Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: 3+hkILH89rJzNxOnXQZYBceouqpxR3MFMx29In8VNl8=
Subject key identifier: 00:29:14:37:21:09:F7:97:C3:B5:D0:D6:97:7A:EB:9D:BD:3D:7A:B8
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 019F859F2D8B53EF28F976357FE027E1C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 1296
Signing time: Tue 21 Jul 2026 17:00:29 +0000
Manifest this update: Tue 21 Jul 2026 17:00:29 +0000
Manifest next update: Wed 22 Jul 2026 17:00:29 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: 6G5wM4HjTPL8WV4IE8tGiK7fX3y3WNC1TEq/6uIfwG0=)
2: lHdNIPXL1NPpN_I-ENU1lZsbtG8.roa (hash: jk86REF7kbT8L7msK410kWiv2W01XiX13lxAUtI6+xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:2d:8b:53:ef:28:f9:76:35:7f:e0:27:e1:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Jul 21 17:00:29 2026 GMT
Not After : Jul 22 17:00:29 2026 GMT
Subject: CN=002914372109f797c3b5d0d6977aeb9dbd3d7ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:1a:cc:6c:e5:89:8c:68:5d:23:72:48:fd:
a6:19:39:29:ff:93:a3:fd:ad:dd:53:ef:93:34:cc:
82:81:e2:b2:70:2c:83:7a:9c:7e:e3:8e:43:ae:7d:
a2:f2:4e:31:c6:b4:df:ea:58:31:23:92:18:74:ed:
0f:32:c3:9c:f9:78:0f:3e:41:06:fe:50:f3:38:b7:
17:8a:a4:79:f2:8d:e1:5d:49:25:36:00:63:2a:84:
ab:48:25:14:25:20:db:ec:33:83:7e:fb:2a:00:76:
cf:60:1a:85:21:61:44:bc:64:47:92:3c:81:7f:1d:
36:28:21:9f:f4:a5:1f:11:2f:13:4b:c3:6c:6b:a3:
07:ad:38:2d:20:60:9b:70:29:84:69:00:e7:d4:f9:
58:0c:08:dc:2c:50:7e:7b:e3:8a:4f:36:41:66:52:
f3:4a:5e:96:4e:8f:ee:d9:dd:c7:ae:27:16:60:41:
de:16:da:ad:21:e0:a9:ae:98:72:7d:f1:88:9c:39:
8e:7e:26:fc:3d:56:6f:cf:2d:97:1a:e7:3e:cf:3f:
2e:1b:65:59:e5:75:fb:1f:25:5c:3c:3b:b6:b5:5f:
5a:00:40:a2:7e:c7:61:2d:4b:5d:66:a6:39:c1:87:
02:b7:4e:e7:1a:1e:e8:b6:4b:58:d0:62:33:59:e4:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:14:37:21:09:F7:97:C3:B5:D0:D6:97:7A:EB:9D:BD:3D:7A:B8
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:20:5f:86:f5:ba:b2:df:4d:1a:58:a0:1a:fa:ee:bd:3d:
e8:59:59:e5:65:f3:a6:f0:ea:e8:b3:3c:30:05:f0:b8:aa:2f:
0c:a7:58:b1:e2:06:a3:d4:6b:af:da:1d:05:38:54:97:ba:9c:
48:20:0a:28:a4:d6:e0:08:67:fb:24:89:4b:1a:3c:78:f1:3f:
f5:2d:56:15:2d:5f:d6:97:c9:dd:fe:61:1b:fc:9a:30:69:4d:
0e:a7:8c:04:5e:7a:d1:cb:ca:ec:6f:b7:44:cb:a2:de:b0:6f:
45:89:36:c7:7d:0d:7e:4f:08:e2:6a:51:c3:32:16:75:d5:6f:
85:21:01:5b:72:ab:23:da:d6:f3:3f:6a:65:64:b7:58:16:a1:
f8:a1:84:aa:60:5f:d6:8d:ce:8a:6b:15:c9:79:d7:43:e6:04:
9c:2b:de:e7:c0:eb:4f:51:28:9b:0b:cb:ad:20:19:aa:11:27:
a0:6c:c1:e8:46:e4:ad:5e:6c:cb:a8:f2:2c:61:18:3e:be:51:
3f:fb:0e:a1:08:c3:c5:55:52:b3:e0:5f:43:60:1a:fe:e6:7e:
27:32:58:25:cb:a2:62:c9:fc:71:b1:23:38:9c:27:25:7f:2c:
f5:16:0e:ea:f4:9c:12:d2:7d:f8:9f:44:9b:46:2b:05:9d:34:
2e:c3:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:21 2026 by rpki-client