Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: WTbVAI1HiVEfvY0TFwMTtGy6w4Mx8laDOY2w/DW1JZc=
Subject key identifier: 6F:A5:A0:AD:79:DC:DC:D1:6B:43:25:20:50:0B:4C:C9:55:A9:11:26
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019CAB3489C576B4AF60F0522D5E189A53F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 1581
Signing time: Sun 01 Mar 2026 21:01:12 +0000
Manifest this update: Sun 01 Mar 2026 21:01:12 +0000
Manifest next update: Mon 02 Mar 2026 21:01:12 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: 2orron2j67zR+Z2MmzI6xSon+2WwVbhRXnlm6BzLa6M=)
2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:89:c5:76:b4:af:60:f0:52:2d:5e:18:9a:53:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Mar 1 21:01:12 2026 GMT
Not After : Mar 2 21:01:12 2026 GMT
Subject: CN=6fa5a0ad79dcdcd16b432520500b4cc955a91126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:e5:b3:7e:3e:78:02:90:ec:f8:a1:21:a3:
72:cd:12:fc:c7:5b:00:64:9b:c7:b7:06:e1:a0:f3:
2f:68:c6:ad:68:20:ab:f1:c9:12:ae:60:5c:b0:71:
b0:27:ab:cb:a0:3d:a0:8c:1f:ef:d2:af:df:a9:29:
d0:c2:9f:a4:15:c9:66:16:08:66:5d:b5:88:3b:34:
dc:ca:3c:76:43:b6:4c:7e:f0:44:5e:41:c8:4b:24:
49:bb:f4:d5:dc:a9:37:2d:a2:41:bd:25:de:4d:5e:
82:8f:bd:fc:8f:d7:c0:94:65:d6:05:af:29:43:a9:
d7:59:85:2f:09:6d:8a:ed:66:25:7c:f1:16:5c:9e:
f4:e9:8e:c6:4e:06:07:ed:2a:78:82:f2:05:d7:db:
68:f6:0b:9f:8a:89:2d:d1:3e:96:13:21:91:21:5b:
3a:18:b1:5a:25:28:73:50:c2:f9:99:7a:f3:e5:b9:
ad:f2:d5:01:0e:c0:bf:fb:b0:80:f2:53:5a:9c:ab:
42:be:ad:f4:f2:ac:64:d4:8f:a0:6e:52:e1:9f:3b:
31:33:f2:e0:90:31:ee:7b:e0:7c:6d:f3:e7:7a:98:
77:2a:81:72:48:52:7d:77:e7:3c:5c:9d:b1:1a:4c:
c5:51:fa:c3:10:23:4a:18:28:c0:81:87:56:d3:b3:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A5:A0:AD:79:DC:DC:D1:6B:43:25:20:50:0B:4C:C9:55:A9:11:26
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:38:2d:b6:b2:12:ac:e0:bb:4d:9a:a5:4d:60:45:d3:cc:
7c:f7:3b:49:db:24:2e:cf:e1:56:a8:c4:85:5c:3f:24:0a:23:
6b:e0:05:92:19:a9:27:31:91:2c:3f:1a:92:da:86:ca:d9:7a:
ce:65:51:4c:94:90:bd:a9:05:53:7a:0c:89:4b:45:ee:8e:9f:
53:a8:3b:d8:d4:23:18:bd:6d:60:7a:da:06:9e:b9:74:c8:a4:
79:d5:a9:6c:3c:c1:76:f8:67:1c:99:ab:f5:27:e7:11:df:77:
dd:82:d8:c0:54:1c:7f:20:96:8d:ce:c7:d6:16:90:7d:b3:e7:
f4:cb:9a:45:fc:ba:df:fa:08:c8:3c:2b:16:40:c8:78:3b:e9:
aa:99:31:5b:b9:f9:68:f0:c3:01:7e:c5:6f:58:0d:95:09:10:
84:5c:b3:53:57:34:bc:30:f2:e8:e5:ef:ef:dd:55:e6:c5:ac:
16:f2:93:1d:2f:70:00:3d:d9:d1:74:fd:69:27:00:6e:9c:f5:
5b:4f:51:6f:30:8a:46:87:7f:54:51:0f:1e:5b:37:f8:82:ba:
e1:99:3d:12:94:0b:a3:5d:b9:de:10:24:69:91:e8:78:df:10:
41:53:9d:35:c1:88:10:dd:1e:3f:fa:09:bf:db:31:34:45:6b:
cd:7b:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:57 2026 by rpki-client