Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier: WjCnu3COo8d+Tx1QTWKpHbsp+Qtf/XDUsG+FBVF6/So=
Subject key identifier: C0:DB:AD:EA:13:9F:3D:B5:C9:EE:A0:66:90:28:7B:9F:11:07:92:62
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer: /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial: 019F8F7E9898B9026B0616DFD9DD99BC25FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:06 +0000
Manifest this update: Thu 23 Jul 2026 15:01:06 +0000
Manifest next update: Fri 24 Jul 2026 15:01:06 +0000
Files and hashes: 1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: QhQx18AHjBERIpz80LFjLB9bFdj9bdMThfmNAOTjZCk=)
2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:98:98:b9:02:6b:06:16:df:d9:dd:99:bc:25:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Validity
Not Before: Jul 23 15:01:06 2026 GMT
Not After : Jul 24 15:01:06 2026 GMT
Subject: CN=c0dbadea139f3db5c9eea06690287b9f11079262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:28:03:9b:99:b5:9b:95:91:8f:8f:da:89:
91:37:43:e4:c4:90:54:4e:fe:3b:c4:2e:8f:90:29:
fc:5c:3f:69:9b:cb:5c:09:d6:36:ba:9c:42:fc:c0:
1d:09:3a:8a:25:08:cd:38:74:46:1e:e3:43:65:df:
83:5d:b1:c5:69:d5:4c:a6:e3:eb:26:4b:8c:5c:56:
0c:af:a5:de:61:03:c5:4a:ea:9c:cc:86:a8:be:57:
68:e0:7d:07:0e:ae:75:ba:26:43:3f:42:2d:02:4b:
50:79:84:c1:a5:c4:28:ba:64:28:22:91:28:29:48:
16:57:ad:1e:7b:c0:de:53:59:62:79:40:b8:36:22:
0e:66:b8:4e:30:54:ab:cb:10:de:aa:d0:08:a7:9d:
c5:de:6f:0e:c4:37:4b:f0:ea:7b:9f:c0:1d:db:3f:
34:a8:c8:c0:13:00:36:52:1a:da:21:8e:65:ff:55:
5c:ce:08:69:fa:f0:0c:f4:7a:d5:3f:af:2a:75:f9:
e6:85:30:24:38:cc:e1:73:f9:69:79:53:c5:a5:74:
11:4b:67:3a:3d:e3:c4:08:67:29:ad:1a:2c:d6:45:
06:b0:d6:d9:e3:f7:b5:e9:f5:86:7d:a0:e1:ca:54:
e1:ac:ec:86:d2:d5:9a:29:87:a6:4a:49:e9:bb:8e:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:AD:EA:13:9F:3D:B5:C9:EE:A0:66:90:28:7B:9F:11:07:92:62
X509v3 Authority Key Identifier:
keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:99:bd:4b:14:d8:b6:8a:e6:d5:4a:4a:88:41:62:39:0a:a8:
0e:6b:7f:e7:81:31:e2:77:44:99:05:26:9c:9a:90:31:9b:92:
e9:e9:39:d9:e8:17:9a:aa:22:59:e7:f0:a1:48:66:dc:c2:74:
97:bc:15:cb:b4:67:14:58:23:a9:f3:8f:70:7f:a8:3e:66:b2:
bd:ea:e6:36:b5:86:7b:82:1f:8f:46:ee:95:15:30:8d:7c:0a:
d5:88:3b:59:39:77:c9:41:9c:6c:04:c6:05:6c:ce:c2:02:4d:
ec:f5:64:43:30:64:86:d7:fd:a5:6d:fd:4a:4e:a9:e0:ef:2d:
78:19:e8:75:78:f7:18:69:ed:2c:22:c6:2d:23:b1:38:93:6f:
d5:b3:3a:38:5e:44:16:2c:16:e0:d4:5b:8f:8f:26:2e:85:27:
51:e4:7a:dc:c0:4f:68:a6:2f:b3:55:42:ca:41:9c:e1:88:75:
77:d4:5a:fe:31:5f:7a:0d:08:b4:7b:e6:d4:94:ac:00:dc:82:
c8:16:f7:1d:b0:89:66:5c:b1:a6:b7:92:d5:b1:97:4c:b0:c0:
a8:02:d6:b7:5a:a5:90:a4:60:af:e2:33:e7:cd:c0:0a:90:2e:
76:8c:3a:00:21:95:90:e3:cc:97:79:bd:2a:62:77:9a:21:ea:
a4:4c:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:29 2026 by rpki-client