Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: xzzCZu4bi3CKdp3LxKAt20JZc4tlRc+aPdkU1pgkZ30=
Subject key identifier: A2:92:26:9C:8E:78:5E:B3:07:18:B3:65:56:CA:B1:6E:18:BC:45:54
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019FAA19C28E3FA93CADE8BECCC37246F8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 12CA
Signing time: Tue 28 Jul 2026 19:00:42 +0000
Manifest this update: Tue 28 Jul 2026 19:00:42 +0000
Manifest next update: Wed 29 Jul 2026 19:00:42 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: a8rjT5ywjQ8ge9iboIGt2SIsw6niTeeEGTfgJdOMHPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:c2:8e:3f:a9:3c:ad:e8:be:cc:c3:72:46:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Jul 28 19:00:42 2026 GMT
Not After : Jul 29 19:00:42 2026 GMT
Subject: CN=a292269c8e785eb30718b36556cab16e18bc4554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:c1:33:51:70:80:37:c2:f5:cc:d6:a6:a8:
ec:ec:f8:3d:57:3e:6d:25:8a:ba:15:4d:d9:59:0a:
23:6d:f6:ba:18:f3:8b:7c:68:ab:e1:26:22:eb:98:
a9:cd:ec:b3:a2:e6:11:be:fc:78:f2:7a:21:85:71:
5b:65:c1:bd:b9:06:8b:80:1c:6e:88:3e:13:4f:59:
1d:e8:f2:a4:00:39:f8:76:13:a3:8b:ea:cd:41:bc:
87:76:ee:57:70:c7:94:6b:d9:8b:b5:98:32:fc:85:
4c:d4:de:11:0a:b5:bf:33:cd:43:1a:4a:f9:d2:10:
7a:01:57:5b:7a:c8:48:fc:7d:9c:af:75:a2:70:55:
9c:d9:f0:b0:0d:fe:07:ae:65:ea:ce:ca:42:5d:5e:
ac:9f:89:ec:c5:ef:d1:6e:a5:64:28:b6:23:9a:62:
ca:17:61:00:82:1d:53:28:8d:a7:98:1b:0a:23:6a:
06:0b:3c:96:4c:e0:ec:58:80:38:a4:f3:69:4c:b3:
88:98:d7:99:99:d5:3b:0b:72:9d:1e:09:c0:72:16:
6b:fc:3c:5f:e2:b0:a2:e4:01:31:ed:1d:f2:ab:f1:
4c:be:03:b8:fd:32:2e:80:37:2d:92:79:83:a6:5c:
83:94:c0:15:5b:32:16:42:df:02:79:18:8b:94:64:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:26:9C:8E:78:5E:B3:07:18:B3:65:56:CA:B1:6E:18:BC:45:54
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:18:62:e3:36:c7:c6:69:fb:8a:c3:77:58:b1:02:74:1e:
03:8d:b6:a9:78:b0:5f:ac:28:1e:a5:6a:c0:62:2c:4e:f9:47:
7e:e5:db:b2:6d:b5:15:aa:40:39:c3:f0:f3:4b:bc:8e:92:ed:
4b:e5:38:c1:d6:08:1b:0d:e1:c3:ba:78:89:13:38:60:f4:bf:
a0:17:88:32:22:f9:b5:08:3c:1e:4a:1e:9e:68:1b:11:ad:dd:
df:de:e4:32:0f:cc:36:6a:2f:ac:e4:6b:d9:13:d9:db:74:24:
70:12:38:77:fa:61:03:a8:72:fd:fb:e6:bf:43:41:0a:12:c5:
f3:df:72:e2:61:ca:a5:dc:8f:e6:6e:96:75:67:73:ae:6c:c2:
ea:1b:07:e6:fe:05:06:0f:22:ea:41:86:10:85:ec:75:7e:49:
db:1c:7e:cd:cd:ec:38:9b:8b:e1:64:a4:99:1a:db:3d:96:02:
18:53:33:9f:2d:7c:76:cc:11:b3:ee:b1:13:dd:d3:c2:9e:3c:
80:ac:5c:62:b7:79:d7:95:70:39:97:42:5f:1f:21:c0:fd:f4:
6e:34:56:39:7c:d5:51:4b:61:5a:70:61:a6:c4:48:29:d0:77:
6e:a5:e3:59:39:49:03:0a:40:43:84:d0:0f:5b:5b:c7:9a:c1:
51:07:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:19 2026 by rpki-client