Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier: 7ydlhEwo9H2u4tLd1meXuLXpOY/3wp/vzHtU5Mz1jSk=
Subject key identifier: 96:87:E9:18:6F:0C:E0:04:1B:6C:8C:7B:07:C9:76:C8:E7:48:F3:19
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 019F8FB552489E813AF47AECABEC67164CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number: 0ABC
Signing time: Thu 23 Jul 2026 16:00:52 +0000
Manifest this update: Thu 23 Jul 2026 16:00:52 +0000
Manifest next update: Fri 24 Jul 2026 16:00:52 +0000
Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: YjEHdkQ4/LRMGB3bviLt4T3Oc5LmXTdHvB6SwpWa88s=)
2: TDwfp4rIi08J2i1D2xc2gTMPN8c.roa (hash: IrD9bh86XLcjQSDpy3yh8FKWxLQrtSlGJWXYqL6njZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:52:48:9e:81:3a:f4:7a:ec:ab:ec:67:16:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Jul 23 16:00:52 2026 GMT
Not After : Jul 24 16:00:52 2026 GMT
Subject: CN=9687e9186f0ce0041b6c8c7b07c976c8e748f319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:15:10:76:f1:15:05:31:63:3b:14:2b:fe:
7a:ca:81:32:75:eb:5c:a3:8e:15:4b:b9:19:a9:0d:
65:9e:f7:bc:b2:be:09:39:29:77:50:21:11:6a:03:
a0:3c:c1:8d:3d:91:92:02:79:55:63:66:0a:91:0c:
2b:58:6a:d0:58:72:38:86:37:45:f1:ec:92:5b:c4:
37:05:59:a3:64:e2:24:58:a0:98:96:d9:3c:98:ef:
20:71:cd:03:54:ec:96:cf:b7:26:bf:8f:a3:3e:40:
6e:b3:c9:47:40:f4:14:9c:bc:a3:66:3f:fe:85:df:
1e:da:c5:9e:0c:d8:65:50:c6:24:7e:34:39:e0:b7:
60:78:94:f6:c0:b2:c9:d7:31:bc:48:a3:19:a6:d8:
38:4c:1c:b5:c6:26:b2:d7:3e:44:a3:c1:9e:de:fc:
d5:be:6a:b0:08:97:76:7c:54:27:59:b1:c8:f6:30:
1b:d5:f5:79:1a:26:c5:c3:1e:01:a4:73:91:f2:8d:
72:0f:eb:9b:24:a3:6b:c8:05:81:d6:51:34:49:93:
43:77:e3:b4:06:68:5d:e9:50:85:d5:3e:b3:bb:2d:
af:5f:82:2f:da:1d:84:92:98:cc:d8:35:57:39:bc:
2f:cd:2c:1d:de:f6:79:4c:c6:7c:8b:6b:6c:2d:1e:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:E9:18:6F:0C:E0:04:1B:6C:8C:7B:07:C9:76:C8:E7:48:F3:19
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:55:a5:72:1a:0c:8c:80:8a:02:0c:52:d5:eb:28:51:64:
8f:40:a3:0b:a7:55:72:6f:3a:92:59:e7:cc:84:06:28:f1:70:
c0:7f:8e:5a:55:09:5f:05:b3:23:d0:84:9a:4b:3c:33:ac:d2:
51:e3:fb:77:b3:4d:8b:4c:14:9d:75:c5:18:39:53:d9:cb:c6:
5e:55:11:97:67:8a:b6:31:cf:83:22:57:6b:b2:41:fe:46:c0:
1f:1f:ef:c9:80:a4:f1:52:28:a4:8d:ef:ff:c6:68:d8:42:7c:
e0:27:75:c6:8a:b3:bc:36:c5:47:76:38:9d:7e:d3:85:9b:bb:
ed:61:16:6d:36:7f:92:fe:ba:60:30:e9:1e:c0:7c:9c:87:a4:
54:c4:df:9b:99:f6:7e:8f:7b:4f:d7:48:e9:05:ae:4d:f2:af:
fd:ab:0e:71:31:d8:46:f4:d1:f2:d5:0f:53:9e:a7:3f:b3:4a:
e5:c6:e2:2f:4e:e4:83:92:69:8a:d6:11:f6:4a:02:91:28:b1:
55:6e:f3:80:18:aa:52:a3:86:da:bb:40:d6:6b:c6:fa:a5:d4:
ac:cd:7a:ba:e9:de:e7:2e:97:7f:57:7c:65:d9:92:d5:fa:de:
5b:cb:69:8f:42:74:ac:7a:90:27:0c:d6:b1:01:3a:33:75:65:
f4:96:d6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:32 2026 by rpki-client