Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: l7/it7MSNeE+O2dN8jbV12ySsaEIXOmB6dY3NAdPSr0=
Subject key identifier: 7E:F8:EC:89:A8:D6:6A:61:DE:F4:0A:FC:9B:01:80:0E:01:14:9A:0F
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019D28F2D0963A73C30DF33A5A0AB39C80EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0F7E
Signing time: Thu 26 Mar 2026 07:01:34 +0000
Manifest this update: Thu 26 Mar 2026 07:01:34 +0000
Manifest next update: Fri 27 Mar 2026 07:01:34 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: wMzas8FDsD31ipj8A3jHppTXkXlZq/hpAVN5eCe7SEg=)
2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d0:96:3a:73:c3:0d:f3:3a:5a:0a:b3:9c:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Mar 26 07:01:34 2026 GMT
Not After : Mar 27 07:01:34 2026 GMT
Subject: CN=7ef8ec89a8d66a61def40afc9b01800e01149a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:38:c6:2d:cd:dc:2e:46:90:80:16:30:59:
68:34:ff:82:7e:cc:02:40:06:07:22:cc:5d:74:26:
9c:94:6c:91:4e:4a:23:65:a5:1e:09:4d:fc:bc:4a:
ff:cb:00:92:da:f3:15:b0:a3:a8:c4:23:d7:3a:39:
8e:5e:00:e8:39:05:52:b0:9d:15:87:19:26:53:b6:
58:b1:53:3e:3f:23:96:ab:08:75:0f:da:be:aa:48:
c1:6a:31:fb:ac:1c:c6:44:b1:c0:ab:15:6c:03:68:
71:2e:4b:b5:11:fc:72:7f:ef:07:b5:b3:79:20:61:
9c:e9:8d:90:83:f3:94:e5:90:ae:f2:5a:9f:02:f6:
a7:ab:5d:d1:8c:d1:e1:a1:7f:c7:56:a4:09:d0:43:
86:b4:02:26:98:99:3e:88:db:c6:c2:4e:14:6a:b5:
14:b6:60:15:c2:f0:f7:91:83:e9:4a:1d:49:f9:26:
70:fe:9c:e9:da:e5:b8:7d:c3:19:ee:46:b9:0d:0d:
b4:ff:b0:c4:8e:bc:54:2f:36:09:18:cd:82:8f:5d:
10:b0:41:88:e6:86:63:dc:f3:92:fd:e2:e6:84:e9:
51:ed:c0:11:d7:f1:4f:55:a7:10:80:1e:a3:73:ca:
d3:dd:90:09:ba:8d:6d:cf:82:ee:3b:2f:a9:60:34:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:EC:89:A8:D6:6A:61:DE:F4:0A:FC:9B:01:80:0E:01:14:9A:0F
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:03:b3:35:d4:1d:72:96:0e:df:7f:ef:2e:83:e8:ce:4d:
f0:34:4b:19:a5:50:f2:6c:8c:5e:8d:0e:03:c4:13:f8:b2:7e:
c6:6c:5e:f0:a5:eb:18:ac:df:58:19:87:9d:c9:87:d7:18:30:
49:1c:eb:af:79:04:c9:0c:20:8c:03:e1:6d:93:55:eb:1e:f6:
d6:41:9b:75:76:44:55:47:4f:ab:a9:db:62:38:b3:fe:24:f7:
8c:6f:a4:95:58:98:f7:47:b7:0c:29:79:db:8a:16:13:85:ac:
60:14:91:44:7f:e0:fd:2a:3b:a7:53:2d:49:ed:5b:b0:e6:6e:
37:05:77:fc:d7:29:8b:90:af:ad:67:c0:67:4e:bd:8a:8b:71:
47:b8:66:ed:65:89:6e:db:78:ce:e3:7b:ff:df:79:47:53:21:
5d:63:c6:36:01:0b:dd:dd:65:2b:ac:9f:c8:80:94:08:c9:06:
2e:82:bb:1f:1f:50:2d:e8:ff:b1:77:12:0b:b2:6e:fd:ef:c8:
c6:30:70:e2:e4:87:f9:75:5f:ee:9e:4c:45:4f:14:e2:6a:80:
21:19:ed:39:8b:3b:9c:4e:1e:70:c6:67:7d:14:9e:3e:7a:07:
f4:fa:39:d3:3c:d8:83:ee:f8:89:95:e3:5b:96:70:ad:75:f8:
75:a0:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:22 2026 by rpki-client