Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: XXwG0TPXU5Kz1UV/SlSfF1ZSesFxMXfnGJMHOGUx/KE=
Subject key identifier: 10:2A:14:30:D6:B6:22:FD:81:8A:94:94:F4:19:71:43:2C:76:F3:14
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019D28BB2BC79ACF3920E4092A60A1B366C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 15C2
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: U/lpsNQiCtE1/XQuiuC/YKnSwbB5qiKDcP8QfIiqqQA=)
2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2b:c7:9a:cf:39:20:e4:09:2a:60:a1:b3:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=102a1430d6b622fd818a9494f41971432c76f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:ac:7a:45:07:75:be:e2:20:c6:55:37:0d:
9b:21:d9:90:fe:65:1a:d2:3b:80:f5:12:d7:57:b1:
07:2a:36:64:ff:4e:75:2e:85:da:24:9c:22:cf:75:
b0:0f:6f:cb:3c:bf:54:f4:60:84:19:cf:b5:f3:31:
b1:1f:51:b0:36:7b:ab:36:29:ca:38:31:99:db:33:
5c:53:be:48:02:23:c5:19:a8:47:5e:b4:85:5d:42:
90:98:9f:99:6a:04:db:9b:60:3f:e9:8d:73:c2:7c:
42:9f:f1:c4:b6:41:90:06:8c:26:83:00:fb:bd:29:
a3:4d:7a:77:40:3e:a3:ea:4a:8f:6c:f7:9b:ba:57:
78:6b:04:52:0a:5a:20:d9:88:e0:b6:28:53:8a:20:
06:ff:8d:f6:1f:ab:a9:46:77:8c:ef:3b:6b:a3:5b:
7f:a5:e5:f6:b2:50:52:7c:d0:15:33:d2:d2:08:fe:
13:c0:45:b5:f4:ef:af:2a:da:50:ae:f2:b2:47:c2:
66:11:d2:de:a0:20:04:16:ad:09:d3:dd:f5:e7:25:
99:48:78:c7:45:2a:e5:07:0e:3c:2e:d7:80:66:dd:
fa:9e:e5:d3:dc:b3:0b:b8:08:0e:e2:db:84:1a:70:
d6:f4:34:56:fb:dd:bc:cd:13:7a:3c:f7:20:d4:a3:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:14:30:D6:B6:22:FD:81:8A:94:94:F4:19:71:43:2C:76:F3:14
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:af:de:ac:be:30:6e:b4:fc:3b:ac:4a:ea:bb:29:0b:ea:bd:
a4:3f:14:7c:78:11:42:1a:fb:f3:48:b2:ea:62:ff:6e:2c:3d:
fd:12:41:2f:13:02:13:89:2a:5a:92:34:12:b4:10:a1:ad:ae:
b3:20:27:36:5a:63:2d:59:e0:16:8a:a5:6e:22:34:0a:bc:c6:
98:9c:a9:d8:d0:a9:d0:13:32:1c:38:33:e4:05:b5:82:ef:75:
5a:e9:13:3b:00:ad:2f:5f:01:df:eb:b0:ff:fd:5b:c4:3e:47:
7a:ef:b2:90:b5:e0:ff:f1:f4:53:3f:34:41:1c:c5:9c:0c:51:
09:1d:aa:8e:c0:16:22:34:54:ce:30:65:9c:2d:7c:21:a2:b7:
0b:16:a4:d8:13:da:d8:e5:cc:05:02:1e:eb:53:a1:85:0e:5b:
d6:b1:c1:c9:33:1a:48:22:8c:42:48:05:99:1e:2b:13:6b:ce:
73:18:34:ce:fb:b0:2d:6e:66:74:7d:61:7f:5a:63:8a:ed:23:
a0:82:f5:d6:73:c0:c8:9a:7c:b2:0d:d7:32:38:c9:de:47:ae:
94:05:31:b1:2b:78:51:81:31:9e:7e:b8:f4:7b:66:23:e5:86:
41:97:ba:0b:a3:2f:8a:ba:dc:22:5f:e5:68:01:74:16:1e:4f:
2f:0a:75:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouyvHms85IOQJKmChs2bDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjYwMzI2MDYwMDQ4WhcNMjYwMzI3MDYwMDQ4WjAzMTEwLwYDVQQD
EygxMDJhMTQzMGQ2YjYyMmZkODE4YTk0OTRmNDE5NzE0MzJjNzZmMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnOsekUHdb7iIMZVNw2bIdmQ/mUa
0juA9RLXV7EHKjZk/051LoXaJJwiz3WwD2/LPL9U9GCEGc+18zGxH1GwNnurNinK
ODGZ2zNcU75IAiPFGahHXrSFXUKQmJ+ZagTbm2A/6Y1zwnxCn/HEtkGQBowmgwD7
vSmjTXp3QD6j6kqPbPebuld4awRSClog2YjgtihTiiAG/432H6upRneM7ztro1t/
peX2slBSfNAVM9LSCP4TwEW19O+vKtpQrvKyR8JmEdLeoCAEFq0J09315yWZSHjH
RSrlBw48LteAZt36nuXT3LMLuAgO4tuEGnDW9DRW+928zRN6PPcg1KOFYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAqFDDWtiL9gYqUlPQZcUMsdvMUMB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK/erL4w
brT8O6xK6rspC+q9pD8UfHgRQhr780iy6mL/biw9/RJBLxMCE4kqWpI0ErQQoa2u
syAnNlpjLVngFoqlbiI0CrzGmJyp2NCp0BMyHDgz5AW1gu91WukTOwCtL18B3+uw
//1bxD5Heu+ykLXg//H0Uz80QRzFnAxRCR2qjsAWIjRUzjBlnC18IaK3Cxak2BPa
2OXMBQIe61OhhQ5b1rHByTMaSCKMQkgFmR4rE2vOcxg0zvuwLW5mdH1hf1pjiu0j
oIL11nPAyJp8sg3XMjjJ3keulAUxsSt4UYExnn649HtmI+WGQZe6C6MvirrcIl/l
aAF0Fh5PLwp1fQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:45 2026 by rpki-client