Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: xJaq14PAx1gAVdrD0S3XJkdGgIzLo4HpPb/DReEzS3E=
Subject key identifier: 46:81:3F:1D:EB:7F:E5:B6:2E:B3:0C:E1:50:33:1B:01:9D:70:97:5A
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 019F8ED9B0C045DC302512D2E7F5DD7E5F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 12:00:58 +0000
Manifest this update: Thu 23 Jul 2026 12:00:58 +0000
Manifest next update: Fri 24 Jul 2026 12:00:58 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: fsznWbF/iLbefckDnjs4+BJP29ibaevcgrp1eYGNitI=)
2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:b0:c0:45:dc:30:25:12:d2:e7:f5:dd:7e:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Jul 23 12:00:58 2026 GMT
Not After : Jul 24 12:00:58 2026 GMT
Subject: CN=46813f1deb7fe5b62eb30ce150331b019d70975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:29:1c:0b:0b:63:38:f8:dc:4f:68:fb:e2:
53:57:8b:b9:79:e1:81:58:a8:fd:00:b2:c2:a5:c5:
b4:e4:5b:81:a5:4f:80:9c:4d:19:2a:42:a2:f9:dc:
3b:77:e4:79:16:2b:e2:49:0c:09:8a:96:1c:55:74:
e5:02:93:9c:6e:c4:d5:55:07:be:0f:78:64:4e:cc:
02:47:2a:7e:a6:9b:05:1f:45:48:4c:00:01:54:fc:
3a:d6:d4:37:ca:0d:2d:7d:79:35:45:52:4d:23:c9:
94:ca:4d:56:ca:46:f7:d3:6d:99:88:61:c9:cc:3b:
63:44:a4:69:b3:8e:e2:4f:83:c2:c8:f7:db:b9:98:
09:f2:c8:71:6b:f6:94:66:d8:f9:18:27:25:46:6f:
b0:66:29:fc:55:b6:90:bb:b7:17:85:f9:1b:61:7e:
3f:cc:06:7e:bf:db:6a:36:f2:bd:99:b9:5d:8b:d3:
9f:cb:fd:a0:b0:14:2e:66:30:d9:37:80:13:2e:02:
98:26:d2:bb:e7:17:cc:e3:50:d4:a7:25:44:c4:89:
f4:8d:d1:9d:59:66:02:05:62:90:02:bb:74:73:9b:
fd:e0:73:d9:64:59:52:df:7c:75:54:8e:83:6c:48:
c5:2e:51:c7:06:60:92:c3:e4:c3:44:21:9b:b4:08:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:3F:1D:EB:7F:E5:B6:2E:B3:0C:E1:50:33:1B:01:9D:70:97:5A
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:04:ca:c6:4f:0f:0b:c3:5e:f9:19:86:07:7b:26:0a:ae:01:
12:ef:2d:bb:9a:5b:b2:45:77:d5:5a:6a:70:7e:da:0e:6e:b9:
86:f1:f2:89:ef:70:9a:2c:9e:d9:34:c6:9e:3c:6e:df:1a:d3:
bc:7d:d0:1f:9e:76:d3:ea:63:b1:e0:1c:13:1c:3a:ac:a1:32:
a1:e7:a3:cf:62:4e:11:be:c4:4c:91:d1:00:e3:20:63:10:f6:
51:5c:35:3b:82:d6:35:75:8d:2c:79:88:eb:0b:b3:ab:96:a2:
97:15:92:ba:3b:d3:f7:37:da:26:6e:b3:b2:04:ec:d8:4d:80:
21:48:ee:39:62:15:4f:e7:63:5c:a7:32:06:c5:ee:a1:71:7f:
b8:af:ae:04:d5:fc:01:6d:95:c9:60:15:07:e5:e5:48:81:ee:
b6:93:19:a4:09:86:c6:94:4a:c8:2a:17:ea:3a:a9:23:fe:ea:
da:13:c0:f2:81:cc:02:84:dd:f5:0f:b5:67:a5:ff:d7:9d:e3:
64:e8:76:8d:be:30:8e:9c:09:d8:e6:e5:f2:ff:17:e3:4e:22:
07:ae:93:39:f9:f7:e2:5a:6e:cd:1b:9a:1d:4a:03:e6:17:3e:
0a:88:64:05:70:52:35:a1:f3:59:7b:72:f9:f8:0e:89:89:8b:
ce:7a:0f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client