Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: x0jaI3MvU/o3vNancbliSkVue1m4YrL8t+eTSnmjfqg=
Subject key identifier: EA:D7:FE:DF:83:B4:E6:93:38:F5:DB:D9:53:F2:A1:10:8F:18:22:E6
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019E1D22CE60F23E327C322FB7246AC98426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 1329
Signing time: Tue 12 May 2026 17:01:20 +0000
Manifest this update: Tue 12 May 2026 17:01:20 +0000
Manifest next update: Wed 13 May 2026 17:01:20 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: rDMfPUL6JXLzHTzIIjHK0q7WF53TjkSzrwAvwkd3H6Y=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ce:60:f2:3e:32:7c:32:2f:b7:24:6a:c9:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: May 12 17:01:20 2026 GMT
Not After : May 13 17:01:20 2026 GMT
Subject: CN=ead7fedf83b4e69338f5dbd953f2a1108f1822e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:e0:52:5c:e8:b3:71:c8:1e:b4:8b:75:b7:
ce:5f:17:a0:0b:70:51:fd:c8:3b:55:10:72:b8:60:
b9:d3:8d:16:7e:f1:74:55:49:55:43:7c:5f:fe:fc:
97:a3:d1:07:bc:e9:f1:b2:9a:9a:a4:95:07:5d:8a:
c2:63:c0:3d:15:05:fb:26:dc:86:79:a4:6d:d3:63:
f2:ef:e2:3b:c0:33:24:b6:40:17:bf:d7:a9:83:77:
f7:fe:c4:f7:32:0f:eb:dc:cb:9d:6a:26:ac:8d:74:
f1:78:0a:f3:7c:67:9d:f2:e4:78:8b:19:ba:9f:32:
d7:f7:f8:1e:f9:14:6d:e0:f7:c3:57:38:54:45:73:
15:db:e4:fa:6f:83:e5:5b:5f:71:83:8e:b2:4e:f1:
08:2a:69:8a:c8:1b:84:f4:46:08:e9:dc:9c:11:85:
eb:c6:e6:c1:e2:de:be:ef:ff:ac:25:95:90:ed:17:
92:cb:a9:18:7f:99:81:c8:63:01:c3:e9:50:b3:75:
ef:99:97:68:e9:cb:86:36:bc:2d:76:b4:10:2c:5e:
d9:47:33:4f:ba:57:57:85:61:45:5c:c7:db:e7:85:
00:63:32:5f:2e:e6:de:6b:82:dc:b6:76:aa:75:c9:
6f:ae:77:8f:d0:95:c4:e3:93:59:3d:68:b7:12:07:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D7:FE:DF:83:B4:E6:93:38:F5:DB:D9:53:F2:A1:10:8F:18:22:E6
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:40:1c:f9:08:00:13:7b:d2:57:15:71:a4:76:fc:1f:e2:0a:
44:83:a8:73:65:b5:ef:b3:5b:73:51:02:37:d2:1f:af:55:71:
79:da:d8:f9:a2:2e:eb:4c:07:1d:8a:37:5b:75:73:2f:5f:a9:
22:f8:eb:0c:94:50:b0:e1:ec:4f:4e:4e:95:54:1c:31:b4:92:
06:be:47:a8:95:b4:2c:fd:f4:1e:9b:5e:08:88:88:a5:1b:45:
fb:22:1f:9d:19:57:2a:b8:6d:68:8f:f3:ad:93:84:e9:bd:06:
54:6a:98:88:1a:4d:a7:16:0c:f1:7f:5c:08:f4:c3:51:64:21:
a1:dc:cb:de:1a:b8:f0:97:4c:93:0f:4b:22:db:af:eb:49:75:
1a:5d:5c:ab:db:c3:a2:ad:2d:fc:a0:be:ae:ee:5d:c1:ea:79:
ef:95:6d:94:ee:48:b8:75:16:c1:7f:a5:b6:37:2a:a9:61:9e:
35:7f:83:cb:a3:8a:8f:e1:0f:b0:0b:18:43:a7:6b:17:16:e8:
64:81:c2:a4:bc:49:60:6d:3e:56:2c:a6:c4:bf:11:fc:4b:3c:
b8:ae:93:1b:b0:91:d1:d3:d3:2d:fd:00:fe:ac:c0:9e:bd:4d:
e8:fe:2f:e3:9b:36:03:d6:10:86:61:80:d5:33:42:3a:42:e9:
14:4b:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:50 2026 by rpki-client