Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: kSyGjUaCuh5ONAh69Ez6w7t135uYVt3/wm+ofRpbb6Y=
Subject key identifier: 49:5D:65:AC:69:53:03:8E:23:4D:42:BD:10:20:74:B6:DE:E8:9D:BC
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 01A13B5C058A72F0B4AB3277A786B933D31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 1462
Signing time: Wed 14 Oct 2026 17:00:48 +0000
Manifest this update: Wed 14 Oct 2026 17:00:48 +0000
Manifest next update: Thu 15 Oct 2026 17:00:48 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: m098/rIQ5yEe/0yVa5SWIz5vEWzG9Pml4AJEsKU6zk0=)
2: 3h0tgfEL54uXZSKGRLQARmVw2KA.roa (hash: f8vTeTyqS6eJf2HQkmlz6eipXPOPlN+oK8oViJ/L4C4=)
3: 6DqggK820YyLRE6DOMeCn20OVq4.roa (hash: pO4LdGxPE7DhXdUOzjR/JAV9KPAcLjMaprACs346LHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5c:05:8a:72:f0:b4:ab:32:77:a7:86:b9:33:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Oct 14 17:00:48 2026 GMT
Not After : Oct 15 17:00:48 2026 GMT
Subject: CN=495d65ac6953038e234d42bd102074b6dee89dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:15:23:11:47:0d:d0:10:ba:61:9d:22:6c:
e8:44:cf:0c:26:92:89:db:cd:74:85:05:08:22:d2:
89:04:99:7e:9c:0f:90:d2:92:29:e8:16:23:f7:f5:
db:1b:28:5f:d2:60:01:66:58:7a:b2:ce:33:96:28:
ab:9f:d9:03:4f:39:98:df:cb:33:7c:94:a7:a6:19:
be:8b:d0:55:28:99:e2:ff:60:ba:8a:a8:3d:73:13:
a0:f9:f2:38:c8:4a:ee:61:4c:56:29:28:66:72:e0:
1c:56:c1:6b:4f:89:c9:0c:aa:cc:30:07:2f:ff:c2:
7d:d3:c6:72:82:67:75:0f:5c:48:c4:31:9e:5d:00:
ea:19:97:04:fc:e3:08:4f:19:ff:cb:33:e9:4b:9e:
1c:17:89:b3:ef:4e:48:4b:4b:30:79:85:2f:f7:34:
48:88:71:0f:50:80:fa:df:6d:e2:dc:6e:f7:88:2a:
d2:a4:77:5e:8f:44:53:ab:f6:09:c9:8e:20:33:88:
ef:2f:d6:30:2c:b1:42:2e:d5:56:39:6b:5d:84:c7:
62:68:09:38:b6:1f:5e:63:c1:75:73:c0:df:0d:e2:
8d:83:9e:5f:5e:07:a0:09:d6:a9:c2:50:6b:24:1b:
83:23:21:06:bd:92:d4:62:32:f9:f4:3d:e2:90:d6:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:65:AC:69:53:03:8E:23:4D:42:BD:10:20:74:B6:DE:E8:9D:BC
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:5c:55:e1:ac:56:a2:67:4c:51:2d:e9:d4:fa:79:62:17:
33:e2:8f:11:4f:8c:44:09:f7:8f:6c:ff:72:06:14:17:fc:0b:
18:d0:7b:08:bd:6f:a1:7a:56:94:f2:38:e2:82:97:9d:e0:bd:
8f:a4:7c:9b:82:13:f3:86:d4:cd:16:c0:a6:fe:5f:14:f0:08:
8a:da:68:93:84:89:d6:e6:69:77:74:4d:3c:3b:4d:f8:09:f1:
c7:72:58:6c:14:ec:76:09:70:a3:a8:6f:fb:c3:7d:b4:3d:33:
28:0c:0d:05:34:45:e8:15:86:91:a8:61:98:cb:6f:cc:80:2f:
05:ce:2e:64:4b:f1:b6:d1:4a:50:89:47:a0:b6:85:ff:ff:cf:
1d:c2:ce:0d:a4:a8:d3:29:cc:bc:54:b5:c8:23:d0:81:49:bf:
fa:44:bb:b8:8b:78:e9:4b:b5:8b:53:4b:73:dc:5b:de:6c:74:
e4:22:74:27:ef:e6:72:ac:22:41:d0:98:3a:94:60:cf:09:7e:
42:ee:5f:5d:f9:82:1a:9a:e1:2c:79:9c:99:f1:0f:80:b8:30:
7a:b2:03:74:90:15:8d:1a:3e:a6:51:f1:25:7e:e0:e1:74:44:
41:11:13:ab:41:2b:a6:4b:f1:4c:65:00:44:4c:bd:11:6b:94:
b8:fc:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:20:45 2026 by rpki-client