Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: ocY17RlXnkuiAvq33u/FnJu8ig76966l/CbxGBo4NZ4=
Subject key identifier: 12:4B:23:29:DB:2F:89:CC:F6:B4:41:4A:4D:57:4A:26:9C:68:2D:3F
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019D3866223EBBC380949144844F5DA68816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 1186
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: doH4PszprnTy5lp7XYc0YVnl+3BjLrlkEjuCsQhDgEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:22:3e:bb:c3:80:94:91:44:84:4f:5d:a6:88:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=124b2329db2f89ccf6b4414a4d574a269c682d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:5c:94:f3:01:90:0d:a9:b2:10:fc:a2:98:
77:67:9d:ea:a9:cf:32:56:a3:69:71:f7:dd:2a:aa:
ae:41:b1:74:fa:d8:88:e1:c5:21:e6:15:a6:d6:78:
de:94:6c:a7:d0:12:5d:e7:d9:72:c4:3e:59:96:b0:
a1:86:bc:41:e1:2b:4d:8c:85:24:b0:f9:2e:b6:b4:
19:ba:d9:52:fb:44:db:50:d0:f9:b2:88:50:0c:54:
aa:00:b5:c4:71:47:94:08:3f:ca:62:c7:6f:68:a8:
92:23:12:bc:03:0e:8b:e7:8e:7f:06:31:17:d5:65:
27:67:18:19:90:9f:68:99:1d:9d:61:46:7a:e1:93:
32:84:5a:b5:48:0f:63:b8:54:41:07:39:36:dd:80:
02:18:b5:91:3d:b8:fb:69:89:39:ba:a1:75:88:8e:
44:ad:14:46:94:cc:b7:99:34:c7:17:c0:5b:40:eb:
c9:8b:d3:39:80:11:4e:06:46:f3:63:92:6e:f0:13:
f6:e7:0e:33:34:70:7c:e4:b8:8b:19:8d:e9:08:a8:
f6:fe:55:5e:89:c2:ff:9c:00:67:ee:7b:50:86:11:
56:c5:9f:f8:02:cf:46:7b:13:d9:4f:fc:13:6c:b7:
0a:bc:3e:52:b7:9f:45:87:db:f9:a2:bf:6f:d0:95:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:23:29:DB:2F:89:CC:F6:B4:41:4A:4D:57:4A:26:9C:68:2D:3F
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9b:aa:5f:1c:62:ca:c7:25:11:54:c4:8a:dd:60:cb:14:21:
7b:fc:e4:3c:ca:61:46:01:c2:7b:73:00:bf:98:11:fd:85:11:
fd:0f:32:25:5d:52:2b:6a:d1:87:4c:e9:9e:07:14:f2:e5:d2:
03:ab:11:2a:46:19:35:47:c4:6a:f3:9d:6a:98:bc:79:8b:d7:
7c:8b:e3:2a:bf:33:f5:ff:7a:3b:19:fe:97:a9:5f:2d:a3:ae:
27:32:5c:b4:27:78:0d:09:6d:9c:c4:04:72:ba:be:c5:01:ef:
23:bc:07:85:bd:21:54:36:5f:e9:0f:cf:91:be:7e:65:83:58:
54:e3:e5:d6:de:8e:0a:03:d7:ee:72:4f:1a:c8:17:38:0a:1e:
c5:4a:4b:9e:6b:7e:ca:bb:f4:d0:d5:6e:41:10:bf:12:e1:f7:
9d:91:f1:8e:12:89:34:60:5f:5d:f5:23:73:1e:20:f7:69:64:
ee:48:d4:1f:08:34:62:d0:0a:bc:44:b4:c2:9c:e7:bc:f8:ac:
a4:24:01:5f:fe:af:b9:5c:be:0d:66:8c:65:06:4a:69:5e:62:
1c:72:80:e8:e2:cf:26:5b:03:1a:69:15:05:51:5d:32:67:31:
fe:2c:f8:f8:31:b3:35:58:9b:24:8a:12:44:6e:00:16:dc:86:
f2:54:04:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:05 2026 by rpki-client