Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: PgQvRVO84XdvMpW4xfiTX5QKEargscNcF8rNu4+H04A=
Subject key identifier: E6:02:94:B9:AF:0F:19:D6:0E:93:9C:0E:59:3E:68:88:9D:4E:25:9E
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019F190C662BE454188A9E25A5AEF8C5C416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 16C3
Signing time: Tue 30 Jun 2026 15:01:10 +0000
Manifest this update: Tue 30 Jun 2026 15:01:10 +0000
Manifest next update: Wed 01 Jul 2026 15:01:10 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: qfguUI8voozAUxtE4E2GUHDigwOlJWOPQoQNlpKXFeE=)
2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:66:2b:e4:54:18:8a:9e:25:a5:ae:f8:c5:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Jun 30 15:01:10 2026 GMT
Not After : Jul 1 15:01:10 2026 GMT
Subject: CN=e60294b9af0f19d60e939c0e593e68889d4e259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:97:4b:e4:1a:3a:90:d6:71:21:6d:cc:fc:
8a:8b:06:1a:c1:5a:00:7d:7b:b9:9d:41:66:25:22:
38:7a:2e:9b:25:6f:db:a5:77:51:2f:59:4c:be:a0:
8f:ef:36:b9:74:6a:3f:44:fb:df:88:4b:85:8d:c5:
97:97:00:92:a5:67:67:57:0f:b1:95:f2:9e:d6:a0:
71:10:cf:65:a7:19:c2:a0:cf:26:00:95:34:82:e1:
88:a7:0d:9b:74:c1:d2:92:01:ee:aa:c8:20:e0:c0:
0f:97:7b:85:12:36:4b:c9:df:9b:d0:d1:d4:19:15:
18:9e:12:a4:e6:95:e7:0e:99:ef:eb:0f:b2:57:91:
4b:af:b7:48:a4:41:ce:b2:3c:69:1b:94:59:4c:b3:
9e:87:7a:a7:0f:7a:51:a5:37:d7:f3:71:4c:a9:fb:
5b:8d:6b:d6:fd:1d:83:dc:e3:19:28:1f:13:9a:64:
29:88:52:99:a6:9f:86:a9:24:f1:2a:72:07:47:b1:
f4:e1:af:f8:4b:f3:18:d8:7a:80:90:36:14:83:df:
66:b0:93:f0:c2:24:e5:db:7c:6f:09:ba:b7:c0:01:
fb:3a:63:98:61:2e:4e:8f:9c:6b:a0:4a:86:54:9d:
5f:bf:20:10:23:5b:15:b2:06:2b:0c:68:ce:61:c3:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:94:B9:AF:0F:19:D6:0E:93:9C:0E:59:3E:68:88:9D:4E:25:9E
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:e4:ad:77:b4:62:7f:10:cd:09:d9:da:3b:46:73:e8:9a:
5d:c4:e5:a8:64:7b:45:cc:2c:d4:fa:a0:01:9d:a1:c2:81:44:
8e:a1:2e:38:df:98:e2:04:7a:0f:6f:ba:56:36:51:93:f5:85:
7e:88:82:c8:e2:e6:c6:e6:c8:ae:27:d5:d2:16:2d:5a:3b:1e:
30:b3:2d:5d:a6:e5:cc:c1:98:dd:34:1b:b0:4a:34:2b:0b:41:
e0:d9:1d:27:2f:9d:ec:70:47:84:11:69:a5:57:42:f3:fd:07:
d0:be:d5:5f:71:84:b3:55:1f:5d:e1:d8:0f:79:de:55:e9:bb:
83:29:48:46:0c:5a:da:4f:41:e8:91:b5:8f:b1:a7:85:2e:d0:
8b:fd:f9:3e:00:03:8d:ac:22:a5:d9:c4:4d:35:b5:62:c9:b6:
6f:c9:2e:49:25:8d:03:7b:ed:aa:05:39:da:98:9f:da:70:24:
03:fe:09:7f:45:57:e6:6e:9c:fa:ee:b9:48:85:b2:aa:50:0f:
e7:27:ae:26:4b:b4:38:ea:60:0d:bd:24:10:09:74:c7:fa:6b:
0f:36:4c:fb:6d:bc:d8:fe:23:06:28:ad:01:7e:7b:cf:c3:24:
91:30:13:e9:4b:b7:d6:c9:02:eb:99:3c:b0:c0:02:cd:ef:1c:
2c:1a:85:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDGYr5FQYip4lpa74xcQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjYwNjMwMTUwMTEwWhcNMjYwNzAxMTUwMTEwWjAzMTEwLwYDVQQD
EyhlNjAyOTRiOWFmMGYxOWQ2MGU5MzljMGU1OTNlNjg4ODlkNGUyNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cOXS+QaOpDWcSFtzPyKiwYawVoA
fXu5nUFmJSI4ei6bJW/bpXdRL1lMvqCP7za5dGo/RPvfiEuFjcWXlwCSpWdnVw+x
lfKe1qBxEM9lpxnCoM8mAJU0guGIpw2bdMHSkgHuqsgg4MAPl3uFEjZLyd+b0NHU
GRUYnhKk5pXnDpnv6w+yV5FLr7dIpEHOsjxpG5RZTLOeh3qnD3pRpTfX83FMqftb
jWvW/R2D3OMZKB8TmmQpiFKZpp+GqSTxKnIHR7H04a/4S/MY2HqAkDYUg99msJPw
wiTl23xvCbq3wAH7OmOYYS5Oj5xroEqGVJ1fvyAQI1sVsgYrDGjOYcPlLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYClLmvDxnWDpOcDlk+aIidTiWeMB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmTkrXe0
Yn8QzQnZ2jtGc+iaXcTlqGR7Rcws1PqgAZ2hwoFEjqEuON+Y4gR6D2+6VjZRk/WF
foiCyOLmxubIrifV0hYtWjseMLMtXablzMGY3TQbsEo0KwtB4NkdJy+d7HBHhBFp
pVdC8/0H0L7VX3GEs1UfXeHYD3neVem7gylIRgxa2k9B6JG1j7GnhS7Qi/35PgAD
jawipdnETTW1Ysm2b8kuSSWNA3vtqgU52pif2nAkA/4Jf0VX5m6c+u65SIWyqlAP
5yeuJku0OOpgDb0kEAl0x/prDzZM+2282P4jBiitAX57z8MkkTAT6Uu31skC65k8
sMACze8cLBqFHw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:07 2026 by rpki-client