Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: c6JwtJ0EpdVV5clIeMyvm0leYb2YJsVAV3y9fNf2M+I=
Subject key identifier: 33:88:B9:8D:2A:F0:8D:E6:4D:5B:F8:2C:18:F3:9D:4E:72:59:19:7C
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019F90FE9DABD9B5C02CF2B4CCF2E263D613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 10BD
Signing time: Thu 23 Jul 2026 22:00:33 +0000
Manifest this update: Thu 23 Jul 2026 22:00:33 +0000
Manifest next update: Fri 24 Jul 2026 22:00:33 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: /VkiVJhWQ9omDOOJ7tBaKG+JrfOeGThqF0Imzl4zYtk=)
2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:9d:ab:d9:b5:c0:2c:f2:b4:cc:f2:e2:63:d6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Jul 23 22:00:33 2026 GMT
Not After : Jul 24 22:00:33 2026 GMT
Subject: CN=3388b98d2af08de64d5bf82c18f39d4e7259197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:7a:1c:93:54:1c:61:4a:61:c7:a2:9c:a6:
49:29:61:ff:9e:69:8b:c5:27:1e:38:58:76:ad:eb:
4b:b0:d5:0a:9e:14:fd:0b:4d:df:3f:a5:ad:cd:c6:
f9:51:db:0d:14:31:9f:b0:2c:50:1b:bc:c4:47:55:
59:e7:ed:06:98:c6:c1:09:21:ac:57:2b:45:da:aa:
8d:a9:8a:ea:7d:40:78:5e:06:16:8c:ee:84:59:eb:
06:30:1a:10:65:c7:91:eb:a9:5e:2a:05:b3:fd:13:
7e:da:bf:89:8a:1c:ae:8c:7f:cc:47:2e:64:00:61:
06:09:e0:94:e1:24:20:24:d3:f7:af:30:77:8f:24:
8f:14:48:1f:6f:22:ff:43:85:f1:c8:c0:a2:13:6d:
01:02:d4:b7:fa:47:a1:1d:95:fa:1d:cb:98:90:b3:
dd:b0:59:c7:67:1d:60:33:40:83:b7:d6:b4:60:d5:
64:f3:fb:86:ef:53:18:ea:44:5a:87:33:bd:b6:9c:
55:84:55:0e:9d:4d:0c:92:14:cf:bb:9d:b3:8e:c3:
76:d2:a9:f6:ed:6d:0a:29:3c:bc:02:45:77:48:33:
80:a2:86:7c:38:ea:fc:26:19:2a:0e:f7:e9:ce:01:
eb:88:04:86:cf:ec:d5:4c:2f:b1:1f:b4:23:b6:20:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:B9:8D:2A:F0:8D:E6:4D:5B:F8:2C:18:F3:9D:4E:72:59:19:7C
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cc:8f:fd:6f:ba:13:30:1e:df:53:d5:ef:1d:45:ce:38:10:
80:f0:95:62:8c:70:55:4d:1b:6d:32:d9:b2:f9:d3:7a:7f:0a:
75:a4:13:0a:aa:20:91:7a:43:50:e1:7c:f1:f6:68:c6:3a:1a:
96:6f:57:00:3b:48:55:36:d1:dd:63:72:03:74:8c:05:68:f2:
44:61:46:3e:db:55:9e:d1:7c:57:c0:db:a2:a6:33:ca:cd:05:
3c:57:7f:21:6b:68:a5:40:08:e1:52:dc:fe:a4:d1:2e:0a:28:
00:3f:c1:78:88:ba:e5:eb:da:ad:11:de:a9:85:fd:46:64:89:
d6:88:a6:fb:c4:02:1c:e5:96:be:2b:ca:e4:f7:5b:57:31:90:
c8:84:0c:db:ef:1c:80:b1:2d:f4:b4:8f:a4:83:21:4c:6f:66:
b7:1d:bf:a8:d8:31:c0:f9:56:43:47:7a:7f:07:75:12:f2:a3:
2a:b0:2b:ca:14:71:5b:77:32:cb:39:ec:90:be:15:12:fc:48:
70:d7:84:ee:c5:2d:2f:9c:62:9b:40:bf:8b:0b:bc:eb:be:de:
74:68:55:29:ab:18:3f:63:17:1b:59:10:90:b5:85:cb:83:73:
a0:20:d7:f4:e5:c5:92:af:e0:5e:bb:e5:62:48:34:78:ae:ac:
db:df:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:02 2026 by rpki-client