
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: hnPISiX/os+TL7DXLBmehlJl4dnBk01rz1izVdjc5ok=
Subject key identifier: B2:4F:84:B4:12:77:C9:9E:53:CE:A1:F3:A5:30:CF:B0:99:34:7F:9A
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 019F3CE2BD7DCD4A8111EBFBF9715A4ED7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 199B
Signing time: Tue 07 Jul 2026 14:02:00 +0000
Manifest this update: Tue 07 Jul 2026 14:02:00 +0000
Manifest next update: Wed 08 Jul 2026 14:02:00 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: N/skwfyo4FuhpQkux6wJIjMLKpe3iZhi0hxstl+8thE=)
2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:e2:bd:7d:cd:4a:81:11:eb:fb:f9:71:5a:4e:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Jul 7 14:02:00 2026 GMT
Not After : Jul 8 14:02:00 2026 GMT
Subject: CN=b24f84b41277c99e53cea1f3a530cfb099347f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:92:37:d5:27:6b:24:a9:62:18:49:a7:39:
98:d5:86:d7:ee:3f:70:b5:91:5a:57:06:73:b3:74:
ff:10:ff:cb:9c:fc:76:83:26:8e:1a:d3:2e:0f:7a:
f4:77:df:ba:48:42:9f:37:a5:01:9e:93:50:01:2d:
4d:2d:6c:5d:84:e4:10:2e:3d:d9:8a:20:e7:f5:c7:
08:90:d8:ee:07:13:ae:f5:fb:de:d2:c4:33:16:6e:
7d:b1:00:00:9a:1d:55:a3:60:09:a9:f9:38:3a:a9:
09:c1:5a:94:e9:09:0b:65:17:0b:92:4d:ae:ba:c9:
41:80:92:13:05:43:b6:33:0e:26:bf:2b:b0:8d:b2:
da:b6:a1:33:c1:73:6e:31:62:28:ab:fd:03:ad:0d:
88:8a:00:32:98:a4:c2:05:be:42:b5:e2:65:42:9f:
62:3f:f4:b4:8f:84:52:ab:24:b4:93:e2:4c:4d:20:
c3:4b:06:4a:c4:18:74:44:73:8d:b6:bf:be:4d:c8:
f6:4f:5b:da:1a:9f:0e:59:c3:29:88:0c:88:62:58:
ea:63:e5:f2:c6:03:88:c1:28:80:42:9e:0f:66:c7:
fe:15:49:b1:cb:6e:5f:5b:fc:e1:ed:a9:df:27:cd:
9d:2b:f8:a5:4a:9c:48:ad:94:21:96:a9:8d:3b:f5:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:84:B4:12:77:C9:9E:53:CE:A1:F3:A5:30:CF:B0:99:34:7F:9A
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:61:fa:0e:a8:5f:2d:dc:81:fb:74:79:97:22:f3:29:71:ba:
e3:c3:6b:86:2f:63:c4:f5:fc:ac:e8:1a:15:25:df:1e:21:04:
76:d3:ec:54:95:b0:1c:6c:f5:90:8b:7c:91:81:e4:49:57:36:
07:38:34:af:31:9c:20:6f:69:66:be:4f:c1:5e:fb:80:e2:9b:
61:4c:55:fa:be:f7:ef:ad:67:c6:78:96:7d:15:99:e8:a2:ef:
2d:4b:35:9a:e3:9c:9b:11:a6:f1:e9:aa:19:8e:c0:01:a5:e9:
91:21:16:50:a0:7e:26:f0:49:b9:a0:fa:74:03:5d:db:72:a3:
31:87:51:d2:5c:bb:7d:e6:2e:18:c4:df:c8:7a:5d:fc:08:a2:
36:f0:26:e1:d1:73:7f:ae:0c:36:ef:62:97:1b:58:8f:bf:c3:
d3:c0:9a:ad:54:4a:13:ac:bf:25:78:9a:f4:17:c6:88:68:fd:
c6:93:cc:56:ef:c7:95:3e:4a:dd:8e:d5:a2:31:04:ea:fd:d6:
5e:53:41:7e:81:e1:ce:a5:4e:7c:55:8a:86:f7:a0:05:da:8c:
fc:47:68:3a:37:fa:d5:a0:9f:8a:ef:82:61:6a:67:f0:a6:d1:
55:56:31:dd:ab:34:fd:d6:d0:2a:e5:d2:ea:de:53:36:5c:fa:
e2:7c:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:12:09 2026 by rpki-client