Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: Ks8uxLdDhXN/4DGcLae8y9l9edo+rRLcEXHkwZPk+TU=
Subject key identifier: A7:94:C8:57:01:4E:F9:D3:72:73:00:BA:D6:ED:E6:37:08:02:72:D3
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019EBE7FA8FE9674A09FE52D582B13572750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 1250
Signing time: Sat 13 Jun 2026 01:01:37 +0000
Manifest this update: Sat 13 Jun 2026 01:01:37 +0000
Manifest next update: Sun 14 Jun 2026 01:01:37 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: huQ+vdppP+2fU1ytNHjQSKAEuvNyv+289VkWfCOwJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a8:fe:96:74:a0:9f:e5:2d:58:2b:13:57:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Jun 13 01:01:37 2026 GMT
Not After : Jun 14 01:01:37 2026 GMT
Subject: CN=a794c857014ef9d3727300bad6ede637080272d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:fd:7b:a0:bb:f7:8d:1b:ed:cd:5c:8b:91:
06:66:a8:af:3e:82:19:4b:ec:97:f8:e4:08:ed:d0:
fa:ba:92:81:bc:88:1d:c1:b1:b0:5c:d5:6b:9d:7d:
86:46:a2:d9:03:c9:f9:bf:b9:97:bd:f8:fb:32:56:
c1:47:34:89:31:1e:b2:24:f3:92:a3:fb:4e:00:5c:
0d:7c:00:c4:33:19:8f:7e:84:3f:ae:4c:e3:24:d7:
89:c1:51:23:98:f2:4d:a1:78:95:9b:f4:1e:e2:f3:
bc:b4:e8:d9:0f:47:33:1c:0f:e1:36:8d:80:0d:0d:
03:2b:cf:45:9a:51:99:62:c1:22:ce:a1:88:75:de:
11:bd:22:97:03:b5:5d:0a:6a:e9:3a:fe:5a:d7:c1:
aa:83:60:1c:d0:45:a4:87:36:6a:fe:fe:f1:23:1f:
fb:6f:66:eb:e9:c0:23:6a:95:41:8d:20:df:9a:5c:
9d:ae:7f:ca:97:ad:86:27:37:79:20:60:3f:e4:c4:
b9:be:63:be:8f:7a:20:01:eb:b2:87:8b:5b:5c:f5:
7f:43:75:9e:85:db:6d:73:3d:16:89:39:91:9e:ef:
60:c3:16:92:d5:b9:0c:70:89:83:62:3e:d5:45:0c:
17:d3:12:b7:5c:45:b0:3b:b4:0b:ec:61:64:d8:87:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:C8:57:01:4E:F9:D3:72:73:00:BA:D6:ED:E6:37:08:02:72:D3
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:15:44:d2:80:46:22:1d:de:64:51:ad:67:be:56:0a:32:
da:15:a9:b3:44:65:1a:12:f1:bb:52:5a:51:86:07:57:df:f0:
7b:fe:98:60:1c:3f:f8:83:27:88:fc:b8:63:a8:8e:2a:aa:85:
77:9a:d3:2d:17:90:63:bf:89:52:9b:1e:4f:d4:84:20:12:7b:
f4:53:c6:00:d9:e9:95:1d:1a:1b:07:95:76:10:b1:7b:85:08:
81:77:7b:5a:4c:59:ac:fb:68:90:a8:25:e1:c4:f4:94:f8:8a:
da:6c:81:88:15:76:1e:2f:4d:cc:cb:5e:0b:f6:65:23:cc:12:
46:8d:5e:44:d5:92:0b:39:ad:39:6e:33:5c:a9:62:4f:cb:6e:
5b:f1:39:56:64:28:f1:83:ee:a5:83:b0:48:2d:f3:94:d6:d7:
ba:24:d6:3b:60:c4:ae:2c:6c:ed:96:e7:9c:56:f1:37:8b:b0:
e5:6d:b7:d9:5b:9a:09:44:ba:5d:47:c6:44:f1:61:8f:d6:d0:
9d:6a:47:eb:f5:89:94:3b:72:c2:a4:37:60:96:59:d0:ca:6e:
d8:5e:d0:48:58:37:5a:7b:f2:83:b7:a2:d5:8b:39:ea:ed:d1:
fb:ca:a7:b1:b5:6a:ef:ba:db:b6:bf:5b:91:b4:bd:1a:0b:db:
16:72:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:21 2026 by rpki-client