Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: lNll+nXCtGsOTLwDholhRS5+FqOOI1WqcYp1K/YOo+Y=
Subject key identifier: AC:22:F3:F1:8F:22:80:BB:97:8C:C0:63:1E:98:16:AA:FD:71:9D:04
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 01A0DB72190B669A6D4573158C465230EA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 1347
Signing time: Sat 26 Sep 2026 02:01:22 +0000
Manifest this update: Sat 26 Sep 2026 02:01:22 +0000
Manifest next update: Sun 27 Sep 2026 02:01:22 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: hgBFHXHOV1+/VO4pYS7OV9lq/dvTigd3OTltsAQ7K/M=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:19:0b:66:9a:6d:45:73:15:8c:46:52:30:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Sep 26 02:01:22 2026 GMT
Not After : Sep 27 02:01:22 2026 GMT
Subject: CN=ac22f3f18f2280bb978cc0631e9816aafd719d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:2e:79:4b:5d:94:a3:59:19:c8:dc:37:f1:
c7:b9:4e:21:7c:56:da:bf:7d:a0:7f:db:78:14:28:
17:f4:37:78:73:04:e5:30:27:b2:ea:c1:87:26:03:
4b:2e:c1:eb:4a:b9:c7:82:6b:d3:7a:79:be:d9:2d:
2f:65:91:f1:66:ec:eb:f3:b8:0a:e4:b0:10:d9:78:
12:b7:a7:7e:f8:bf:56:0f:81:2b:e9:c5:ef:ac:f4:
2f:bf:35:63:f9:96:a8:15:63:fa:27:66:1f:67:40:
96:9e:70:ed:4a:83:85:b1:27:c6:ca:1b:87:18:1c:
95:30:e7:e2:a5:d0:93:3a:60:96:ff:80:f7:fb:eb:
1d:4f:be:5e:6a:bf:72:55:34:44:7e:32:7b:18:80:
4b:fb:31:4e:22:d4:13:e6:ab:3a:75:ba:58:d3:7d:
ec:03:73:97:49:85:7c:55:09:1e:a8:54:04:f7:e4:
2f:bd:40:b5:ee:a3:4b:79:fb:3a:61:3d:de:50:cf:
1f:0c:72:87:97:48:45:8c:0b:ff:f8:6f:3b:76:d1:
03:b3:f7:c0:bb:f6:9e:e7:05:c7:68:50:b4:2d:a2:
5b:79:3c:ff:f5:ca:85:15:1c:cc:11:ac:c0:8a:a8:
7d:f0:45:b6:29:97:76:c2:49:94:a9:65:b4:88:4e:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:F3:F1:8F:22:80:BB:97:8C:C0:63:1E:98:16:AA:FD:71:9D:04
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c3:df:9d:0b:6e:fe:95:58:bd:1d:bb:41:fb:a9:a2:c9:9c:
0b:54:f2:31:bd:5d:eb:4d:d8:65:af:29:bc:65:6e:5e:1a:c6:
cd:7b:26:50:e1:92:63:5b:a3:30:b8:97:10:9a:25:d6:8d:eb:
a4:56:bd:75:63:3e:3e:b8:93:db:17:fd:8d:84:18:0a:be:c1:
b9:47:51:27:0d:bc:9e:03:50:d5:0f:5b:b3:35:f6:66:fb:91:
25:d0:45:83:45:89:bf:6b:db:77:b6:bd:f0:00:1f:7b:40:c0:
9a:dd:38:ff:84:89:f4:31:cb:27:d8:7d:89:d6:2a:8e:b3:bb:
e9:ae:22:16:41:27:39:d1:e8:1c:ca:11:e3:85:dc:68:8a:c3:
45:a0:6f:7b:a7:e5:9e:56:cf:08:43:ce:7e:85:9e:2f:fa:1c:
64:6d:b4:fb:55:9a:fe:8b:77:be:03:4c:77:9a:d4:bd:cd:53:
46:15:d7:6a:66:b0:9e:3f:ae:40:89:18:6e:e4:57:cf:f6:97:
b4:3b:2f:f4:89:cb:10:33:42:c3:e5:f5:26:0a:5a:ae:85:6c:
8e:93:08:68:b6:e7:45:3c:55:94:a1:f9:e6:49:70:e8:b0:94:
59:7b:e5:3d:df:36:4c:92:68:b6:10:1a:88:46:d3:99:7c:b8:
98:4c:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:31:04 2026 by rpki-client