Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: H2Nx2x9VEknRbAOJEfSxRefrxvXMPjpJ/Zxy2dRktco=
Subject key identifier: 4B:95:F1:3E:CD:6F:DE:41:D0:0D:44:9C:CE:56:E9:37:A3:E9:79:B9
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 01A001014F609E1CC9E6403183C6AF5AF79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 12F7
Signing time: Fri 14 Aug 2026 16:00:57 +0000
Manifest this update: Fri 14 Aug 2026 16:00:57 +0000
Manifest next update: Sat 15 Aug 2026 16:00:57 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: vcxTtPvdiF24QigBDdcIsIrDaEXnqD+ivSMgGRPIOO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4f:60:9e:1c:c9:e6:40:31:83:c6:af:5a:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Aug 14 16:00:57 2026 GMT
Not After : Aug 15 16:00:57 2026 GMT
Subject: CN=4b95f13ecd6fde41d00d449cce56e937a3e979b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:ac:04:9b:e6:36:31:3d:93:20:0f:f4:4d:
6a:17:35:a9:1f:f1:3a:4e:1d:6d:f6:12:7e:c1:71:
43:c2:5a:da:eb:bc:27:7d:f9:32:bd:7b:2f:86:58:
ec:b8:c6:d4:a7:ab:b0:a4:ac:f0:cf:6f:fb:8f:e0:
88:a9:3b:00:51:a9:1d:7c:3c:0b:5c:4c:83:67:eb:
bc:2c:18:79:be:26:84:f2:24:7e:ac:4e:36:c7:e0:
3c:dc:73:ca:d8:ae:68:9b:62:7c:0b:49:a9:a8:28:
10:ae:49:cd:71:e0:44:e9:02:ff:cc:fb:5e:de:c6:
80:6e:dc:95:ef:7b:3a:24:ed:3c:bf:18:3a:ea:b3:
68:05:3b:d2:7d:92:98:f9:36:6f:46:8d:32:3a:01:
1e:51:72:89:a4:ce:ba:cd:b0:16:be:ca:0d:e2:bb:
ba:02:7d:c5:54:48:84:ae:2d:1e:65:ea:4f:73:33:
6b:68:d6:0a:24:19:7a:34:3b:a4:97:19:53:cd:e6:
50:66:fc:ae:27:f6:bc:ba:2a:6f:1a:76:3d:ea:69:
6e:42:53:4e:1c:06:7d:7e:b2:ed:05:1f:e1:fa:c4:
0d:2a:57:e5:ec:78:a8:8a:cf:e4:8c:34:62:ad:c1:
42:52:77:0c:e6:a5:26:99:20:3a:70:8f:83:28:91:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:F1:3E:CD:6F:DE:41:D0:0D:44:9C:CE:56:E9:37:A3:E9:79:B9
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:24:92:79:dc:2f:fc:0c:6f:0d:48:46:35:3d:2e:ac:f9:
6a:9c:5e:73:e3:f2:21:ad:40:e2:44:81:03:05:8d:fb:e3:14:
8c:26:b7:88:6b:40:bc:e1:7a:0c:ef:d2:60:fc:f7:43:a8:ac:
9e:47:64:a3:38:c7:47:43:b7:b7:39:38:4d:17:4f:02:64:28:
66:74:59:c7:d6:33:74:6f:74:04:bb:bd:6a:53:17:2e:75:28:
3e:62:bb:ff:ba:1e:50:ea:14:d9:e0:f2:ce:8c:fb:9a:3d:d1:
e5:70:81:88:f3:69:25:2f:0f:02:3e:ec:1a:67:bb:d9:97:6d:
f3:48:8a:4f:74:d7:10:cd:09:f6:29:42:51:94:63:ca:e1:86:
81:72:fa:d8:72:42:0a:ca:f2:02:20:b1:45:50:6b:e3:22:79:
d7:15:53:26:d2:d9:60:d5:1d:a6:98:8b:08:cd:89:cc:ac:f5:
f0:fe:23:9f:5a:65:ef:b2:dd:31:43:c4:d8:65:44:11:a4:2e:
9b:6c:64:e4:9c:a6:f5:10:77:4f:a8:fb:81:16:b0:2c:2e:d5:
33:47:7d:7c:d0:d3:ce:8c:3b:b5:1d:20:4e:a7:19:84:0d:72:
06:58:98:ee:7c:6b:d4:05:b8:57:9b:d3:59:7e:4d:ad:49:f4:
65:31:a9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAU9gnhzJ5kAxg8avWvefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTlhZDgyY2EwZmRiYTA2ZmUwOGI3YjllMGQxMzczYjcx
Y2I0NjkwHhcNMjYwODE0MTYwMDU3WhcNMjYwODE1MTYwMDU3WjAzMTEwLwYDVQQD
Eyg0Yjk1ZjEzZWNkNmZkZTQxZDAwZDQ0OWNjZTU2ZTkzN2EzZTk3OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp2sBJvmNjE9kyAP9E1qFzWpH/E6
Th1t9hJ+wXFDwlra67wnffkyvXsvhljsuMbUp6uwpKzwz2/7j+CIqTsAUakdfDwL
XEyDZ+u8LBh5viaE8iR+rE42x+A83HPK2K5om2J8C0mpqCgQrknNceBE6QL/zPte
3saAbtyV73s6JO08vxg66rNoBTvSfZKY+TZvRo0yOgEeUXKJpM66zbAWvsoN4ru6
An3FVEiEri0eZepPczNraNYKJBl6NDuklxlTzeZQZvyuJ/a8uipvGnY96mluQlNO
HAZ9frLtBR/h+sQNKlfl7Hiois/kjDRircFCUncM5qUmmSA6cI+DKJEXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuV8T7Nb95B0A1EnM5W6Tej6Xm5MB8GA1UdIwQY
MBaAFNWZrYLKD9ugb+CLe54NE3O3HLRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85MzQwNzMtMDIxYi00ZmJlLWIwMTkt
YjZhNmY4ZWRhNzVhLzEvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85MzQwNzMtMDIxYi00ZmJlLWIwMTktYjZhNmY4ZWRhNzVh
LzEvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP4kknnc
L/wMbw1IRjU9Lqz5apxec+PyIa1A4kSBAwWN++MUjCa3iGtAvOF6DO/SYPz3Q6is
nkdkozjHR0O3tzk4TRdPAmQoZnRZx9YzdG90BLu9alMXLnUoPmK7/7oeUOoU2eDy
zoz7mj3R5XCBiPNpJS8PAj7sGme72Zdt80iKT3TXEM0J9ilCUZRjyuGGgXL62HJC
CsryAiCxRVBr4yJ51xVTJtLZYNUdppiLCM2JzKz18P4jn1pl77LdMUPE2GVEEaQu
m2xk5Jym9RB3T6j7gRawLC7VM0d9fNDTzow7tR0gTqcZhA1yBliY7nxr1AW4V5vT
WX5NrUn0ZTGpSw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:31 2026 by rpki-client