Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: PGV1WSGhQ548ipqNk4KWhtXxFj+tlPTtRZszZ3Mon7A=
Subject key identifier: 1F:06:97:B3:4C:72:07:1F:5F:51:7D:85:B6:CE:76:F6:DB:8B:84:B8
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019D382E4722B0118C396EF91E58F6609FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 15CA
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: 0yVGGoNkHIYsW4LvM4/dCXzlgNEPyhioZmsILI9iBCc=)
2: gJbsOyypAmklfS6fGeH-_QYDJ-U.roa (hash: go14+kLLbMelxs6BbikRz9DMKL/v0HkF1AZWZNY9EMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:47:22:b0:11:8c:39:6e:f9:1e:58:f6:60:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=1f0697b34c72071f5f517d85b6ce76f6db8b84b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:a3:e9:d3:75:d0:12:ee:c8:30:de:ea:fa:
6b:b3:92:79:60:25:67:e1:9d:e8:43:09:3a:90:2d:
24:7e:f2:4c:51:18:33:e1:58:f5:e3:fe:2a:b0:36:
8e:bc:51:ef:44:13:5d:2b:30:35:6e:ca:66:0a:c5:
b9:37:85:1f:48:d6:91:f6:5f:49:c2:21:d0:c2:3a:
c7:76:83:9b:18:5f:9d:c2:6f:94:bb:f4:80:62:3c:
91:b0:0d:c3:ce:71:12:47:fd:b2:e2:e1:11:ae:f2:
d0:d2:b6:02:a0:5f:5f:1a:a0:c6:0a:b0:7b:73:42:
e3:a7:85:73:0f:05:9d:c2:33:53:a5:17:c4:e9:5e:
18:3f:98:d3:c6:73:6f:87:ef:1c:19:5f:f3:b9:f4:
83:82:1b:0e:52:d8:89:c3:db:d6:89:b5:ea:a9:d8:
c8:37:06:3b:2d:a8:ea:40:bd:a3:50:ed:58:65:ca:
e6:fb:ae:76:46:7f:d6:35:6d:6f:6c:26:4d:44:60:
ba:b6:0c:b0:1e:f1:50:4e:8e:cb:4e:c0:ae:61:3b:
81:fe:87:47:be:a7:42:ef:e3:1f:8c:1a:4f:f6:65:
c7:5d:95:6a:69:ab:91:4f:c8:25:3c:20:a2:d3:02:
8c:48:98:c4:ae:d4:1e:3f:c1:d5:c8:2a:07:22:fd:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:06:97:B3:4C:72:07:1F:5F:51:7D:85:B6:CE:76:F6:DB:8B:84:B8
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6f:29:99:99:39:d2:3d:58:2a:af:0e:51:f9:42:0c:82:3c:
ea:02:c2:35:91:4d:10:30:af:1e:8c:a6:8f:04:c0:20:ff:52:
d4:51:1f:8a:85:e8:99:5c:55:c6:df:1d:a4:3e:14:84:0b:a8:
ff:df:2e:73:88:52:37:a2:b2:b9:d0:8d:23:8d:78:a8:5a:83:
b3:4f:06:a2:0a:e8:b0:8d:5b:8b:96:1d:c9:40:40:1d:bd:0b:
ff:26:c7:f8:8e:23:4f:f1:65:2c:fa:17:6f:24:0c:0d:c2:1f:
a9:e8:a3:f7:b6:49:8d:c2:fc:62:d0:d3:22:b8:9a:60:ab:10:
73:c1:cb:1f:25:08:ec:3a:75:0e:85:5a:e4:b4:ae:e2:90:39:
f6:3a:51:02:83:cd:b5:7a:0d:6b:d3:c2:75:0a:fd:21:7e:4f:
19:63:84:2d:09:b7:6b:e7:9a:6c:49:31:6f:93:fa:b8:af:c0:
f5:b0:ab:c8:11:2e:ec:f9:b7:cd:01:e6:68:08:0a:8f:60:ba:
dc:f5:6e:84:5d:76:84:1c:fd:27:21:1d:f9:47:19:01:c0:61:
42:b7:9e:34:75:10:08:8b:bc:f6:47:12:f3:ec:56:e2:e6:82:
d1:03:46:29:a5:7d:ba:d4:2e:45:dd:64:f1:35:58:fe:36:68:
7c:0f:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:38 2026 by rpki-client