Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: dAVMlCD1r6HH/ALF6xNOIpJM3j2qaAxZndmB9w5wndI=
Subject key identifier: 53:51:10:2B:04:7C:EF:C0:12:E7:62:58:CE:AC:8E:5B:11:4B:5E:0E
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 01A0C7B36A64C53DC0FAFEDC82226BB1761D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 06:00:19 +0000
Manifest this update: Tue 22 Sep 2026 06:00:19 +0000
Manifest next update: Wed 23 Sep 2026 06:00:19 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: 2lKbizutGtTrkHahf1qGjkUb6IqeSBW1dC61jPyGh+o=)
2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:6a:64:c5:3d:c0:fa:fe:dc:82:22:6b:b1:76:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Sep 22 06:00:19 2026 GMT
Not After : Sep 23 06:00:19 2026 GMT
Subject: CN=5351102b047cefc012e76258ceac8e5b114b5e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:6f:cf:34:b8:8d:eb:f3:da:ae:11:76:c3:
ba:df:d8:6c:17:d2:b8:bc:0c:a7:ee:85:a7:5d:7e:
e1:9a:69:b1:34:97:b4:3b:e4:25:d6:a7:ae:84:4c:
6e:91:a9:f7:85:29:b1:5f:d1:54:5f:8f:36:78:b5:
24:91:42:a9:d6:71:db:95:f0:f1:60:0f:e5:0c:68:
d0:27:a5:1d:d7:2c:85:4a:7e:fc:95:bc:77:f0:d6:
71:07:8b:8f:83:68:18:38:16:95:b9:cc:df:a4:2b:
74:06:89:17:4e:68:3d:1f:91:bb:59:ca:26:ee:3f:
3e:ec:59:2a:57:15:35:fe:29:d1:ac:e6:63:11:70:
7e:4f:c8:b1:32:56:a3:a6:69:8e:57:8b:cf:68:bc:
e6:44:c4:4b:24:12:89:e0:45:55:2b:95:13:ab:07:
5a:0f:9e:9c:c0:0b:f7:eb:15:81:9a:6e:92:1a:cc:
98:57:9f:69:13:a3:9f:e9:15:69:65:49:05:77:c2:
c0:f7:26:7f:16:c1:3f:74:88:ae:00:2a:27:91:5e:
42:bd:95:9a:aa:c5:b2:1f:ad:34:1a:a2:8e:17:57:
15:2b:47:2c:25:cd:7a:cc:af:22:55:a6:20:98:33:
b5:20:81:f2:ae:98:09:08:52:24:fe:b3:a3:ae:d0:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:10:2B:04:7C:EF:C0:12:E7:62:58:CE:AC:8E:5B:11:4B:5E:0E
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:43:23:dc:bc:55:58:dd:58:15:8c:08:a1:e6:e9:f8:a0:a8:
d3:41:9a:49:9c:4d:78:b0:a1:10:5d:90:2c:a2:de:06:72:0b:
fa:eb:1a:1c:cf:76:cb:d3:46:be:4d:7c:fa:96:84:95:f0:01:
36:96:26:a7:ea:08:0d:ee:8c:76:9f:5a:2b:e6:a3:49:b0:bf:
7d:56:e8:08:21:fe:2e:28:95:17:e0:c7:54:37:93:34:cc:8e:
80:73:22:71:26:87:63:ab:00:dc:73:fb:1c:11:c9:10:46:2c:
8f:9a:a7:49:7b:bb:84:7b:ac:05:44:2f:10:3f:3d:6b:a6:a1:
23:f1:3b:36:83:6c:f0:e7:7b:f9:25:a8:32:6b:36:b4:cd:4b:
45:7e:88:e9:53:1c:80:45:74:39:9d:d8:e6:c0:f0:c0:45:ad:
b8:5d:18:2d:31:f1:04:03:ec:60:a4:32:33:bb:8e:26:4e:73:
13:d4:b2:28:39:16:bb:15:2c:7d:10:db:c1:91:ea:7e:1c:62:
5e:83:40:82:d4:cf:75:ea:e4:5b:5d:47:8c:f4:d1:13:ca:cb:
e4:8f:e8:92:4f:f5:54:7f:51:1e:14:9a:7c:68:93:63:1c:3b:
65:9d:33:17:c8:c4:69:ca:e1:2a:43:f6:ae:1f:d2:8f:e5:c8:
e5:a5:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:41:19 2026 by rpki-client