
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: nh0r/5/tlg1ARuprKQbpNWHFGLfU+CCpYrI6KAEXbQw=
Subject key identifier: 97:77:B1:16:03:C5:35:8A:87:6B:6B:71:6B:72:BD:0C:63:D7:78:FC
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 01A0C5FCF75C3489AA3C80B5955CD57904BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 135D
Signing time: Mon 21 Sep 2026 22:01:24 +0000
Manifest this update: Mon 21 Sep 2026 22:01:24 +0000
Manifest next update: Tue 22 Sep 2026 22:01:24 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: U59+jRpd7OttQcK6HVJj+holLYMpJ5Vznb1F1aEqExg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:f7:5c:34:89:aa:3c:80:b5:95:5c:d5:79:04:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Sep 21 22:01:24 2026 GMT
Not After : Sep 22 22:01:24 2026 GMT
Subject: CN=9777b11603c5358a876b6b716b72bd0c63d778fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:0a:dc:be:27:24:58:aa:9a:de:4c:18:d6:
dc:17:2c:7f:8d:98:09:e5:7e:11:dd:b7:de:03:8e:
22:3c:73:4f:47:3e:b5:ed:fb:4f:40:b5:74:cb:d9:
f2:75:5e:b2:a3:d9:e3:fc:60:54:4a:bc:86:63:3c:
63:4c:96:fc:3f:b0:67:df:39:76:a0:a2:df:f0:b7:
23:fb:bd:cb:58:cf:28:30:a0:02:ab:f1:84:37:5f:
cc:8f:05:b7:21:ea:1c:c9:fe:d2:42:ad:11:a2:4f:
7d:5f:35:a4:94:ea:1a:86:d1:4d:61:12:6f:ad:95:
1f:b6:f7:dc:74:6c:9d:bb:2a:5e:25:31:7a:b4:ef:
ab:5a:6e:68:78:6c:d1:58:3c:20:b5:22:85:16:59:
fb:27:28:e2:8d:3f:c7:68:c7:c8:ab:55:7a:97:a7:
21:66:cf:8f:0d:2d:f2:b3:c8:e2:75:c7:a3:51:61:
01:4f:8e:62:36:4b:74:e5:30:0c:d9:23:fe:18:c5:
67:cf:fc:4e:9b:37:6e:eb:03:bd:e0:24:f3:1f:ef:
5b:46:4b:10:af:eb:1e:f0:61:bf:43:9c:3b:da:c0:
65:a7:5c:a6:d4:73:cc:22:da:38:13:06:a2:ee:a7:
a2:9e:3a:ed:8d:6b:44:1d:08:a9:65:af:7a:92:1c:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:B1:16:03:C5:35:8A:87:6B:6B:71:6B:72:BD:0C:63:D7:78:FC
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9d:17:9e:c4:cb:11:58:49:32:1e:2a:d5:a8:18:f7:df:4d:
5b:1a:98:e7:77:fb:c6:d1:1c:ce:e2:6d:bc:51:51:7e:07:3a:
28:ba:b5:cc:19:07:c5:6b:da:a3:8c:20:5a:8d:93:56:35:68:
dd:e1:45:80:b4:31:51:33:81:e1:71:86:fe:18:96:78:b4:59:
20:66:a6:78:ee:29:a9:28:2c:55:98:33:e2:be:5b:87:96:3a:
6d:70:00:3a:cf:fd:90:aa:f1:71:0e:94:82:32:1f:11:04:d3:
6a:46:37:dd:da:25:89:80:c8:26:40:fb:88:45:9a:01:7d:2c:
fe:22:3c:a0:5f:6b:61:5b:14:95:e9:21:42:ab:da:3c:1c:04:
b2:f1:89:7b:22:26:a7:0e:49:bc:70:e9:4a:6e:5c:dd:3c:ff:
73:c7:e5:de:d5:00:c6:e3:f9:a7:5f:e8:70:e2:50:a5:db:c9:
32:95:66:2e:86:a1:b0:fe:dd:fd:43:16:81:6c:06:cd:b0:34:
d0:f3:d4:41:56:c9:41:de:4f:f6:18:c6:21:8f:d4:ce:fa:77:
51:07:68:26:58:c3:99:11:e2:c5:d5:17:cd:ab:fd:77:c3:b9:
a1:35:9c:70:e7:3e:85:2e:d0:86:7d:31:53:01:20:8c:6e:75:
be:ec:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:25:01 2026 by rpki-client