Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier: QOj/TE8aptKWmPaBNtsDV8tq9PVfUs9YbtofapvYy/A=
Subject key identifier: 00:19:56:4A:BE:83:36:50:B1:AE:70:40:71:8A:A8:FA:EE:BB:45:B4
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 019D39417378603665FD242E8C93ABC9428C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number: 13E1
Signing time: Sun 29 Mar 2026 11:01:23 +0000
Manifest this update: Sun 29 Mar 2026 11:01:23 +0000
Manifest next update: Mon 30 Mar 2026 11:01:23 +0000
Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: SBKLPDTPaKoDbg77POmthXGLbk0/5WyuHNSPswUNrcU=)
2: svPKQJREMYzzw4nrwOykMCA6_Ws.roa (hash: OO4K57XkP/w3/FtcBT7vUzOVhuobiN05zaoo8Wri7/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:73:78:60:36:65:fd:24:2e:8c:93:ab:c9:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Mar 30 11:01:23 2026 GMT
Subject: CN=0019564abe833650b1ae7040718aa8faeebb45b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:f0:cf:38:f9:af:38:9e:a4:3e:76:c8:c8:
1a:f0:68:49:40:93:a3:fd:2a:3e:ad:c9:c6:4b:c8:
b3:ec:5c:a0:7b:db:80:af:65:8a:9b:7c:e5:69:51:
b8:8a:29:b8:8f:20:89:c9:c2:46:f8:0b:25:79:ff:
f9:b2:43:b4:3f:5e:07:46:2d:cf:b3:a0:27:ed:e4:
ad:cf:29:4a:30:f4:2d:e2:8f:98:44:19:04:52:14:
5f:d1:e3:2f:37:9c:b9:5c:cf:1f:7c:e7:ee:0b:3d:
8e:39:52:a7:3b:1c:99:19:a7:c5:1d:97:78:0b:cd:
cb:4c:ec:49:2e:12:3c:10:e0:f3:cb:49:2e:ff:67:
c2:7f:26:f5:15:cf:0c:f5:6d:6b:42:65:79:60:97:
48:0e:03:a7:6b:9e:e0:8f:19:62:14:3e:1b:dd:9d:
86:a2:aa:37:1f:e0:44:7f:cf:fd:9c:f8:ac:fb:dc:
d0:23:7e:f9:31:78:7c:1c:9f:7a:ac:22:53:a7:86:
9c:9f:35:a3:89:cd:d6:7a:5a:5e:8e:97:b7:01:de:
bd:8e:88:4a:dd:88:16:7c:61:19:7b:5b:0c:e6:16:
cc:bd:90:f0:95:0d:26:ec:6e:bc:34:85:48:7a:86:
85:06:f9:68:d3:e0:eb:5a:00:e5:0d:f7:d9:7f:d0:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:56:4A:BE:83:36:50:B1:AE:70:40:71:8A:A8:FA:EE:BB:45:B4
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3f:a1:bf:0e:36:5e:40:4d:47:be:e6:b5:57:fe:82:66:1c:
9e:f4:43:05:32:49:eb:fc:f7:66:5e:dd:4d:80:70:1d:49:2a:
0c:50:02:e9:1f:ae:0a:cb:b8:38:cb:6b:13:3d:2a:35:ad:42:
8d:ca:3f:54:1d:78:46:6b:df:37:1d:e1:51:01:05:ad:4d:15:
cd:8d:4d:ae:75:5a:cf:3d:bc:84:b5:51:7c:c2:cc:7e:86:45:
16:dc:27:18:76:8e:9d:15:89:25:26:a7:d7:81:0b:09:00:80:
3c:82:a9:41:84:08:b6:f2:7d:ba:45:0f:3d:05:e6:8f:71:83:
6f:63:7d:ef:4d:73:39:9c:63:ce:67:05:ba:e5:dd:b8:b4:a4:
b1:b0:40:57:a5:a2:00:d4:96:49:7f:42:13:25:70:3b:ec:16:
39:6f:e8:06:a5:75:2e:77:ac:d0:7b:62:3e:06:ae:2a:fe:93:
f5:87:54:7d:12:8a:7c:05:6f:6f:02:93:58:0c:37:37:d2:09:
b5:b2:43:72:df:38:72:a0:c3:45:01:e2:d2:d5:5a:07:3c:1a:
1f:dd:ae:14:0a:34:73:6a:05:5c:74:ef:a6:78:83:d6:b7:8e:
0f:89:e7:80:0b:88:ed:5c:a4:a3:27:0d:23:fa:6d:c3:14:a4:
30:1f:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:39 2026 by rpki-client