Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: xs5xMsZbg+se9qS3AziITBHe6iq/d8DfFjcASLIbKH0=
Subject key identifier: 04:0D:1D:50:40:E1:93:48:F4:F0:96:5E:CC:9C:D9:17:70:F3:52:1C
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 01A102B66E853394CCD93DE1FFF0C8E1F528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 14A9
Signing time: Sat 03 Oct 2026 17:01:12 +0000
Manifest this update: Sat 03 Oct 2026 17:01:12 +0000
Manifest next update: Sun 04 Oct 2026 17:01:12 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: p995O45A8TIi6OYb7StmNC3873lKXWdj+9WRpP32E6s=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:6e:85:33:94:cc:d9:3d:e1:ff:f0:c8:e1:f5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Oct 3 17:01:12 2026 GMT
Not After : Oct 4 17:01:12 2026 GMT
Subject: CN=040d1d5040e19348f4f0965ecc9cd91770f3521c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:bf:aa:04:01:b1:d1:32:54:2e:99:d7:94:
32:28:99:50:cd:79:70:03:a8:f0:14:f5:ce:c0:18:
58:4e:f9:8b:13:cc:03:cf:49:83:40:3a:78:31:9c:
20:8b:f5:ce:09:5b:5f:39:13:ef:3c:a3:0f:48:5e:
1d:97:f4:2a:52:bc:4d:a3:a1:98:3d:72:93:b5:b4:
ef:78:1a:b0:16:84:f8:50:f0:88:54:89:3f:44:17:
e9:c3:9b:1d:55:fb:4f:de:bc:aa:14:b6:96:7c:a6:
92:d5:c9:09:e1:77:4a:89:ac:71:85:7c:0e:e6:97:
21:0c:ca:a2:81:2d:86:03:f3:ac:46:68:74:7e:c1:
c5:75:9d:b8:0f:6b:e1:b2:2a:eb:97:10:56:50:52:
fb:8d:87:1b:92:07:f4:80:2f:29:b3:33:48:2c:43:
50:a3:dc:63:b8:8b:94:a5:0e:88:1f:dd:57:4c:45:
9e:51:92:6a:c3:84:86:b2:f1:dc:e8:85:55:86:70:
b7:c8:34:06:4c:20:41:48:4e:7c:7f:a6:1e:14:e2:
2f:57:cd:cf:c1:9a:12:37:92:da:47:e9:4a:22:51:
6d:64:13:c3:8c:3a:58:89:b1:cb:46:6d:d3:00:6b:
e1:1c:a7:43:66:ca:ce:3f:af:05:9a:d3:fd:64:bd:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:1D:50:40:E1:93:48:F4:F0:96:5E:CC:9C:D9:17:70:F3:52:1C
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:76:d2:a9:99:ea:fd:0f:2b:c5:18:8a:95:7f:bf:22:42:
5a:58:59:57:6b:6c:96:fb:20:97:87:f0:9d:29:1c:32:f1:1d:
8f:f5:dd:d9:8b:5a:f2:4a:41:c7:6d:6f:3f:73:a5:c3:ef:fc:
b0:2c:d3:86:1b:74:36:49:eb:d4:17:c9:0a:2a:a5:ea:33:17:
97:3a:f1:e1:92:f8:ac:4d:e7:ea:30:c1:af:b4:31:e1:d2:8c:
a6:9a:9d:88:6f:de:9d:1d:b8:ba:96:bc:37:34:8a:67:5f:b0:
15:ba:47:f0:ad:01:a9:1c:91:70:66:87:80:99:fe:19:62:85:
a9:1c:61:0b:2b:2f:de:e4:43:50:22:6f:b2:5b:79:43:87:16:
de:67:1e:cf:ac:33:b9:b2:3e:42:ae:99:88:84:8f:bb:72:5d:
64:ae:2a:ed:ef:3a:6c:4c:17:4b:78:37:05:91:27:ef:cd:5d:
42:c2:62:93:14:04:2f:18:80:3e:1d:df:4a:12:50:8d:2e:ad:
c2:9e:7c:b7:ce:3a:42:04:3e:05:98:22:08:71:e1:e6:7c:36:
3e:99:7d:c4:1d:b6:cd:34:81:a5:a4:25:8f:4f:1b:dd:62:40:
dd:02:47:cc:8b:39:28:ec:12:ff:98:31:70:ad:ea:f5:b1:0c:
00:22:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:28 2026 by rpki-client