Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: rft+TqhTiel5/YuQ+S8fmOqhJPUjzthcF04DtRf9wI4=
Subject key identifier: 80:B3:D1:EE:48:EC:F4:83:7D:76:ED:54:AA:2A:F1:E5:AA:C4:18:87
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019E1E6C8416E0EB3906956602A802064E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 11DC
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: OOxdNT3xsVogYoS2798p95A7Hdm/CWnAnvHOjmBrdDg=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:84:16:e0:eb:39:06:95:66:02:a8:02:06:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=80b3d1ee48ecf4837d76ed54aa2af1e5aac41887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:4b:4e:31:57:b2:6a:0b:8e:31:4f:09:b9:
bd:41:fc:89:97:65:2b:8d:90:dc:db:13:d1:f2:c5:
8c:5a:ab:21:3c:37:23:49:a0:a2:7f:93:ff:0e:b4:
ab:58:a9:80:ba:52:5f:d8:73:53:5e:90:0f:40:55:
22:e0:5e:46:4f:c7:69:8c:37:b9:72:14:3d:da:b9:
98:51:0b:fc:a8:bb:90:a3:c1:9d:a8:91:03:61:be:
a9:3c:7c:7a:46:5f:60:9e:3c:ed:86:f0:ac:b1:78:
0f:b3:b2:62:cf:03:4c:00:85:1e:b9:dc:d2:7f:95:
d6:51:ed:b4:9a:3c:36:81:a3:07:92:cd:f4:37:50:
ed:9c:fa:ac:da:dd:69:e9:74:61:c8:aa:47:93:a5:
d9:c7:a3:40:1c:14:8e:f6:f9:fe:6f:09:04:27:39:
f8:5f:f7:5d:a7:1a:38:0e:28:77:84:86:2f:5e:c1:
25:3b:42:c5:90:6b:7d:b3:f9:c7:dc:41:5d:c5:a8:
c5:b3:07:e4:70:3e:78:d1:aa:ab:f9:62:02:9e:3b:
08:4e:13:5b:50:3d:3f:83:44:c7:20:dc:6c:c0:75:
1b:08:db:74:9a:5b:9b:d4:91:fa:be:5d:01:5c:44:
5f:b7:3a:b7:a0:3b:45:f2:e6:31:bd:b1:cd:3c:5a:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:D1:EE:48:EC:F4:83:7D:76:ED:54:AA:2A:F1:E5:AA:C4:18:87
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:18:9e:82:87:b2:87:21:0f:3e:4c:21:a1:fe:13:02:a8:7c:
d9:8f:db:6b:c4:46:99:aa:36:bd:c0:25:6f:ee:ce:1a:40:65:
3c:c2:be:01:22:76:3b:a0:97:83:47:c7:26:af:8d:a2:77:32:
4c:df:ac:2b:28:a0:3b:a7:a5:bf:55:3e:b2:e8:e5:11:31:5e:
6f:86:5c:cd:e5:54:4b:dc:35:63:d6:b0:de:5d:c1:07:96:6d:
02:50:5c:a9:a7:b6:ee:7f:38:87:c5:57:dc:df:8c:25:1a:0f:
d6:fb:5d:86:e9:46:4d:80:ed:b5:35:40:de:07:81:7c:50:4a:
0c:50:cd:d3:f0:30:c1:4c:2f:f1:20:8c:d4:fe:eb:0f:27:df:
5b:ee:5e:32:c7:06:70:23:85:36:f4:f3:fe:e7:f4:84:34:c9:
ef:21:39:a1:3c:d3:4e:2c:ba:d1:d6:a7:4c:a7:38:19:23:10:
26:55:0d:0b:27:56:75:50:48:05:42:42:86:04:f2:85:01:5f:
78:40:5a:6f:9a:f4:08:fc:67:c7:b0:4f:0a:50:52:5a:7d:51:
c0:39:a9:fd:9c:58:2e:5e:84:f7:08:ce:cb:59:c8:f9:30:39:
ad:32:57:72:00:05:f4:db:b9:52:de:74:10:17:38:7e:23:63:
48:40:9e:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebIQW4Os5BpVmAqgCBk5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl
NGU0NjcwHhcNMjYwNTEyMjMwMTI4WhcNMjYwNTEzMjMwMTI4WjAzMTEwLwYDVQQD
Eyg4MGIzZDFlZTQ4ZWNmNDgzN2Q3NmVkNTRhYTJhZjFlNWFhYzQxODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXZLTjFXsmoLjjFPCbm9QfyJl2Ur
jZDc2xPR8sWMWqshPDcjSaCif5P/DrSrWKmAulJf2HNTXpAPQFUi4F5GT8dpjDe5
chQ92rmYUQv8qLuQo8GdqJEDYb6pPHx6Rl9gnjzthvCssXgPs7JizwNMAIUeudzS
f5XWUe20mjw2gaMHks30N1DtnPqs2t1p6XRhyKpHk6XZx6NAHBSO9vn+bwkEJzn4
X/ddpxo4Dih3hIYvXsElO0LFkGt9s/nH3EFdxajFswfkcD540aqr+WICnjsIThNb
UD0/g0THINxswHUbCNt0mlub1JH6vl0BXERftzq3oDtF8uYxvbHNPFp4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICz0e5I7PSDfXbtVKoq8eWqxBiHMB8GA1UdIwQY
MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt
ZjM3OTdjZmQ2NWFlLzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl
LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBiegoey
hyEPPkwhof4TAqh82Y/ba8RGmao2vcAlb+7OGkBlPMK+ASJ2O6CXg0fHJq+Noncy
TN+sKyigO6elv1U+sujlETFeb4ZczeVUS9w1Y9aw3l3BB5ZtAlBcqae27n84h8VX
3N+MJRoP1vtdhulGTYDttTVA3geBfFBKDFDN0/AwwUwv8SCM1P7rDyffW+5eMscG
cCOFNvTz/uf0hDTJ7yE5oTzTTiy60danTKc4GSMQJlUNCydWdVBIBUJChgTyhQFf
eEBab5r0CPxnx7BPClBSWn1RwDmp/ZxYLl6E9wjOy1nI+TA5rTJXcgAF9Nu5Ut50
EBc4fiNjSECeYw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:51:21 2026 by rpki-client