Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: l+OyfojLiXxi1YsTY2Km6QovVW2rASOqcE4c872eIfI=
Subject key identifier: 96:3D:77:AD:4B:AC:EA:63:BA:76:CA:6F:99:BF:9D:71:EF:E0:5D:27
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019E2F5F8F66A7C3509EB77E1F6EB855D4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 164A
Signing time: Sat 16 May 2026 06:00:51 +0000
Manifest this update: Sat 16 May 2026 06:00:51 +0000
Manifest next update: Sun 17 May 2026 06:00:51 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: kcZwdrnyTIdmh/vj8X/hlsdEq8o4/RNNdtwRs4fCpEM=)
2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:8f:66:a7:c3:50:9e:b7:7e:1f:6e:b8:55:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: May 16 06:00:51 2026 GMT
Not After : May 17 06:00:51 2026 GMT
Subject: CN=963d77ad4bacea63ba76ca6f99bf9d71efe05d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:29:81:67:4a:fe:42:00:bd:4b:b6:f4:6a:
a4:df:29:76:1c:51:1d:20:13:11:2e:a7:ad:71:c6:
e8:3a:26:a5:8b:e1:ec:e2:7a:24:20:03:62:e0:90:
b5:9c:1f:7a:48:60:63:6a:f9:33:04:98:ed:af:44:
a1:94:19:10:a3:83:e8:6e:92:49:12:c6:44:cf:7e:
1e:55:9f:23:e5:bc:f1:b9:e5:6c:82:c9:f2:8b:01:
c2:13:4b:9d:cf:13:51:35:e3:db:e9:9f:bf:9e:28:
06:36:c5:7b:98:5b:21:4f:87:0f:3f:2f:a4:35:f7:
2d:4e:07:28:2a:56:b8:38:2c:6d:ec:c1:60:f0:6a:
18:b4:33:e4:98:11:16:aa:87:c9:be:79:62:70:48:
b4:eb:96:5c:04:5d:f9:c2:6b:22:9e:2f:0f:05:21:
48:07:81:24:75:d6:0e:ea:96:c9:a1:2d:a1:48:ee:
af:8b:26:36:d8:44:5d:75:23:c1:b2:7b:ee:06:44:
82:23:1b:2f:a4:3a:8a:cc:90:c2:0a:72:5d:ba:f3:
d6:da:fb:c4:89:d0:6c:ca:b8:b1:c6:4b:ed:44:23:
6f:23:69:77:d0:8a:6a:60:c1:39:b4:9a:56:4b:62:
07:b3:ac:c4:3d:7a:33:ce:40:16:49:17:2a:fd:33:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3D:77:AD:4B:AC:EA:63:BA:76:CA:6F:99:BF:9D:71:EF:E0:5D:27
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:cf:7b:45:e3:27:b9:42:06:87:21:ee:80:6c:71:ae:ab:
4a:e4:f3:f8:fd:2b:54:dd:56:36:40:fd:35:18:1f:f5:56:54:
7b:d4:07:12:58:82:8d:1e:1f:27:75:b0:7a:4b:60:9c:80:b4:
e2:a6:87:99:4c:10:bf:0a:49:9b:ed:4c:99:b6:89:db:48:a3:
d2:5e:88:61:76:cb:3d:30:66:2b:80:73:b9:d6:f6:77:1a:d7:
1a:26:bc:63:a1:01:40:81:20:9f:91:75:6f:78:bb:4e:75:0c:
eb:dd:b6:fe:86:40:54:01:ce:c9:5c:f1:89:ef:eb:31:5f:92:
86:e0:12:12:0b:73:9b:e7:32:30:bf:60:5c:ad:a7:24:a2:01:
50:a5:7a:c9:b3:0e:94:79:f9:82:4a:cc:d7:5d:8f:03:f6:48:
fc:4c:6c:7d:76:27:38:66:93:19:dd:33:02:e4:a5:10:f8:07:
69:50:75:79:f6:86:e3:53:eb:c8:03:7a:a8:b3:7c:f4:fc:71:
8e:0d:a7:9f:54:2d:df:46:70:43:67:f4:00:5d:69:02:a4:de:
e1:3a:88:ee:ab:e2:b4:5d:eb:d7:13:5a:6a:ae:9a:3c:b8:1e:
65:89:08:2c:b8:b1:fe:5c:95:bc:35:ba:2f:2d:6d:01:fa:0d:
9a:e9:dd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:03 2026 by rpki-client