Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: +UbWRNNbA/WVvsrwHAvYOg/2Ru90G75eAVZ13pUtKrs=
Subject key identifier: 70:26:69:CF:DC:F9:44:E7:C3:0C:EE:FE:F6:1C:0F:D8:D8:84:28:C9
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 019F909121172C1A2339C1E574A80FCCEA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 1385
Signing time: Thu 23 Jul 2026 20:00:58 +0000
Manifest this update: Thu 23 Jul 2026 20:00:58 +0000
Manifest next update: Fri 24 Jul 2026 20:00:58 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: /J21iHw02reY0pdFtM9jxZ5KCXawVfwlwJfVF9lt3gs=)
2: 3h0tgfEL54uXZSKGRLQARmVw2KA.roa (hash: f8vTeTyqS6eJf2HQkmlz6eipXPOPlN+oK8oViJ/L4C4=)
3: 6DqggK820YyLRE6DOMeCn20OVq4.roa (hash: pO4LdGxPE7DhXdUOzjR/JAV9KPAcLjMaprACs346LHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:21:17:2c:1a:23:39:c1:e5:74:a8:0f:cc:ea:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Jul 23 20:00:58 2026 GMT
Not After : Jul 24 20:00:58 2026 GMT
Subject: CN=702669cfdcf944e7c30ceefef61c0fd8d88428c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:31:f0:89:f5:86:8c:4e:a9:4b:0f:d5:88:
47:82:ea:61:10:c2:ed:d0:23:75:1c:75:19:d7:02:
06:34:4a:80:cf:23:5e:d9:58:7a:ec:55:c5:8a:a8:
39:f1:3e:4f:58:6d:5d:44:a6:33:c1:81:24:05:74:
70:1e:49:40:f8:78:23:75:d4:77:4e:61:12:2b:85:
f7:81:94:76:d2:ac:5a:43:6a:11:41:20:5a:64:f6:
13:3d:2f:57:a8:97:1e:14:be:6d:3a:d8:65:1d:c2:
e0:c1:b2:50:25:91:7c:c6:3d:f5:81:ad:3d:7f:45:
cb:11:e6:7d:40:59:c9:4e:2a:02:ad:3f:56:c5:a2:
6a:be:00:8b:02:e2:73:4a:21:fd:60:3c:e1:9c:94:
a1:41:da:23:f9:2e:f1:c6:72:21:b9:ca:7a:cf:d7:
4f:11:9b:cb:15:86:ce:34:48:97:82:9f:40:85:24:
70:45:39:8b:47:fa:77:c9:e6:8f:7e:83:f8:2f:3f:
30:d6:19:57:27:5c:06:58:47:79:a3:df:13:1e:f3:
27:72:56:de:d8:1f:11:fd:51:78:cd:63:e7:21:c2:
25:a5:f4:2c:89:75:fd:f3:a0:cd:3e:37:62:e3:0f:
1c:71:a8:66:4a:87:3e:c5:c0:bb:f2:64:ea:93:88:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:69:CF:DC:F9:44:E7:C3:0C:EE:FE:F6:1C:0F:D8:D8:84:28:C9
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e7:95:5f:99:13:18:86:0b:36:07:cc:8a:94:4d:91:25:c8:
e2:66:62:f5:a3:d7:89:07:3a:42:44:84:5a:05:5b:c8:de:6e:
4d:e5:0b:dc:9c:78:12:e6:34:a0:3d:a5:99:58:b4:70:78:5e:
67:59:65:0e:67:a0:f4:9c:9c:00:9a:5e:d5:2b:10:9b:be:69:
57:e3:93:fc:dc:d8:1f:1a:d6:d3:b7:22:4e:eb:82:e7:03:52:
82:46:da:29:f9:6b:de:b6:28:70:28:77:52:08:b9:3d:99:89:
87:06:4b:4a:38:59:ae:38:d5:54:58:99:0f:8f:56:af:b0:e0:
4d:4c:cc:53:4b:76:aa:f2:6a:c6:e9:42:cc:34:e7:ec:d4:97:
3d:1f:29:8e:9b:68:fa:4b:51:14:cc:9b:52:7d:a3:3f:87:a8:
f5:45:48:6a:e1:1d:11:71:c1:b9:f3:e1:71:93:85:ce:63:65:
11:49:44:96:63:06:9d:5f:3a:02:c6:b3:5d:12:2a:c3:98:f8:
63:9b:69:1d:c9:40:cd:71:c1:64:14:c2:98:3d:67:33:58:12:
f2:0b:e2:2d:66:5f:fa:90:31:86:7b:ef:37:2d:a9:4c:ca:9d:
9d:fb:87:39:4e:33:e0:26:26:50:74:3b:ec:fb:d8:7c:10:30:
26:78:84:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+QkSEXLBojOcHldKgPzOpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1
NTdiYjkwHhcNMjYwNzIzMjAwMDU4WhcNMjYwNzI0MjAwMDU4WjAzMTEwLwYDVQQD
Eyg3MDI2NjljZmRjZjk0NGU3YzMwY2VlZmVmNjFjMGZkOGQ4ODQyOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvIx8In1hoxOqUsP1YhHguphEMLt
0CN1HHUZ1wIGNEqAzyNe2Vh67FXFiqg58T5PWG1dRKYzwYEkBXRwHklA+HgjddR3
TmESK4X3gZR20qxaQ2oRQSBaZPYTPS9XqJceFL5tOthlHcLgwbJQJZF8xj31ga09
f0XLEeZ9QFnJTioCrT9WxaJqvgCLAuJzSiH9YDzhnJShQdoj+S7xxnIhucp6z9dP
EZvLFYbONEiXgp9AhSRwRTmLR/p3yeaPfoP4Lz8w1hlXJ1wGWEd5o98THvMnclbe
2B8R/VF4zWPnIcIlpfQsiXX986DNPjdi4w8ccahmSoc+xcC78mTqk4i3oQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHAmac/c+UTnwwzu/vYcD9jYhCjJMB8GA1UdIwQY
MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2
LTY4NmEwMTg4OGQyOS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk2LzY4ZmJhZi00NWYxLTQ5NDYtYTM0Ni02ODZhMDE4ODhk
MjkvMS8xLXp1enRLdHZfMWlOMjB6eXItYlZyRVpWZTdrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+eV
X5kTGIYLNgfMipRNkSXI4mZi9aPXiQc6QkSEWgVbyN5uTeUL3Jx4EuY0oD2lmVi0
cHheZ1llDmeg9JycAJpe1SsQm75pV+OT/NzYHxrW07ciTuuC5wNSgkbaKflr3rYo
cCh3Ugi5PZmJhwZLSjhZrjjVVFiZD49Wr7DgTUzMU0t2qvJqxulCzDTn7NSXPR8p
jpto+ktRFMybUn2jP4eo9UVIauEdEXHBufPhcZOFzmNlEUlElmMGnV86AsazXRIq
w5j4Y5tpHclAzXHBZBTCmD1nM1gS8gviLWZf+pAxhnvvNy2pTMqdnfuHOU4z4CYm
UHQ77PvYfBAwJniElg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:08:42 2026 by rpki-client