Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: PNx+4dXa6M+hq69bbX5v/m7a1cZhPBKJwfDGUBzGAvg=
Subject key identifier: 1B:53:CE:7D:D9:CC:7C:67:D6:1A:6A:33:61:F4:05:FB:F5:7A:F8:54
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019F8FEBC538150A450BF36C36D0381AF1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 13E9
Signing time: Thu 23 Jul 2026 17:00:21 +0000
Manifest this update: Thu 23 Jul 2026 17:00:21 +0000
Manifest next update: Fri 24 Jul 2026 17:00:21 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: YKYFKsgMrbVGp3PI1TNBKdevw6Qf2gyfPAO+dcpJ73Y=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:c5:38:15:0a:45:0b:f3:6c:36:d0:38:1a:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Jul 23 17:00:21 2026 GMT
Not After : Jul 24 17:00:21 2026 GMT
Subject: CN=1b53ce7dd9cc7c67d61a6a3361f405fbf57af854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:10:41:30:9b:e0:41:e7:22:f1:3d:0d:1d:
b3:0c:41:13:b0:95:ce:e2:51:bc:14:9b:10:f1:72:
6a:44:81:80:4d:3f:64:3f:eb:b4:cd:df:df:60:f5:
2f:b4:99:79:16:e9:40:40:ad:85:18:bb:9e:c3:e7:
ac:0b:9d:a2:aa:7c:5f:f3:93:8d:97:24:ae:d0:dd:
29:56:08:8f:27:67:4f:78:af:e0:8f:2f:05:bf:ac:
2a:cb:c0:20:d1:d6:af:41:04:06:95:0d:74:02:94:
08:c7:14:24:9c:06:88:7f:b0:85:59:4b:f0:d2:a8:
43:4c:58:e5:57:2d:10:34:6c:06:de:26:04:46:3f:
d9:1d:84:b5:62:00:58:90:99:6c:f0:ba:36:47:41:
a6:84:71:b1:f4:db:ec:85:d8:eb:63:e6:25:05:4b:
85:7d:f1:d3:6b:84:d0:38:69:08:fc:ca:f4:fe:e3:
38:47:37:d8:ec:69:a7:83:9a:e1:7f:76:65:3f:0a:
14:2e:1e:b3:57:f1:59:c9:b4:cc:92:e7:03:ab:f1:
43:28:e8:08:8d:74:5c:59:a2:78:cc:0b:6e:00:87:
bb:bd:f0:ab:26:ec:b9:11:97:78:e8:db:26:a4:8b:
a7:1e:72:57:08:f3:39:22:c7:65:6a:58:b5:57:f1:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:CE:7D:D9:CC:7C:67:D6:1A:6A:33:61:F4:05:FB:F5:7A:F8:54
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:ae:01:22:c7:d3:71:e4:e4:c0:5b:e5:ba:fd:98:df:b1:
20:5f:ca:bb:c6:56:9b:4f:37:72:ea:17:77:a4:7f:85:8d:16:
b1:a3:54:ec:05:88:2a:93:1d:86:de:b1:a8:41:8f:70:d1:83:
23:41:83:a1:37:37:58:b3:fc:2d:da:1b:5e:84:e2:94:04:c9:
97:be:14:0e:73:e6:15:8b:5c:ce:5b:77:7a:3e:8d:83:d7:44:
fa:c6:82:de:36:66:e7:e0:e6:23:84:e4:8a:a2:87:01:33:8b:
a3:eb:97:84:a0:c1:bf:69:bb:33:8e:c9:1d:d3:48:21:5e:ea:
5b:25:d3:e9:ef:51:e0:c4:d9:82:f8:d0:1c:95:45:e2:de:6b:
7f:80:d3:52:05:dc:7e:cc:c3:00:eb:4e:ca:a6:ac:c3:c1:75:
63:d6:1a:43:9f:52:dd:ad:f2:f8:c3:72:23:62:dd:87:cf:de:
07:30:73:92:dd:5c:82:3b:01:da:60:2f:d2:82:1c:54:42:8b:
2a:29:6e:2b:d3:b8:6e:e7:50:9b:ee:11:07:83:03:3f:56:42:
46:4a:95:3c:cc:8e:3e:7e:88:35:b2:38:1e:b1:a1:15:4d:18:
43:22:d8:30:b2:ae:56:3d:40:34:d5:02:b6:ae:bb:9e:e3:8c:
cf:c0:5a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:37 2026 by rpki-client