Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: dWpGpuBZzxMwBs8+8k3QZJBfLqvh3tZgvYhHsgpRpxM=
Subject key identifier: 24:25:B4:CC:31:C6:A0:D7:2F:88:D9:4D:04:E6:59:A7:DA:5C:13:4F
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019FAA5073EA4DEA98FFA52AE831B3B2144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 12A9
Signing time: Tue 28 Jul 2026 20:00:27 +0000
Manifest this update: Tue 28 Jul 2026 20:00:27 +0000
Manifest next update: Wed 29 Jul 2026 20:00:27 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: WheivlniJa7XSNYDFv5NLi5QcZyUA1AsiBybx39BUX4=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:73:ea:4d:ea:98:ff:a5:2a:e8:31:b3:b2:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Jul 28 20:00:27 2026 GMT
Not After : Jul 29 20:00:27 2026 GMT
Subject: CN=2425b4cc31c6a0d72f88d94d04e659a7da5c134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:38:bf:30:90:50:21:86:2c:dd:e9:b8:c9:
1a:43:e2:49:3a:31:c0:17:c8:a5:49:50:03:e9:1d:
e3:58:94:8f:93:d7:03:82:5a:00:30:23:31:6a:2e:
25:d4:ef:ae:cc:9d:98:0e:74:88:9b:c7:24:3d:5b:
f3:e1:c4:77:39:32:f7:ea:5d:7b:d1:76:d8:b8:b4:
51:1d:b3:22:9e:44:23:3f:ca:81:31:ab:ae:bf:20:
91:24:40:4c:fb:b9:cd:4f:3c:7d:9b:d1:f8:1e:31:
4a:fa:a8:8d:09:2b:c0:2c:9f:cd:a9:3d:88:3a:25:
e2:ad:bc:61:43:43:9c:98:d8:6d:22:fe:ed:56:c4:
12:d9:8c:17:0c:a3:f4:e1:d4:a5:40:18:f1:ec:be:
f9:b7:51:a2:0c:d9:88:d7:85:43:84:27:32:16:20:
e1:28:fd:1e:1a:ba:79:eb:56:c5:83:f8:31:d1:e9:
85:8d:e6:e3:a9:bf:d6:9d:bd:3d:07:e6:af:4d:c5:
68:00:1b:78:82:0d:03:7f:d8:2b:b1:16:dc:eb:2f:
d6:ad:00:13:c9:46:d3:6c:49:6b:c2:6d:ae:ba:2e:
52:b2:bb:7e:7d:48:2e:9a:c0:48:71:b9:d9:58:da:
54:17:97:4f:71:c3:50:dc:aa:60:42:0f:bb:fd:9c:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:B4:CC:31:C6:A0:D7:2F:88:D9:4D:04:E6:59:A7:DA:5C:13:4F
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:de:43:ba:b9:22:06:21:88:7a:2b:6d:49:e4:ac:b5:94:9b:
b2:e8:ce:e8:42:da:08:55:53:93:b9:c6:e6:02:c4:03:3a:3a:
bc:b0:e0:48:70:9e:8d:7e:d9:bd:87:ff:7f:4d:00:0e:19:5e:
99:7e:01:81:ae:73:67:0a:6d:33:b1:dd:34:ff:7d:28:b1:af:
36:2d:81:41:04:e2:e7:9b:18:e9:9e:16:e9:93:d0:88:4c:55:
f6:8e:8d:e4:fb:48:8c:53:f0:e8:c2:ed:4d:38:78:14:07:10:
ee:e1:5e:8f:25:4b:6a:8a:82:f9:e9:f7:13:05:e2:53:b3:5e:
9e:f7:fe:9a:3e:f8:2f:79:5d:61:3e:4e:2a:60:ea:6c:5f:6a:
af:a1:64:50:bb:01:cb:47:b0:9f:67:68:9b:23:ee:26:27:7e:
da:f6:c6:ca:2c:8d:60:e8:99:c4:af:63:73:0f:61:f9:fd:02:
39:8d:d8:b0:14:97:03:0a:b6:de:93:00:db:e9:00:16:36:3e:
c2:ae:bb:d5:de:c3:33:a2:ef:30:fb:3f:ba:81:3d:2a:43:c2:
04:ee:3e:63:7f:62:19:4c:d8:b6:92:be:48:3c:06:00:b2:0e:
3f:68:68:91:29:d6:67:c9:0b:0a:a9:84:92:1b:b3:26:32:91:
e2:fe:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:03 2026 by rpki-client