
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: EvJtxvkBJAXz0WuVgvwo+pIENPWDcOMuNhRKa0qVUeY=
Subject key identifier: 8A:9D:2A:57:CF:65:5D:11:F7:87:30:99:97:8E:1F:AF:6E:B1:5E:77
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019E1CB4A5C7036576D945818504CE99768F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 0871
Signing time: Tue 12 May 2026 15:01:01 +0000
Manifest this update: Tue 12 May 2026 15:01:01 +0000
Manifest next update: Wed 13 May 2026 15:01:01 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: wBETUIM0B3utu6c+/8FQJ9uLFUehhpNxYyCJMIuknKg=)
2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:a5:c7:03:65:76:d9:45:81:85:04:ce:99:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: May 12 15:01:01 2026 GMT
Not After : May 13 15:01:01 2026 GMT
Subject: CN=8a9d2a57cf655d11f7873099978e1faf6eb15e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:0d:ad:74:81:c8:2a:d9:b2:97:47:c1:d0:
c9:21:5f:9e:fd:d0:e6:cc:21:f5:3b:1a:94:c7:7e:
d6:89:0f:98:23:81:88:62:af:4d:55:dd:d9:f9:6f:
fe:c7:0b:b2:b9:57:32:ee:a7:e5:34:2e:c6:0c:27:
81:12:87:da:a6:88:54:e4:5f:90:4c:d7:44:18:0c:
bd:7a:20:69:b6:e8:5d:f5:d1:1e:d0:09:98:b9:8d:
1f:9e:e5:11:9b:64:46:72:dc:5b:8a:88:04:3d:94:
97:6d:a9:87:f1:fe:26:36:73:80:20:98:d4:ac:fc:
9a:ef:d1:2b:b3:f8:34:d4:4d:71:0d:2a:d1:7d:f9:
32:15:69:42:ca:5f:56:c1:a1:83:90:9c:81:df:83:
e2:f7:0f:84:fb:1d:4b:53:84:26:52:e8:19:5c:16:
e3:2f:ed:a2:a2:76:82:5b:f6:d4:67:f3:93:c3:73:
ba:e2:3a:67:9c:d7:f1:9c:07:fa:ca:6f:d8:77:22:
d3:9d:42:ce:a4:4d:c5:eb:c8:d4:33:6f:41:a9:b5:
81:38:ee:9a:3c:37:87:f9:77:14:d6:ca:45:3b:6e:
cb:e3:40:fd:9d:cb:2d:91:3b:77:08:c3:44:a6:fc:
09:72:43:da:39:b8:2c:3e:4d:b4:6d:56:58:78:3e:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:2A:57:CF:65:5D:11:F7:87:30:99:97:8E:1F:AF:6E:B1:5E:77
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:e5:fe:47:a1:99:8e:b9:3c:a6:e4:32:c7:33:d0:c8:d4:
16:9b:79:1d:20:e5:7d:4b:a7:35:ff:83:e1:6c:b3:2b:63:7b:
be:ac:ab:71:71:96:d2:13:37:fe:da:b5:2d:de:57:d2:93:60:
02:1d:23:6d:8c:31:d7:d8:0f:e3:e7:61:a2:e3:70:2e:d1:98:
75:d0:f3:02:63:1d:29:a0:19:87:61:0c:26:07:22:7f:79:9e:
0e:ba:04:01:ed:66:4d:28:40:29:3b:37:13:90:d1:2b:f1:13:
15:04:cd:0d:af:e3:0f:61:9a:13:56:e6:68:35:5e:d0:ef:5d:
bd:02:d0:e9:d4:ac:5d:ad:28:cd:24:89:be:9d:81:cd:c9:05:
09:93:2c:85:26:51:5e:05:9b:82:d8:5a:98:7e:81:62:f7:43:
61:05:5b:e5:63:1c:5d:09:75:e1:0a:bd:d5:7e:cd:4e:57:df:
27:9e:a7:4a:a4:5a:c9:9e:92:e6:7e:b4:22:96:60:c2:f3:0e:
58:05:d1:24:90:15:1f:1a:03:df:6e:4d:2d:2a:1f:33:63:2f:
9e:16:05:a9:26:20:74:e6:e8:3d:59:c9:35:eb:4b:bc:d4:ce:
17:f1:60:63:9f:96:2c:8f:fc:b7:80:27:74:dd:d3:5b:1f:12:
7f:b4:e8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctKXHA2V22UWBhQTOmXaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1
ZjMzMjgwHhcNMjYwNTEyMTUwMTAxWhcNMjYwNTEzMTUwMTAxWjAzMTEwLwYDVQQD
Eyg4YTlkMmE1N2NmNjU1ZDExZjc4NzMwOTk5NzhlMWZhZjZlYjE1ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQQNrXSByCrZspdHwdDJIV+e/dDm
zCH1OxqUx37WiQ+YI4GIYq9NVd3Z+W/+xwuyuVcy7qflNC7GDCeBEofapohU5F+Q
TNdEGAy9eiBptuhd9dEe0AmYuY0fnuURm2RGctxbiogEPZSXbamH8f4mNnOAIJjU
rPya79Ers/g01E1xDSrRffkyFWlCyl9WwaGDkJyB34Pi9w+E+x1LU4QmUugZXBbj
L+2ionaCW/bUZ/OTw3O64jpnnNfxnAf6ym/YdyLTnULOpE3F68jUM29BqbWBOO6a
PDeH+XcU1spFO27L40D9ncstkTt3CMNEpvwJckPaObgsPk20bVZYeD7GDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqdKlfPZV0R94cwmZeOH69usV53MB8GA1UdIwQY
MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt
OThkYWJlM2UyNjYyLzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy
LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtHl/keh
mY65PKbkMscz0MjUFpt5HSDlfUunNf+D4WyzK2N7vqyrcXGW0hM3/tq1Ld5X0pNg
Ah0jbYwx19gP4+dhouNwLtGYddDzAmMdKaAZh2EMJgcif3meDroEAe1mTShAKTs3
E5DRK/ETFQTNDa/jD2GaE1bmaDVe0O9dvQLQ6dSsXa0ozSSJvp2BzckFCZMshSZR
XgWbgthamH6BYvdDYQVb5WMcXQl14Qq91X7NTlffJ56nSqRayZ6S5n60IpZgwvMO
WAXRJJAVHxoD325NLSofM2MvnhYFqSYgdOboPVnJNetLvNTOF/FgY5+WLI/8t4An
dN3TWx8Sf7ToBg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:39 2026 by rpki-client