Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: iUJMM1rtjywNMuiXkAz3+46dZBA7cxqEaN58ZBMAnzc=
Subject key identifier: B0:A1:D8:C6:B4:AF:98:EF:A0:D0:39:3D:BD:22:2C:17:A7:2D:BA:CF
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019E1C46C96BE92FF43EF6863A0BE6819CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 11FC
Signing time: Tue 12 May 2026 13:01:01 +0000
Manifest this update: Tue 12 May 2026 13:01:01 +0000
Manifest next update: Wed 13 May 2026 13:01:01 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: Mz0zk1ohxa4dlXavDZB+f+3so7b6NBapyAaMU0ggW+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:c9:6b:e9:2f:f4:3e:f6:86:3a:0b:e6:81:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: May 12 13:01:01 2026 GMT
Not After : May 13 13:01:01 2026 GMT
Subject: CN=b0a1d8c6b4af98efa0d0393dbd222c17a72dbacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:49:a9:88:08:a4:bf:86:71:db:c4:bb:62:
3e:33:79:99:37:fd:25:60:40:31:32:03:05:96:b8:
cc:15:4c:71:96:0c:6b:ce:32:0b:1e:65:6e:46:6c:
7d:f3:92:86:73:ac:07:17:27:29:20:9a:aa:82:5d:
6a:9e:80:c3:62:3c:6b:77:b1:2b:41:b8:d0:7e:82:
94:85:29:c5:3a:13:37:00:ed:89:52:7c:d6:06:0a:
3f:f2:fd:07:97:0b:f3:2a:49:d0:44:93:81:44:92:
39:63:ff:e6:0a:c2:4a:cb:56:88:f1:62:23:67:18:
ef:af:3d:5b:d2:9f:f2:8d:4b:fa:0f:f6:3d:0b:3c:
d1:c3:bf:08:af:97:24:bd:2a:24:3a:bb:46:37:db:
0c:7f:a4:84:ed:34:dd:25:42:e6:df:aa:29:41:47:
a6:f6:56:77:6b:ae:a5:62:0a:ae:71:0d:bc:e5:46:
cd:82:99:bf:01:7f:b3:b5:02:76:c9:1c:ac:bc:e5:
6a:b1:27:fb:aa:f4:e7:3b:47:69:6c:2e:56:fe:b0:
b3:26:87:f5:a6:4d:12:7c:fd:61:f3:12:4c:ab:dd:
7d:53:06:ce:d7:de:1f:82:c0:73:4f:99:7b:0f:93:
cc:15:22:1a:a4:96:6d:fc:1b:31:0a:da:25:30:12:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A1:D8:C6:B4:AF:98:EF:A0:D0:39:3D:BD:22:2C:17:A7:2D:BA:CF
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:49:62:9e:cc:8b:89:1c:7c:18:77:9b:84:07:eb:6e:d6:
28:4a:0c:dd:6c:ac:83:0a:ab:c5:c4:8b:2a:65:99:0c:ba:f3:
94:28:c8:e3:89:69:07:e4:1f:d4:2c:f4:e0:db:d5:ac:9e:35:
06:ba:5e:99:5d:b6:a0:3f:7d:9a:2a:21:40:5c:37:ee:23:26:
3a:c1:09:26:79:dd:24:e4:24:e9:a6:3a:32:eb:01:8a:60:96:
e0:96:b6:e7:12:3a:28:65:fe:32:8d:4c:d5:6a:35:c5:eb:80:
78:98:c2:f9:c0:3f:e9:54:15:b2:d1:35:3b:b7:d4:c5:9a:67:
f4:6a:5e:98:15:d9:93:89:9c:f5:73:1d:bb:cd:c4:54:68:94:
39:16:15:d4:19:80:f5:5c:4a:db:8e:75:74:42:53:e9:a7:09:
3e:df:46:d6:91:a5:c7:a2:e2:3d:6b:21:38:c2:b0:95:45:02:
23:17:ef:e5:4e:c5:08:8f:64:1b:65:24:1d:5f:ec:6d:3d:dd:
6f:74:a0:0e:bb:3b:f1:ad:08:e3:32:ab:35:d4:be:e3:f0:41:
fe:54:cb:23:d9:8f:12:3c:17:62:b2:0e:23:95:56:e5:ae:9d:
0c:7a:c9:04:b6:a7:80:0f:f1:e1:91:8c:ff:66:1d:c3:f0:91:
fd:6d:34:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRslr6S/0PvaGOgvmgZz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTlhZDgyY2EwZmRiYTA2ZmUwOGI3YjllMGQxMzczYjcx
Y2I0NjkwHhcNMjYwNTEyMTMwMTAxWhcNMjYwNTEzMTMwMTAxWjAzMTEwLwYDVQQD
EyhiMGExZDhjNmI0YWY5OGVmYTBkMDM5M2RiZDIyMmMxN2E3MmRiYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20RJqYgIpL+GcdvEu2I+M3mZN/0l
YEAxMgMFlrjMFUxxlgxrzjILHmVuRmx985KGc6wHFycpIJqqgl1qnoDDYjxrd7Er
QbjQfoKUhSnFOhM3AO2JUnzWBgo/8v0HlwvzKknQRJOBRJI5Y//mCsJKy1aI8WIj
Zxjvrz1b0p/yjUv6D/Y9CzzRw78Ir5ckvSokOrtGN9sMf6SE7TTdJULm36opQUem
9lZ3a66lYgqucQ285UbNgpm/AX+ztQJ2yRysvOVqsSf7qvTnO0dpbC5W/rCzJof1
pk0SfP1h8xJMq919UwbO194fgsBzT5l7D5PMFSIapJZt/BsxCtolMBKVswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCh2Ma0r5jvoNA5Pb0iLBenLbrPMB8GA1UdIwQY
MBaAFNWZrYLKD9ugb+CLe54NE3O3HLRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85MzQwNzMtMDIxYi00ZmJlLWIwMTkt
YjZhNmY4ZWRhNzVhLzEvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85MzQwNzMtMDIxYi00ZmJlLWIwMTktYjZhNmY4ZWRhNzVh
LzEvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwBJYp7M
i4kcfBh3m4QH627WKEoM3WysgwqrxcSLKmWZDLrzlCjI44lpB+Qf1Cz04NvVrJ41
BrpemV22oD99miohQFw37iMmOsEJJnndJOQk6aY6MusBimCW4Ja25xI6KGX+Mo1M
1Wo1xeuAeJjC+cA/6VQVstE1O7fUxZpn9GpemBXZk4mc9XMdu83EVGiUORYV1BmA
9VxK2451dEJT6acJPt9G1pGlx6LiPWshOMKwlUUCIxfv5U7FCI9kG2UkHV/sbT3d
b3SgDrs78a0I4zKrNdS+4/BB/lTLI9mPEjwXYrIOI5VW5a6dDHrJBLangA/x4ZGM
/2Ydw/CR/W00Vw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:22:45 2026 by rpki-client