Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: XQUK2ZdW/ddzujXjwm3Ernfu2v5N61bxlfh63jvpTWA=
Subject key identifier: A3:82:D0:0A:D4:7F:D5:42:1F:74:7E:89:8B:A1:40:EF:7E:AC:26:22
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 019D2C60D77C282C956CD8A92621CBD390FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 1248
Signing time: Thu 26 Mar 2026 23:00:37 +0000
Manifest this update: Thu 26 Mar 2026 23:00:37 +0000
Manifest next update: Fri 27 Mar 2026 23:00:37 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: RaSwXhCUmeGw4ga0ysLWyFtV76Y8UbMaTh3nmgXpUSs=)
2: 3h0tgfEL54uXZSKGRLQARmVw2KA.roa (hash: f8vTeTyqS6eJf2HQkmlz6eipXPOPlN+oK8oViJ/L4C4=)
3: 6DqggK820YyLRE6DOMeCn20OVq4.roa (hash: pO4LdGxPE7DhXdUOzjR/JAV9KPAcLjMaprACs346LHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:d7:7c:28:2c:95:6c:d8:a9:26:21:cb:d3:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Mar 26 23:00:37 2026 GMT
Not After : Mar 27 23:00:37 2026 GMT
Subject: CN=a382d00ad47fd5421f747e898ba140ef7eac2622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:1f:8e:2d:9e:98:56:13:d1:c3:30:be:97:
30:51:f8:59:97:51:3c:8f:c5:ec:11:86:eb:62:10:
6c:48:96:9f:98:69:56:a2:96:a4:a8:41:50:ac:eb:
28:2a:2e:17:5b:1d:7f:e4:93:0a:ea:8e:96:a0:84:
a4:01:08:e4:cf:c0:be:15:d5:f9:b6:f9:79:0e:aa:
04:24:03:27:eb:44:70:f4:60:7e:46:e7:b7:77:55:
73:bb:1b:04:91:1c:23:f9:34:1e:fa:fd:25:06:09:
b8:f8:d8:bb:da:1e:15:ba:7b:bd:dd:4c:11:65:55:
cc:c8:0a:6a:f6:76:65:b0:cf:4c:b3:15:b7:7a:c5:
4c:22:e5:39:93:0a:09:0c:8c:25:3e:35:2f:76:ba:
39:8f:1d:29:6a:2d:6d:95:e1:df:34:50:62:7d:ae:
ed:64:c3:16:41:0d:98:11:fb:8d:b9:fe:9a:ce:14:
59:7e:87:87:09:3e:f2:67:f6:46:24:53:48:3f:65:
90:ad:29:3d:08:97:6f:ec:57:b3:89:48:2d:9b:17:
1b:5f:4f:f9:6e:d0:6b:41:59:03:1e:51:80:6f:b3:
78:ec:0e:f0:dc:45:e9:36:05:56:5b:9b:94:b4:4a:
ac:3f:7b:86:28:e5:b8:f9:ac:dc:af:7d:15:fd:31:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:D0:0A:D4:7F:D5:42:1F:74:7E:89:8B:A1:40:EF:7E:AC:26:22
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:76:97:6e:fa:7d:87:58:45:7b:88:8d:93:fa:9d:2d:1b:
06:bc:36:cc:8d:f3:59:b5:29:91:b5:0c:68:01:f9:9d:1d:72:
de:6d:97:f7:81:ad:b5:bc:19:af:99:65:8e:31:b0:c5:10:f4:
75:78:2c:9d:44:62:1d:5c:f1:ca:51:29:68:76:ce:fc:4c:6d:
79:35:60:19:5d:68:00:91:7e:96:f8:79:4b:1f:9b:fe:e3:4f:
c5:99:04:40:be:36:02:87:7b:6d:3d:32:8e:05:72:20:21:5a:
2f:53:2a:6a:99:bc:77:b1:d9:fa:d6:cc:a4:fb:d0:84:3a:7d:
7c:c5:b6:71:4d:fc:fe:82:f1:4d:fe:dd:b9:0a:4d:6a:40:10:
6e:b4:cd:ab:df:91:8e:ad:70:47:96:1c:c0:9a:a1:34:89:6b:
42:8a:0c:6b:1b:4a:81:8f:9e:f2:39:42:ff:b3:07:5b:23:37:
48:ff:46:6f:c3:f7:b3:58:4f:33:50:09:12:9f:44:8b:95:38:
c6:d0:da:40:53:32:72:3a:e4:79:76:56:75:7a:a9:07:b6:9c:
f0:6a:68:4a:78:48:e2:e7:56:6e:c5:81:9a:e7:b8:84:7f:75:
12:47:e6:fc:25:63:11:30:2f:28:e1:53:94:61:d5:ca:d3:9a:
53:76:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:17:28 2026 by rpki-client