Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: FbnVq6P/sGAr+cQAuaWH48e4WJJvJyoW3Z5OXkx0esQ=
Subject key identifier: B9:64:70:01:36:4A:57:B2:A8:9F:BA:F3:A7:12:C9:93:CE:E0:F4:77
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019D9B19A47CCA6C173C01FDFE0A7B87938B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 1198
Signing time: Fri 17 Apr 2026 11:00:42 +0000
Manifest this update: Fri 17 Apr 2026 11:00:42 +0000
Manifest next update: Sat 18 Apr 2026 11:00:42 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: M22D3IoY6Ty1nFSZK8J091u9IBLo9G/rMhFaOi1iKGs=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a4:7c:ca:6c:17:3c:01:fd:fe:0a:7b:87:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Apr 17 11:00:42 2026 GMT
Not After : Apr 18 11:00:42 2026 GMT
Subject: CN=b9647001364a57b2a89fbaf3a712c993cee0f477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:0b:ff:bb:7b:cb:6c:bd:04:40:ab:9c:41:
21:fb:84:f3:f8:21:8b:12:07:6e:ec:2b:1e:c4:25:
cc:6a:59:9f:02:8d:7d:ca:ad:83:33:c2:20:68:2c:
15:5d:fe:12:dc:f7:b7:8e:23:3e:b1:8c:81:e6:0d:
e8:e1:11:51:ac:ba:b0:f0:f9:cd:52:0d:dd:bf:97:
35:e9:4d:29:5f:1f:f6:87:47:e7:df:4a:ec:ca:ee:
17:f6:40:4d:fe:9a:fd:8a:3e:ec:24:e7:51:05:82:
7f:82:b5:0f:ca:da:3c:21:59:6a:50:4b:0a:f4:5a:
a9:c7:28:3d:9f:82:0a:0f:4c:4a:83:5f:1f:76:7b:
49:4c:d9:1c:d0:78:b3:79:6b:da:86:1f:06:11:7a:
ed:74:50:ff:33:32:9d:a6:f5:12:d9:eb:3d:c2:fe:
2a:fa:e7:b8:ea:83:82:74:6f:59:2e:9f:ff:d4:78:
75:a9:8f:f6:44:8c:74:e2:9e:c2:d8:e6:ac:d7:6c:
e4:25:df:86:78:6e:d4:0e:de:4f:7b:a5:89:9d:fa:
66:d9:18:f7:1e:8e:10:32:b4:9d:14:f2:d0:90:80:
06:fe:f1:99:ec:4e:e1:45:7b:84:39:28:9b:37:0a:
2d:7a:14:da:80:65:bc:c1:32:e1:8b:10:21:62:6f:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:70:01:36:4A:57:B2:A8:9F:BA:F3:A7:12:C9:93:CE:E0:F4:77
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:03:ce:96:1e:ed:f5:f2:4b:63:37:7f:7b:e8:64:75:07:25:
b9:e7:33:d4:67:ce:62:c1:72:3e:ea:a3:b0:54:45:ad:af:8e:
77:75:2f:94:b2:c2:a0:a8:cb:c0:75:e9:f1:d6:fd:93:d9:3d:
87:9e:e6:b7:c4:99:40:a2:2b:d1:27:a9:4d:04:c9:53:a3:aa:
ca:dd:86:a1:ee:25:9a:48:93:67:93:c0:a1:a6:03:79:9e:db:
77:02:fe:e2:3e:19:1b:0b:b3:9f:5b:5d:98:9b:b7:4b:e0:44:
53:62:7b:dc:4f:aa:eb:5d:67:cd:10:b6:7e:2b:71:7e:e9:58:
2a:f5:06:d6:4a:6c:15:b7:77:ef:f2:36:02:b0:03:b8:4f:37:
d6:a5:27:ef:09:9a:3f:c1:8d:1b:3e:3a:e3:ff:2d:ba:de:1a:
be:12:32:16:0b:86:65:67:10:d8:b5:54:2c:aa:ac:30:e5:16:
46:b5:58:15:33:8e:7d:e9:a7:6e:49:b3:27:02:9d:5e:ff:6c:
f9:d3:b2:c2:33:13:cc:70:4d:d5:cf:61:ce:14:ca:dc:10:e1:
67:b1:eb:ea:23:aa:e8:f8:6d:ff:53:c5:2c:36:00:3c:57:40:
b7:4f:71:29:15:90:13:8e:c2:fb:a1:42:98:ad:a0:d2:67:6e:
7a:94:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:17 2026 by rpki-client