Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: P3lLVG/tC2fieDbGb0FFkVkojetjI0cjDkYiYsGmJ6Y=
Subject key identifier: 7F:FD:5D:9B:CB:63:AE:B4:14:4C:B9:4E:DE:DD:48:6C:F7:60:36:67
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 01A18563564D42E9B39120E2BBA2ABF702AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 139F
Signing time: Thu 29 Oct 2026 02:00:42 +0000
Manifest this update: Thu 29 Oct 2026 02:00:42 +0000
Manifest next update: Fri 30 Oct 2026 02:00:42 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: EIx0+6a1N7Jg4Nsh0vaw3TWshHD/Xqp5gOtT77efFeM=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:56:4d:42:e9:b3:91:20:e2:bb:a2:ab:f7:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Oct 29 02:00:42 2026 GMT
Not After : Oct 30 02:00:42 2026 GMT
Subject: CN=7ffd5d9bcb63aeb4144cb94ededd486cf7603667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:ef:a5:1c:37:d8:2c:a8:f2:52:b3:49:3e:
ee:58:aa:c6:5b:4d:6b:8a:00:10:35:e0:d2:d5:27:
e6:f8:07:fc:bf:11:72:a7:ba:2b:3a:3f:91:33:f3:
f7:cd:ac:72:c2:80:ec:ae:b9:29:88:2d:bf:75:8c:
15:0e:bf:bb:44:0d:30:d2:2e:10:cd:45:74:d0:83:
f1:3d:0a:b9:84:a9:a1:b6:50:95:57:c4:06:64:81:
b2:c0:b8:64:f1:37:b7:43:b1:79:19:f9:4d:0f:49:
d0:ba:d7:d4:b3:9b:85:04:96:b7:8f:54:7b:37:90:
11:5a:06:5e:46:b7:84:ac:64:e2:71:03:e7:77:29:
9e:c3:0a:00:ab:ac:15:7e:c5:e4:4e:fa:64:80:4b:
db:a3:27:9a:3a:94:74:b6:52:f9:79:30:a0:bd:e7:
3d:8a:d9:6e:03:38:f2:23:d1:42:c7:4e:1b:9b:46:
35:27:dd:0d:61:96:14:44:56:e7:0f:92:86:9d:83:
6b:91:5f:89:31:61:41:d0:f5:65:8c:6d:31:ec:35:
4b:75:60:bc:f3:06:29:51:df:2e:7c:49:d4:d8:2e:
a3:2a:bc:a2:1f:d4:3f:f7:70:43:01:cc:51:61:23:
6c:db:ea:d1:41:db:d4:76:ba:be:eb:5f:83:81:ae:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:5D:9B:CB:63:AE:B4:14:4C:B9:4E:DE:DD:48:6C:F7:60:36:67
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:be:b8:1f:18:02:20:f9:55:73:e2:48:2e:be:fe:ff:11:35:
9e:ae:48:e6:81:64:68:eb:a7:db:17:42:d5:51:dc:bd:de:8d:
65:e7:23:f4:f2:91:3f:d4:a2:ad:19:fc:1b:13:32:48:c9:44:
10:e3:f7:7b:8a:5d:36:d0:ed:43:81:3f:9e:ad:1a:68:e9:5f:
42:38:c4:bb:32:f5:5a:cd:85:8c:fa:48:c3:c5:6d:68:49:1d:
39:21:20:83:c6:3d:a2:b3:03:72:7a:d1:be:64:7c:45:68:eb:
72:41:b5:e8:fd:67:e3:85:99:ff:5c:1e:53:25:04:1d:cd:a1:
52:cf:b8:98:bb:28:b3:95:f9:d6:71:99:4b:46:84:06:47:97:
13:0d:60:e3:40:82:30:e0:85:06:71:8d:e5:9d:42:96:c8:93:
3a:ff:90:55:99:66:81:67:7a:a2:a1:fa:11:1b:c6:f2:ce:0b:
c2:83:21:80:67:7a:7e:41:18:2f:17:63:86:0e:a8:33:b9:16:
d5:f9:6a:f0:e3:03:e4:65:68:e6:0a:8f:72:42:9f:2c:ae:5d:
fe:e4:33:bd:90:bb:be:54:5c:86:f3:11:4f:0c:0e:c8:86:f6:
63:c0:17:f8:2e:4b:fd:ea:b0:2d:c3:a6:8c:2a:ea:6e:d4:47:
b0:80:32:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFY1ZNQumzkSDiu6Kr9wKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl
NGU0NjcwHhcNMjYxMDI5MDIwMDQyWhcNMjYxMDMwMDIwMDQyWjAzMTEwLwYDVQQD
Eyg3ZmZkNWQ5YmNiNjNhZWI0MTQ0Y2I5NGVkZWRkNDg2Y2Y3NjAzNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCjvpRw32Cyo8lKzST7uWKrGW01r
igAQNeDS1Sfm+Af8vxFyp7orOj+RM/P3zaxywoDsrrkpiC2/dYwVDr+7RA0w0i4Q
zUV00IPxPQq5hKmhtlCVV8QGZIGywLhk8Te3Q7F5GflND0nQutfUs5uFBJa3j1R7
N5ARWgZeRreErGTicQPndymewwoAq6wVfsXkTvpkgEvboyeaOpR0tlL5eTCgvec9
itluAzjyI9FCx04bm0Y1J90NYZYURFbnD5KGnYNrkV+JMWFB0PVljG0x7DVLdWC8
8wYpUd8ufEnU2C6jKryiH9Q/93BDAcxRYSNs2+rRQdvUdrq+61+Dga4T+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/9XZvLY660FEy5Tt7dSGz3YDZnMB8GA1UdIwQY
MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt
ZjM3OTdjZmQ2NWFlLzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl
LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqb64HxgC
IPlVc+JILr7+/xE1nq5I5oFkaOun2xdC1VHcvd6NZecj9PKRP9SirRn8GxMySMlE
EOP3e4pdNtDtQ4E/nq0aaOlfQjjEuzL1Ws2FjPpIw8VtaEkdOSEgg8Y9orMDcnrR
vmR8RWjrckG16P1n44WZ/1weUyUEHc2hUs+4mLsos5X51nGZS0aEBkeXEw1g40CC
MOCFBnGN5Z1ClsiTOv+QVZlmgWd6oqH6ERvG8s4LwoMhgGd6fkEYLxdjhg6oM7kW
1flq8OMD5GVo5gqPckKfLK5d/uQzvZC7vlRchvMRTwwOyIb2Y8AX+C5L/eqwLcOm
jCrqbtRHsIAycQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 07:26:59 2026 by rpki-client