Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: MfSpj4X1Ur8Cg/shtAGC2c8vP2Lip0YxuZuun9yCsLY=
Subject key identifier: A1:82:01:61:85:D6:80:71:54:22:4B:77:04:5B:25:5E:AD:41:BE:84
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 019D26CCFDD7DB36CE79580DA7A6B7367657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: MY7fVngjzkG4uSUfcLJNGvqXYpUbAJFcZ3V5+C2Gu8s=)
2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fd:d7:db:36:ce:79:58:0d:a7:a6:b7:36:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=a182016185d6807154224b77045b255ead41be84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:4d:e4:fd:31:e4:ea:c4:d1:24:3f:fc:80:
97:37:69:7c:aa:f1:cc:c9:f0:da:34:8e:fc:04:9c:
24:61:c9:3d:06:d1:4d:ed:0e:af:3b:9c:6c:1b:67:
93:9e:74:31:32:bb:27:28:1b:5f:f2:f6:5a:cb:aa:
29:27:e9:13:96:a4:8b:0b:19:37:b2:a2:36:5a:85:
d0:df:09:db:5a:6a:74:02:e7:e8:36:99:55:e2:db:
5d:da:c5:b1:9c:44:53:63:b1:29:4f:76:24:70:23:
68:2a:f5:ff:ca:3b:a6:3d:15:e7:de:41:93:a5:f3:
65:b2:d5:65:ca:52:19:51:65:63:e2:a4:18:9b:83:
b9:97:ec:93:2c:33:95:96:1a:a1:40:55:51:1f:8c:
1d:89:e9:28:66:da:ef:f4:6a:3c:35:aa:16:76:a0:
aa:89:7d:8b:83:3c:28:68:34:93:4f:e0:c1:d9:55:
41:e2:d0:dd:a5:69:c5:af:7f:dc:2d:dc:f5:ed:f4:
46:85:36:73:33:37:0e:8c:52:d7:f6:4f:32:7e:bc:
c1:f5:09:c8:2c:64:00:68:6c:3d:8c:bc:be:f1:33:
63:02:45:d1:0a:53:63:8b:4e:d6:9b:a1:87:41:6e:
76:50:e7:f9:10:c8:7e:3b:5f:47:b2:5e:0d:e1:e5:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:01:61:85:D6:80:71:54:22:4B:77:04:5B:25:5E:AD:41:BE:84
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:f8:9a:a9:a7:5a:05:da:97:01:01:9e:75:0c:bc:75:8a:
d7:53:3f:aa:f6:55:32:14:a2:c4:39:87:ec:59:32:af:e6:d0:
b8:b8:1c:be:d8:11:2a:f2:41:9a:ab:2e:d6:96:70:eb:46:89:
ee:d1:2d:77:df:dd:1c:49:ff:8c:ca:e0:37:52:94:10:85:be:
cd:0c:0d:de:b3:ac:80:58:a2:d1:a6:fa:ec:e8:bd:0c:c2:81:
82:c7:e1:43:b8:55:f3:51:30:b6:96:4f:7f:66:ac:24:0c:55:
c5:4b:2e:ee:d1:43:b1:1d:cd:35:5a:8f:55:72:85:1e:67:70:
06:e4:9b:a1:37:02:a5:a7:a4:0b:b5:ed:76:53:dc:29:5f:d2:
58:03:40:08:c5:9d:f1:6c:ba:aa:46:7e:2e:fa:c5:22:4f:2d:
6e:c3:1f:a9:5c:18:34:fb:8d:35:b3:8f:af:b4:79:d1:1b:2b:
80:58:96:a2:5f:e5:b6:e2:90:86:61:ad:ec:60:c8:69:e1:c1:
f7:6a:1f:37:9f:83:1e:31:17:00:8f:10:5e:6e:69:92:7d:ba:
d3:67:3d:6b:04:57:85:80:3d:84:ef:b2:af:0e:21:18:41:ca:
ce:44:31:eb:8c:bc:1c:9f:d1:16:c7:50:a7:71:76:62:77:22:
10:90:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:03 2026 by rpki-client