f:ec:3f:56:85:bd:38:c4:56:
29:68:05:b7:44:61:1d:5c:60:fb:c9:f2:9c:c6:9b:24:9e:2b:
24:1a:61:03:37:da:53:90:88:79:36:41:ba:c1:5e:c7:fc:65:
18:c4:06:79:fa:8b:70:06:12:cd:7d:eb:7f:3b:d2:8f:19:64:
70:ab:5f:e9:52:31:e8:a5:9b:1e:b7:dd:0f:ee:6e:99:39:f8:
f1:33:d2:7b:be:2a:1a:90:28:65:6a:72:9d:47:33:2c:73:10:
99:9f:22:64:dd:43:44:21:a4:53:0b:7b:e4:4e:ab:60:b8:ba:
8a:0b:8a:51:1e:7c:be:b8:92:ed:c4:60:a1:ef:96:ce:b9:57:
4c:1e:61:69:3c:b3:db:c2:fb:f7:67:07:e9:e6:9a:58:18:cb:
32:af:9a:56:5d:0b:53:86:1c:8c:db:4c:fd:2c:ec:50:54:5b:
21:59:ca:b8:43:f8:c4:db:9d:3c:ef:24:84:0b:b5:ac:8b:36:
17:53:75:74:7e:35:0e:1d:68:68:fb:b9:e1:b8:05:1c:ea:d9:
62:04:f4:a2:fb:82:8a:b1:7c:5f:f5:3f:0d:cc:63:27:92:75:
1d:94:45:d9:58:fd:a3:f8:e6:5d:38:84:93:ec:bf:fa:f2:ad:
e1:c1:b7:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD4hRE80pOJek9qVcECxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjYwNTEyMTIwMDQwWhcNMjYwNTEzMTIwMDQwWjAzMTEwLwYDVQQD
EyhkOGI4Y2ExOGFiNTkwMWM2NmE1Y2ZjODA3NzU2ZjlhNThiZjcyOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p56I90KQu5EPDMq82ff+kxNYlgw
04BDN06p2FWL2oE9YZhZT4C8sSGapnq+JPOYZzd4T1QM5q09RMW6ua2+bZto5j3r
l6uK9pqGSevx8mBJQ/qYBUA/WVKkUBRY1YqFCpL8UVuJVOMxPu9zyPAN8SycFhQy
BUQA4DfV9YbN85NUWJ3fNHmf+t150T9GPNpCqxARzNLRSSF0peaeXR42wVBhvxpM
kw1o3GnYzzWaZKj/DyjKJM7R9EfcJS2B2uGAQCEyg1lXT+Eg2BkWm7ttzBHdF1AS
QHURGzG39GgfUJFAFALgp7f9wvt4J8xQrwP3XNdB/KWTywR8PVqteyFVuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi4yhirWQHGalz8gHdW+aWL9ykNMB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOTr82TW
nuNWT+w/VoW9OMRWKWgFt0RhHVxg+8nynMabJJ4rJBphAzfaU5CIeTZBusFex/xl
GMQGefqLcAYSzX3rfzvSjxlkcKtf6VIx6KWbHrfdD+5umTn48TPSe74qGpAoZWpy
nUczLHMQmZ8iZN1DRCGkUwt75E6rYLi6iguKUR58vriS7cRgoe+WzrlXTB5haTyz
28L792cH6eaaWBjLMq+aVl0LU4YcjNtM/SzsUFRbIVnKuEP4xNudPO8khAu1rIs2
F1N1dH41Dh1oaPu54bgFHOrZYgT0ovuCirF8X/U/DcxjJ5J1HZRF2Vj9o/jmXTiE
k+y/+vKt4cG3Ug==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:47 2026 by rpki-client