Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: HkA6Rd9ltCfitG7c897iBa3Z/hrrd0y84O2nXQoK03g=
Subject key identifier: 1B:AE:51:D0:E8:45:54:42:FD:58:AB:A5:E4:80:4E:B6:10:8E:0B:33
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019D39AF633F736932889928071A05D4D16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 13:01:28 +0000
Manifest this update: Sun 29 Mar 2026 13:01:28 +0000
Manifest next update: Mon 30 Mar 2026 13:01:28 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: N7qUym+yTls0sAxfYOvU1mcI+u5peKRPy7wOIn2CXqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:63:3f:73:69:32:88:99:28:07:1a:05:d4:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Mar 29 13:01:28 2026 GMT
Not After : Mar 30 13:01:28 2026 GMT
Subject: CN=1bae51d0e8455442fd58aba5e4804eb6108e0b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:3d:65:00:f0:7a:43:ea:64:cd:c6:1a:a8:
ff:d7:0c:42:0f:33:cb:43:02:63:b7:e8:c1:1c:c2:
57:38:fa:5d:9e:9e:d2:b0:0e:22:ac:07:f3:5b:ec:
34:7f:ba:c7:20:71:d4:90:7e:96:b6:62:85:33:81:
c5:6f:bd:ce:97:bb:cc:df:eb:25:5c:de:b7:30:d8:
71:4f:c6:9a:f0:e6:1a:bf:fd:7e:4b:8f:bf:20:d8:
7d:82:b7:53:05:ca:08:35:30:da:84:6f:67:d0:87:
e4:02:ad:c1:b8:c5:25:79:75:be:07:bc:90:38:41:
2f:1f:64:15:a5:a4:d0:4a:55:8d:7b:68:50:d1:1a:
3c:65:05:1d:cb:8c:cd:b4:f3:20:48:d0:d9:40:74:
10:e6:17:ea:dd:4d:1f:67:c8:6e:18:13:4d:c2:3e:
88:0e:fc:7c:5a:40:2a:ce:d8:ba:9d:97:6f:35:eb:
89:15:d6:48:5a:39:fe:7a:a3:a1:ab:5b:1d:03:86:
e6:91:e4:0f:0b:11:92:bb:92:84:38:dc:2f:8c:bd:
ff:c8:19:de:7f:69:5f:d5:6e:04:48:60:10:e7:cc:
7b:2f:46:4c:13:8c:74:6d:f6:a4:60:73:db:7f:ea:
37:f7:8d:b0:f4:8e:c7:26:b3:56:8c:27:5d:7a:44:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:51:D0:E8:45:54:42:FD:58:AB:A5:E4:80:4E:B6:10:8E:0B:33
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2c:14:77:ce:35:30:39:d5:af:f8:e0:2f:7d:14:ff:5b:a1:
3f:33:9e:16:25:f3:ea:35:e4:10:cd:10:14:da:6d:99:e9:a4:
f9:71:c1:09:b5:b3:32:aa:f5:0d:91:a9:9c:19:c9:43:40:d4:
78:94:f0:cd:52:a7:32:e5:a0:1a:28:8d:34:c0:f5:88:f7:0d:
e2:e5:e0:cb:57:60:f3:fd:ea:5b:06:4a:25:8e:9a:62:b1:6b:
e6:67:dc:be:a8:b2:1d:28:e5:31:a2:61:49:5b:98:54:53:9b:
f2:fa:46:33:b1:3b:a2:e1:5f:05:4e:a1:ff:6f:e4:35:ce:2a:
a8:e2:97:9e:90:b0:db:9a:ef:f8:23:e4:82:3d:0c:6e:91:39:
ec:87:a9:55:67:48:3e:04:54:20:6f:47:bd:c4:af:32:09:57:
ac:75:d0:3c:5f:88:29:27:40:81:f3:6c:d5:75:be:a1:7a:c4:
b9:7e:1b:e1:1a:ef:42:91:5e:26:9a:cf:32:43:80:2d:cc:30:
d5:6b:e7:46:33:81:8b:02:79:df:92:a6:e4:6d:2c:8c:9a:8b:
f1:25:50:41:ce:c3:54:2c:b4:36:ae:e9:fe:1a:55:5d:7e:e6:
f8:01:af:1a:a3:44:ac:15:45:c7:eb:7f:9b:13:40:30:66:8a:
da:53:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:04 2026 by rpki-client