Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: hfI+jRbDVIN01C5fTtz8kskg+5CCmhkugft30S8rMJ0=
Subject key identifier: 04:57:52:4E:5C:0F:6B:ED:17:A2:4E:80:28:22:D7:2E:29:06:2C:A8
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 01A0DF4F0FBE1DE416A46DF9F3F7FF8E1D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 1349
Signing time: Sat 26 Sep 2026 20:01:35 +0000
Manifest this update: Sat 26 Sep 2026 20:01:35 +0000
Manifest next update: Sun 27 Sep 2026 20:01:35 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: Ik+CF6Il/mxyCGAzSY+2PO1sB692ynGwKfmt8L+WnaQ=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:0f:be:1d:e4:16:a4:6d:f9:f3:f7:ff:8e:1d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Sep 26 20:01:35 2026 GMT
Not After : Sep 27 20:01:35 2026 GMT
Subject: CN=0457524e5c0f6bed17a24e802822d72e29062ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:40:90:6a:cb:22:fb:38:5e:53:42:f4:0f:
82:6b:95:4b:7a:ab:9d:1d:6c:d1:45:ad:49:70:b9:
11:91:ec:af:3e:d2:e9:53:41:5b:57:a8:16:fe:ed:
3b:5c:28:92:b8:e2:96:62:6f:3b:0e:61:15:a8:6b:
d1:66:d0:14:80:73:c3:3d:fb:dd:4a:81:95:e4:a3:
eb:86:b5:60:ff:32:83:75:27:1c:3a:d5:b9:a2:97:
4b:af:7c:e7:ac:24:8e:38:e8:0f:c0:d4:a8:80:52:
78:a1:bb:75:7d:0f:21:fc:21:a4:d0:76:1c:81:19:
73:fd:5d:1f:52:cc:b8:0e:90:8f:05:03:ee:d0:c4:
19:75:4e:95:dd:83:4c:17:a4:ff:53:30:70:54:4d:
6e:4d:48:73:11:45:c5:ed:2f:b4:87:79:96:93:2d:
9a:6f:d2:c0:1c:b6:ad:76:46:50:89:84:55:4e:18:
d6:17:7a:c2:51:69:0b:ac:ff:4b:0a:ba:a8:95:56:
31:fd:55:76:ca:01:82:2b:27:21:85:ff:3b:1c:5e:
af:d2:7a:b1:fa:e3:87:58:35:41:a0:3b:38:7a:6a:
24:d7:da:23:91:98:0f:b9:c5:0e:a5:0c:92:89:ed:
36:b8:b3:d6:cd:50:59:da:37:29:78:12:94:0c:ba:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:52:4E:5C:0F:6B:ED:17:A2:4E:80:28:22:D7:2E:29:06:2C:A8
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:c2:70:7a:a2:6d:d9:d7:78:4c:a5:23:e6:f4:9f:10:da:
49:d7:5b:e0:d2:46:6b:c3:e0:15:64:50:46:72:29:95:67:8c:
00:d9:af:9c:82:5e:c1:7f:bc:fa:33:19:de:d3:9b:0c:55:4a:
0a:83:df:50:7b:04:6f:52:ce:4a:15:3f:0e:9e:e3:54:27:b5:
0e:5b:4b:98:3a:39:85:75:d4:e3:27:3a:6d:4f:1f:83:88:ef:
f9:06:9b:70:13:e0:0e:7c:92:fe:cd:58:f9:ba:81:5f:fb:0d:
0d:7d:9d:96:ee:db:80:9e:1e:0f:00:79:c4:22:38:6b:bd:ce:
46:50:c6:ae:48:e5:c9:ec:55:05:10:76:e1:6e:6d:94:47:9a:
4e:b4:ec:4e:c4:97:84:2d:0a:35:0e:f6:7f:48:40:c0:c0:cc:
f2:25:3d:b1:01:fb:5d:07:10:fc:1c:bc:8b:9c:be:db:ea:f6:
71:aa:b4:c4:c5:89:3b:05:fb:52:96:6c:42:95:71:4a:e8:47:
dc:87:24:25:79:aa:2d:f3:4f:a0:b5:d7:f2:a4:6a:ad:24:bd:
44:d5:c9:a7:07:95:8e:93:7d:67:56:b0:8b:eb:93:03:31:71:
51:2c:95:a3:dd:f4:3d:65:19:be:46:75:ae:dc:13:6c:dd:f7:
f1:fe:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:20:28 2026 by rpki-client