Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: hQPfe4She8tAFwEGqcjhKyPDf5hwcO9FDM6AgemfXaM=
Subject key identifier: 4C:30:D9:1B:5A:C9:A2:9F:21:93:4F:2F:D5:33:80:C2:9B:90:D0:D1
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 019D3941064E1BED6844425387C844BD61D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: FzXav0DLwF+1boIeST6iorZv5f77laHT/u02jrG/pkA=)
2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:06:4e:1b:ed:68:44:42:53:87:c8:44:bd:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=4c30d91b5ac9a29f21934f2fd53380c29b90d0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:a6:20:65:1f:7c:8e:e9:b4:bd:3c:5e:8e:
e7:5d:43:53:c3:fe:f1:65:a1:c6:8a:96:60:22:3f:
5d:79:61:d1:43:9a:bf:30:f7:bd:2a:f7:a6:f5:88:
37:18:ba:e2:37:f2:9d:f4:8f:a4:69:c8:98:0f:df:
d0:26:85:ee:5a:d0:a7:92:24:73:ac:7c:de:4b:ac:
71:42:c9:27:cf:74:19:ec:53:22:bd:2e:a6:4d:d8:
89:18:68:ed:b1:ac:e6:be:8b:e3:99:71:e5:a1:97:
91:2e:ae:43:83:03:fc:0c:db:1d:9d:a7:2e:60:93:
e9:aa:6a:51:0e:b2:ff:2c:60:54:02:e3:97:59:6f:
79:7b:a8:b4:70:56:af:53:ac:f6:1b:c1:f5:0c:17:
fe:b4:45:c4:57:b7:fb:4b:2f:04:2b:6d:82:ca:fd:
c5:f4:1a:bc:fb:82:a3:51:bd:3b:f7:c4:33:41:84:
07:e6:40:a1:f4:34:aa:55:1a:16:10:21:99:67:f5:
6c:47:99:32:a2:8b:d9:83:1f:17:61:dd:bd:a4:f2:
b6:30:47:3b:f9:ba:98:9a:24:27:29:48:d2:1d:ae:
4b:05:7f:8a:7e:93:7b:6f:af:0e:75:45:e3:c6:f4:
c4:4a:ec:73:1a:d7:db:4f:ee:64:54:a2:e0:c1:18:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:D9:1B:5A:C9:A2:9F:21:93:4F:2F:D5:33:80:C2:9B:90:D0:D1
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0f:04:e9:ea:9b:16:ec:56:ca:54:25:b2:86:a0:7e:6c:61:
89:17:f4:2f:f5:71:b6:a2:62:71:78:6a:6d:96:89:c4:bb:7a:
09:42:19:92:09:8c:66:43:93:4c:e3:f8:ed:25:70:29:61:b0:
d9:20:84:52:38:b7:f6:ea:66:11:48:38:7d:90:93:3d:45:12:
a7:5c:61:a6:82:a3:e0:06:2b:e5:e9:fb:7e:37:ec:d1:37:06:
fd:63:e0:04:89:1b:d2:ea:15:52:b1:42:ad:36:ca:2d:79:1d:
6c:e9:d5:68:9b:a4:4a:24:fe:48:db:10:f1:12:16:64:19:2f:
0f:8b:db:40:64:0c:67:9e:ab:a2:63:69:c0:e8:61:96:15:42:
a4:52:cf:81:be:2b:5f:04:c4:f5:1a:a0:6d:85:8c:d6:94:a7:
6b:35:87:a8:f6:ed:aa:47:0d:b5:82:cb:2a:d7:cf:0b:53:9a:
c9:94:8d:ad:b7:1a:f7:f1:07:80:d3:25:13:20:c7:6b:9a:d0:
30:4a:0a:f7:fb:15:5f:02:c5:df:82:e4:ce:96:8a:04:54:fd:
cb:97:7c:24:80:eb:7f:5d:dc:58:26:00:a1:33:74:57:9e:8b:
07:13:02:d1:86:05:e3:54:4d:56:f3:09:22:62:84:c9:8e:aa:
7b:e9:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:47 2026 by rpki-client