Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
File: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft (raw, json)
Hash identifier: uJ9kyL5Krs0NLIWBwrz612Ad5p5AtP9lRJIeMuDRD8w=
Subject key identifier: 5B:31:B7:F8:B1:8E:3C:03:F5:4B:4B:C3:64:56:24:70:63:F1:5A:8B
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Certificate issuer: /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial: 019FA6ABBEBCBC252E4780659E5F91175377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
Manifest number: 4B
Signing time: Tue 28 Jul 2026 03:01:41 +0000
Manifest this update: Tue 28 Jul 2026 03:01:41 +0000
Manifest next update: Wed 29 Jul 2026 03:01:41 +0000
Files and hashes: 1: 1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl (hash: VnQNzaCy29K1O4seXS1GCyw4835x2u+FhpIvwGr9DaU=)
2: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (hash: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:ab:be:bc:bc:25:2e:47:80:65:9e:5f:91:17:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Validity
Not Before: Jul 28 03:01:41 2026 GMT
Not After : Jul 29 03:01:41 2026 GMT
Subject: CN=5b31b7f8b18e3c03f54b4bc36456247063f15a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:0e:bf:63:95:32:55:89:38:a9:d2:f8:0e:
7d:b4:11:22:c2:92:c9:bf:cb:05:19:03:b9:e1:d3:
ac:f5:8b:5e:0c:09:25:26:aa:05:d5:c9:1f:45:32:
c4:a7:32:3b:6a:23:9e:e3:cf:ba:5c:1d:bd:c8:95:
bf:6c:a2:3d:98:35:ae:5a:03:e9:f3:be:6b:4a:07:
24:b1:9b:c4:1b:8a:ef:2c:fc:cf:37:c8:91:b0:bd:
1b:6e:2a:eb:22:f1:1c:7c:60:32:46:56:a0:98:53:
66:9f:30:2c:58:b5:29:ad:ae:74:79:3a:57:af:8d:
89:a0:15:4e:44:3a:da:4f:cf:0c:ab:cd:ec:51:bb:
0d:8d:f3:dd:d0:b3:28:08:38:ae:e3:8a:7c:43:ce:
00:dc:66:97:e1:4d:02:91:b2:fc:5a:e2:e7:16:21:
50:1a:e6:90:40:d3:05:c7:f4:ca:17:86:38:9a:c2:
7c:2b:42:1f:3c:a1:69:f3:c7:b1:ec:03:26:d1:fc:
f5:d6:19:4f:b6:5f:87:aa:db:cb:da:7c:1c:35:ba:
81:e0:8f:57:11:45:fe:32:e8:65:43:d2:18:70:6a:
88:f1:6b:cf:55:40:55:1e:63:3b:40:8a:04:1d:1a:
cb:cc:65:91:79:ff:f4:2e:ed:8e:e9:8a:f5:e1:51:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:B7:F8:B1:8E:3C:03:F5:4B:4B:C3:64:56:24:70:63:F1:5A:8B
X509v3 Authority Key Identifier:
keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:40:b9:d7:0d:cb:cd:3e:75:60:8c:43:56:9c:3a:96:65:
aa:d7:7d:70:72:75:27:4c:64:c9:0e:97:09:9e:c0:e3:c0:09:
1b:53:3a:31:e7:ab:73:3e:f0:a1:c4:e8:05:c0:0b:a4:24:d3:
30:b2:bf:52:9f:63:c3:b4:4a:ed:6f:27:50:d8:1a:87:f3:d2:
34:a9:56:bc:0c:8c:7f:ce:4c:bf:56:8e:b1:b0:16:32:d3:ac:
db:e2:13:94:5f:fd:7a:b6:3e:52:dd:10:a0:28:be:0f:e6:3e:
60:08:e5:cf:48:b2:ed:a9:68:ad:7d:c4:d7:f7:af:96:e7:36:
5e:3e:8d:80:39:14:67:16:f1:a8:87:0d:c6:c6:5a:36:67:f3:
6e:0b:97:43:39:be:c6:25:38:f8:f6:8d:39:79:c5:03:17:3f:
38:e9:67:2e:5e:47:82:d0:dd:75:93:53:27:a8:02:36:f8:94:
dc:a9:a0:8b:5d:bc:82:ab:c6:e4:e7:e5:b4:cc:dc:97:c7:4b:
61:3f:80:aa:f9:95:f0:e0:7a:07:e3:6d:72:e4:cf:a7:e3:d8:
a7:e1:9d:c2:fc:98:42:8e:1d:ba:f6:7b:b1:cf:94:ad:f6:40:
d9:8f:9e:1c:dd:21:ce:0b:20:0b:92:84:58:09:d8:a0:aa:c8:
6d:50:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:30:05 2026 by rpki-client