Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/1-pv2_zrbajINBztx7GSNgf0aZSA.mft
File: 1-pv2_zrbajINBztx7GSNgf0aZSA.mft (raw, json)
Hash identifier: 3Wqu7QIK2vmSUjqrC4kFNcUM1CzHOsf47EHMAwPvS4Y=
Subject key identifier: 08:4A:61:4B:8D:08:A9:45:78:B0:CE:67:D5:EB:D7:B3:BB:04:A1:35
Authority key identifier: FA:9B:F6:FF:3A:DB:6A:32:0D:07:3B:71:EC:64:8D:81:FD:1A:65:20
Certificate issuer: /CN=fa9bf6ff3adb6a320d073b71ec648d81fd1a6520
Certificate serial: 019F9090F3DA3C63B9F54943F44D69A0BEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pv2_zrbajINBztx7GSNgf0aZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/1-pv2_zrbajINBztx7GSNgf0aZSA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:46 +0000
Manifest this update: Thu 23 Jul 2026 20:00:46 +0000
Manifest next update: Fri 24 Jul 2026 20:00:46 +0000
Files and hashes: 1: 1-pv2_zrbajINBztx7GSNgf0aZSA.crl (hash: M+5EEOIChMZLu6GHVO52lDWrXHDF1T7N0rozUXxgY4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/1-pv2_zrbajINBztx7GSNgf0aZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/1-pv2_zrbajINBztx7GSNgf0aZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pv2_zrbajINBztx7GSNgf0aZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f3:da:3c:63:b9:f5:49:43:f4:4d:69:a0:be:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9bf6ff3adb6a320d073b71ec648d81fd1a6520
Validity
Not Before: Jul 23 20:00:46 2026 GMT
Not After : Jul 24 20:00:46 2026 GMT
Subject: CN=084a614b8d08a94578b0ce67d5ebd7b3bb04a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:96:21:0a:31:47:96:4a:c4:11:f3:bd:37:
43:d0:90:c2:64:a5:f9:01:33:11:77:a5:76:77:45:
20:69:1f:4c:90:31:6a:f6:50:9e:72:fb:e9:74:e3:
46:0f:4c:1b:47:f4:f4:2b:fb:15:9b:da:ec:bf:f7:
e4:e8:8b:44:20:92:21:5c:a3:2a:5a:3f:81:3b:5c:
cb:c5:2a:dc:c6:f6:08:9b:00:ef:04:5c:61:80:5d:
f2:ef:74:1e:fd:31:8a:a1:f3:c8:25:b8:67:f6:9f:
98:42:ea:5e:3a:b1:00:fd:8a:7b:7d:b0:98:29:dc:
db:6f:b4:12:30:f3:2c:4c:44:28:ec:24:91:40:c7:
e7:4a:ed:0e:94:3f:0e:2a:09:49:79:00:04:6f:6b:
5f:eb:6f:38:81:60:4c:c4:65:03:9a:4e:3c:48:9a:
40:66:3c:4c:c4:dd:82:8e:5d:83:b4:c3:d4:0a:3e:
21:1b:9e:9e:80:f4:69:bb:d8:b5:47:55:0b:28:fc:
94:de:9e:42:70:49:55:4e:71:93:c1:0a:91:21:41:
92:11:32:60:07:26:ad:3f:5e:bb:8a:12:d6:5a:9f:
61:36:16:6e:af:36:00:f0:9a:b8:87:51:3f:60:2d:
2e:dd:0e:53:21:d6:18:97:10:49:ef:e8:89:44:37:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:61:4B:8D:08:A9:45:78:B0:CE:67:D5:EB:D7:B3:BB:04:A1:35
X509v3 Authority Key Identifier:
keyid:FA:9B:F6:FF:3A:DB:6A:32:0D:07:3B:71:EC:64:8D:81:FD:1A:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pv2_zrbajINBztx7GSNgf0aZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/1-pv2_zrbajINBztx7GSNgf0aZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/1-pv2_zrbajINBztx7GSNgf0aZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:f2:81:0a:97:5e:50:63:93:71:ac:de:47:c0:d9:4d:48:
73:98:c0:4b:8c:3d:9b:25:67:a2:71:35:32:53:68:08:6b:75:
d1:39:80:45:63:92:89:17:92:31:a3:14:35:72:b4:0b:1f:0a:
9e:80:3e:a0:78:aa:6e:fb:d3:e2:a5:1f:7a:65:5c:68:39:aa:
df:83:e7:3f:90:7f:5a:b3:26:7e:4b:03:2e:2f:ff:dd:9b:14:
6d:e5:db:d3:30:6a:5c:cb:16:29:4a:84:d3:d3:f5:5d:a6:16:
ed:93:cc:e5:c7:04:b2:e3:ab:e2:e4:5f:91:54:32:8c:bc:53:
ae:4c:e9:90:77:f1:30:85:9e:a7:2f:58:30:d1:ab:6a:77:43:
6f:f8:e2:10:17:da:39:96:42:50:55:3e:87:5a:40:41:84:dc:
a6:9c:27:11:60:0d:2f:5e:a4:ba:b6:76:12:fd:58:e9:d8:cb:
33:3d:fd:ac:1f:f5:8a:46:c6:08:e4:3f:cc:17:0b:a1:82:56:
eb:de:f4:12:2a:bf:2d:aa:e5:2a:f9:de:e4:9f:7b:49:2e:f8:
43:71:6c:51:b2:94:3a:5a:08:46:95:ea:82:01:35:5b:54:70:
68:5e:8f:cb:22:18:d5:85:80:f2:d4:74:6d:aa:e4:28:35:01:
63:fa:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:08 2026 by rpki-client