Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: qWs6QCtq/U0CCZSbHqwvV+83T6ZXNZTbEgXKwwP8hFU=
Subject key identifier: 19:DD:A7:9A:4A:39:8D:18:52:CC:26:25:EF:5E:2E:79:8D:64:4A:A4
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019D27048951513CD4F5F8A3181A995DBF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 117D
Signing time: Wed 25 Mar 2026 22:01:41 +0000
Manifest this update: Wed 25 Mar 2026 22:01:41 +0000
Manifest next update: Thu 26 Mar 2026 22:01:41 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: TElJjAdeOuPsBBE+TwRrt0bHBlRV8CDFjuZRF72uLOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:89:51:51:3c:d4:f5:f8:a3:18:1a:99:5d:bf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Mar 25 22:01:41 2026 GMT
Not After : Mar 26 22:01:41 2026 GMT
Subject: CN=19dda79a4a398d1852cc2625ef5e2e798d644aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:0a:ce:11:25:4e:f4:08:63:73:b4:cf:68:
65:7d:dd:64:de:07:17:ef:79:6a:f3:ff:f5:cb:c3:
35:5e:ca:03:e1:61:1f:46:88:eb:1b:62:05:02:7b:
93:95:7f:07:ab:b1:e5:f9:98:bb:71:34:c5:b2:6b:
4d:63:db:2a:32:32:48:6b:38:18:25:04:82:7c:f1:
9b:9e:91:f3:e4:ea:7d:f8:a8:9f:e9:14:19:79:ff:
e1:3f:51:00:87:3b:b8:1c:02:c9:be:3d:a4:25:f8:
30:2c:b9:7c:00:13:e0:42:31:9a:28:97:45:a0:8b:
3b:79:a8:cb:dc:56:08:e7:09:6f:59:93:78:e3:9c:
7d:46:ca:04:4a:af:53:e3:20:ac:91:b1:27:99:03:
74:ad:23:05:6e:e7:ca:f0:13:16:08:24:29:bb:df:
e5:14:d8:4c:e1:0f:00:ef:f6:c2:cc:43:fa:01:20:
27:d6:a5:10:9f:d4:02:ca:d6:b2:f7:f2:49:c4:08:
27:c6:f6:ee:e1:13:57:c3:71:8b:7c:41:06:bd:88:
de:99:b0:5c:e0:bd:2c:60:73:fb:f0:ed:c7:c6:c7:
08:44:41:ca:2d:49:9d:6d:09:2d:78:a6:0c:e0:c9:
25:93:60:42:b0:51:80:1c:80:31:b0:77:65:7b:9e:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:A7:9A:4A:39:8D:18:52:CC:26:25:EF:5E:2E:79:8D:64:4A:A4
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:9c:63:d3:05:3d:5c:a1:da:24:eb:1c:47:aa:fd:7b:de:
36:a9:47:b0:f8:a5:a2:33:ba:d8:6f:d6:d9:9e:c3:14:1b:e4:
36:de:5d:dd:57:95:cf:24:32:a7:e7:5f:fc:28:c1:3c:ed:71:
3c:6c:a4:3a:d0:36:2f:20:c6:82:28:f6:f3:5b:3c:53:9e:43:
7c:6f:77:ec:f0:6d:94:64:9b:72:5a:c0:af:06:ba:38:b2:bf:
eb:fd:98:bd:4e:c1:e4:8b:0e:d2:af:e8:8a:49:a7:22:65:0e:
7c:b4:46:12:fe:65:3c:c9:b2:2f:02:82:8e:0b:a5:73:ad:5f:
e3:1f:83:f5:13:1c:13:99:ee:82:b0:9c:7f:23:ae:de:b6:73:
87:8d:31:05:b3:dc:2d:5d:77:2d:44:87:9d:b3:ae:f3:dd:38:
02:68:00:fa:81:62:e0:8a:9f:bd:c3:25:a4:68:82:69:af:42:
f9:5d:cf:42:1c:67:d9:14:76:ea:4f:91:7f:04:5a:07:a2:82:
c3:b1:2d:39:b3:69:06:8b:04:89:00:09:bd:2d:71:fb:af:02:
c2:df:53:84:f4:a7:ff:ae:fa:bf:37:f4:01:11:90:00:41:10:
49:b0:c1:7d:60:ec:c2:07:b0:cc:4c:d9:f9:cd:4c:ef:cb:34:
4c:2c:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:02 2026 by rpki-client