Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: O9kXm9/g9H0s0plu/M3L5u69Xqiu3TPpOIYlkKdBg9k=
Subject key identifier: BC:96:FA:85:7D:8F:B9:63:1D:BB:80:70:66:B7:D8:CF:07:05:C1:D5
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 019FA9E28922942CCC64DBCAF80A00927C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:00:23 +0000
Manifest this update: Tue 28 Jul 2026 18:00:23 +0000
Manifest next update: Wed 29 Jul 2026 18:00:23 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: UArREW7uUG9m2z+MsURGLNAJPyKQ/BmKLjyDtWaXorU=)
2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:89:22:94:2c:cc:64:db:ca:f8:0a:00:92:7c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Jul 28 18:00:23 2026 GMT
Not After : Jul 29 18:00:23 2026 GMT
Subject: CN=bc96fa857d8fb9631dbb807066b7d8cf0705c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:3c:a4:e8:bd:36:98:4d:64:3e:3c:1f:9f:
6d:62:e1:1e:79:be:5f:79:94:f6:4a:2b:2a:c1:74:
a0:9d:08:d6:33:8d:11:d3:57:98:d2:b7:88:08:c7:
63:16:07:db:b1:ad:b3:06:c0:b5:84:dd:47:2e:8e:
86:f4:3d:0b:f4:dd:c6:16:ef:d6:21:a5:d1:64:f6:
9f:9a:c7:f3:e3:6c:04:89:c0:6e:bd:e6:8f:cc:64:
c5:53:7d:22:f8:07:32:38:90:5d:56:f7:6c:78:09:
f3:87:3a:26:66:a4:81:08:2c:b6:8d:bb:8f:0d:64:
ae:ca:98:94:b9:51:b4:28:ad:7a:63:ff:75:e4:f4:
fc:f1:3c:65:03:0d:83:86:13:aa:4b:3e:17:36:9e:
20:58:1f:c6:d4:2c:2b:00:64:81:b5:fe:85:91:29:
fd:ab:c4:7d:5d:24:71:49:9a:98:3e:8e:c2:85:66:
64:fd:7d:60:0f:2b:cb:a0:81:42:37:29:e9:85:31:
ea:f2:17:33:db:3f:f9:07:81:ba:c5:bf:e6:fd:92:
20:cc:8a:81:4a:38:2d:7c:0d:22:24:ab:24:2d:a0:
c9:a7:ec:af:62:4b:68:ac:b6:d0:7f:d4:26:8f:90:
bf:6f:2e:d5:7f:3d:91:83:50:24:94:37:5c:41:1f:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:FA:85:7D:8F:B9:63:1D:BB:80:70:66:B7:D8:CF:07:05:C1:D5
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:41:42:87:4c:06:c2:c0:9f:19:2a:e3:f1:bb:30:0d:26:3b:
5f:78:4c:a0:f4:b7:2b:2e:9a:36:d1:af:90:b9:3d:4d:01:7a:
0d:cd:2c:b1:45:0a:a7:56:f0:87:96:0c:c9:07:13:5c:f9:48:
1e:c2:1c:86:64:da:4e:38:3e:c0:7a:89:7e:b8:6d:e6:49:80:
7e:76:cf:2c:8b:93:4a:57:04:de:57:d7:8d:af:81:78:2b:c7:
19:15:06:f1:55:b7:2a:51:c6:26:14:76:b5:67:f5:06:17:09:
8e:60:72:02:86:56:9a:c0:d8:a4:78:34:17:4f:89:8c:ae:01:
69:dc:68:a2:ae:00:43:9d:3b:88:b9:d1:96:58:b9:d8:08:00:
ea:b5:b9:e6:af:0d:83:49:91:6f:07:c0:3c:48:90:c7:1f:4e:
b5:85:a1:ca:a8:f4:7b:66:06:1c:7b:a5:40:db:10:f3:d0:31:
34:7a:99:66:ec:87:88:ac:67:7d:89:15:da:5c:60:59:0a:4c:
bd:61:7b:06:19:9a:bf:1c:74:89:5a:64:80:db:21:7d:bd:47:
7f:c7:33:d9:ff:1a:2c:b8:48:dd:11:84:b5:70:8a:40:04:13:
d3:19:7c:7d:89:2d:12:11:c9:da:8a:c4:9b:23:17:0f:1a:17:
78:a9:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:35 2026 by rpki-client