Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: f3WWIK4dnLqMExhmSK+RB+AqAq7EeMEI7Zvp06JC8H0=
Subject key identifier: B8:1B:D6:75:69:5B:FD:F1:AF:18:EF:AE:EE:AB:27:BE:3D:4A:1A:16
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 01A12B443C91B5280015D2F554F964E2343B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 14:00:54 +0000
Manifest this update: Sun 11 Oct 2026 14:00:54 +0000
Manifest next update: Mon 12 Oct 2026 14:00:54 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: ZLhqPQOe0Ezh8he2Cfc/+fS/Po+NELfYUKN/3IHVpsk=)
2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:3c:91:b5:28:00:15:d2:f5:54:f9:64:e2:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Oct 11 14:00:54 2026 GMT
Not After : Oct 12 14:00:54 2026 GMT
Subject: CN=b81bd675695bfdf1af18efaeeeab27be3d4a1a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:dc:60:31:19:2d:91:4c:1d:87:bb:24:db:
87:f7:c7:e4:74:05:a2:4d:dc:30:1a:ba:ed:fa:b4:
c9:1c:6e:8c:36:0f:56:3a:34:14:38:77:c7:3a:98:
5c:e5:9c:7f:bb:85:c3:75:55:12:f7:ce:56:6f:90:
f4:ff:c7:a5:3f:2d:3c:f8:53:f3:47:d7:38:f4:ad:
bc:2c:79:59:71:de:bb:03:e2:38:ce:3e:7b:d0:81:
58:91:dc:f6:fa:ec:86:54:f6:9b:e8:0f:ff:1f:e9:
01:29:41:da:0e:2b:a2:7f:19:93:a4:0e:d9:69:d3:
e8:e7:f1:f2:c8:62:3b:c7:c1:60:00:da:15:bc:44:
39:0c:2c:ed:23:61:0f:54:bd:34:86:60:4d:27:a7:
60:04:56:45:f7:08:04:8b:1e:f7:d3:6c:b1:65:68:
59:d5:47:e1:9f:f1:c6:80:71:fb:6c:c5:76:a1:64:
ca:f0:4f:44:d2:be:b5:e3:12:3c:70:4d:df:4e:ec:
9f:c8:19:a3:cc:28:31:7b:fc:ce:49:8a:2b:46:28:
51:df:84:b2:0c:c7:1b:3a:68:7f:b6:7d:51:76:00:
f9:e7:ff:b3:c6:11:43:75:af:ec:ff:f4:4d:72:9d:
fa:99:63:27:3e:0e:6b:0d:5e:90:34:a0:a5:2a:f8:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:D6:75:69:5B:FD:F1:AF:18:EF:AE:EE:AB:27:BE:3D:4A:1A:16
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:23:7e:52:81:2c:79:55:ec:22:01:13:51:80:cb:68:4a:9a:
c3:cf:e4:3c:cf:12:b8:0c:b4:84:01:c8:79:6a:e4:3c:7b:ac:
fe:2a:67:94:c5:f3:89:f9:3f:20:dc:18:7d:c9:67:7a:44:56:
5d:a6:2f:9a:bd:ec:22:38:fa:b1:18:6c:38:33:c8:c3:9a:ce:
ba:0c:84:22:b7:d8:31:28:6c:2c:bb:1b:f0:ce:f6:ba:2f:40:
ba:56:46:e5:4b:cd:25:54:95:41:5a:95:9e:99:69:c7:94:e1:
5d:9d:92:6d:c3:30:0b:7f:80:54:fa:ff:f1:78:2b:a6:60:3d:
24:cd:12:da:52:9f:08:2d:12:c2:2c:00:6a:1f:31:99:25:9f:
2b:ad:92:c3:a3:2a:10:6c:0c:9d:fb:e8:60:56:73:3b:01:98:
db:a1:36:1a:dc:84:29:22:ed:07:ac:e8:f6:0f:3c:98:a9:b9:
b9:85:56:60:a2:70:8e:71:e6:d3:c9:10:14:1b:0a:7f:c3:54:
39:b8:e2:6c:40:b3:e5:c8:86:e2:f4:72:24:41:5c:0b:a5:22:
2d:a5:2e:45:7e:21:5b:36:b8:a2:ad:c8:a9:4d:2b:7b:1e:e8:
1d:aa:0a:33:de:5d:5f:7f:99:4c:34:53:08:17:da:12:98:0d:
60:63:bc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRDyRtSgAFdL1VPlk4jQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzBhMjk5NDFlZmJjN2E3OTI3ZjAyOTQ4MWUyYzcyNWEx
YTY3MTEwHhcNMjYxMDExMTQwMDU0WhcNMjYxMDEyMTQwMDU0WjAzMTEwLwYDVQQD
EyhiODFiZDY3NTY5NWJmZGYxYWYxOGVmYWVlZWFiMjdiZTNkNGExYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowXcYDEZLZFMHYe7JNuH98fkdAWi
TdwwGrrt+rTJHG6MNg9WOjQUOHfHOphc5Zx/u4XDdVUS985Wb5D0/8elPy08+FPz
R9c49K28LHlZcd67A+I4zj570IFYkdz2+uyGVPab6A//H+kBKUHaDiuifxmTpA7Z
adPo5/HyyGI7x8FgANoVvEQ5DCztI2EPVL00hmBNJ6dgBFZF9wgEix7302yxZWhZ
1Ufhn/HGgHH7bMV2oWTK8E9E0r614xI8cE3fTuyfyBmjzCgxe/zOSYorRihR34Sy
DMcbOmh/tn1RdgD55/+zxhFDda/s//RNcp36mWMnPg5rDV6QNKClKvjM4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgb1nVpW/3xrxjvru6rJ749ShoWMB8GA1UdIwQY
MBaAFNcwoplB77x6eSfwKUgeLHJaGmcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2Et
M2MwZmExOGM1OGNiLzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NGM1YTktYjM3OS00OTk5LWFmN2EtM2MwZmExOGM1OGNi
LzEvMXpDaW1VSHZ2SHA1Sl9BcFNCNHNjbG9hWnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiN+UoEs
eVXsIgETUYDLaEqaw8/kPM8SuAy0hAHIeWrkPHus/ipnlMXzifk/INwYfclnekRW
XaYvmr3sIjj6sRhsODPIw5rOugyEIrfYMShsLLsb8M72ui9AulZG5UvNJVSVQVqV
nplpx5ThXZ2SbcMwC3+AVPr/8XgrpmA9JM0S2lKfCC0SwiwAah8xmSWfK62Sw6Mq
EGwMnfvoYFZzOwGY26E2GtyEKSLtB6zo9g88mKm5uYVWYKJwjnHm08kQFBsKf8NU
ObjibECz5ciG4vRyJEFcC6UiLaUuRX4hWza4oq3IqU0rex7oHaoKM95dX3+ZTDRT
CBfaEpgNYGO8wA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:40:10 2026 by rpki-client