Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: L0+adYXHrjyCx9J7Zq0KePoa+S01yoVXGyQRfhkYCgs=
Subject key identifier: D5:C0:5D:D4:68:DF:BF:99:1E:D4:4F:C3:8D:18:B7:DD:EF:C9:B0:E3
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019CABA1E26B2AF93B29FE73120AC8A64CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 111C
Signing time: Sun 01 Mar 2026 23:00:39 +0000
Manifest this update: Sun 01 Mar 2026 23:00:39 +0000
Manifest next update: Mon 02 Mar 2026 23:00:39 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: vlvUfD+KJPaJ11iEKA3z3/P/MCOM2Eg8mLT+OTzBcj4=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e2:6b:2a:f9:3b:29:fe:73:12:0a:c8:a6:4c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Mar 1 23:00:39 2026 GMT
Not After : Mar 2 23:00:39 2026 GMT
Subject: CN=d5c05dd468dfbf991ed44fc38d18b7ddefc9b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:95:ee:d3:65:79:4b:63:60:b9:51:5b:51:
a2:1a:a6:7d:7a:b2:f7:86:08:b5:fb:e8:66:e8:fe:
b2:d4:ff:69:90:4f:fd:86:b7:4f:9b:1d:6b:c5:cc:
64:20:7a:03:1a:70:20:51:c7:f6:eb:d9:dd:0d:e5:
1b:40:1f:02:81:e2:7b:79:0c:ad:9a:df:c8:b9:ee:
0a:8c:4d:7f:0b:76:58:74:ff:c8:04:74:1a:31:c8:
42:af:90:43:b6:b1:47:de:1c:1e:02:cf:0a:d0:31:
e6:6b:11:d1:d3:25:b5:aa:80:e4:7e:8b:e3:63:7d:
2d:d8:d3:26:72:47:64:a7:25:50:b3:53:ca:6e:fd:
7f:92:ad:9f:ca:ed:9a:a6:0e:bd:48:3f:47:8b:0f:
e3:d3:b7:97:5b:76:20:f1:d6:62:87:93:d3:28:6b:
41:b3:f0:f5:04:b2:65:88:a4:3d:b9:dc:9b:99:df:
5d:d0:e0:26:f3:ce:ac:61:1f:e0:60:1c:a9:d1:63:
e8:a1:d5:37:cb:b1:93:5c:4b:e8:8a:19:67:50:1b:
a2:a2:be:50:bd:69:3f:62:ce:95:28:5d:c0:27:ef:
bf:e3:57:40:db:39:40:66:d0:d5:d7:e1:48:23:78:
8c:1d:8f:1f:fe:9b:a0:f4:a5:f7:c1:22:36:55:d4:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:5D:D4:68:DF:BF:99:1E:D4:4F:C3:8D:18:B7:DD:EF:C9:B0:E3
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:a6:8b:6a:2b:d4:93:31:3a:aa:ef:79:02:ef:cf:fb:7d:
1e:28:06:e8:ee:57:2d:16:23:1a:79:c0:82:fb:9b:c9:e7:cc:
0b:de:96:d5:d5:25:01:01:de:5e:5f:f7:f2:da:e0:70:22:5e:
b3:25:79:20:3f:d6:c8:19:2e:2a:4e:8b:c2:35:8f:db:3d:b0:
ac:6d:e0:c7:15:70:a7:4b:d9:47:36:5c:f5:4e:9e:33:65:2f:
b7:30:14:b2:25:64:64:ae:ac:46:51:e5:3a:21:f6:d9:d1:78:
43:13:19:b5:4f:28:e3:3f:cc:9f:8e:4e:91:45:65:c0:02:16:
81:4f:f3:ee:e9:86:d8:50:9a:08:d2:aa:f1:92:aa:00:23:41:
3b:ab:f7:9e:50:d0:5e:99:fb:60:48:f6:10:11:58:0b:51:16:
72:78:76:40:41:7d:a7:8c:72:2f:3c:16:b3:e5:94:5a:e3:e7:
59:15:df:63:73:73:f0:fa:92:2c:9e:89:f3:75:da:4c:9a:55:
3a:2c:35:37:c5:ef:de:e8:16:72:84:d3:ce:06:bb:54:59:92:
03:af:57:93:c3:3a:23:9d:4c:7a:c2:fb:0e:bc:44:57:0f:5e:
70:87:d2:0b:2c:71:ff:58:25:26:01:2c:dd:19:09:c4:67:be:
80:73:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:20 2026 by rpki-client