Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: xcz5S/rJ6NSjRUrn350sAT9ogGX2sB8dKirGN/FOmBo=
Subject key identifier: 0C:FF:DF:0B:FB:6C:2D:2E:D4:01:A7:19:FD:7E:D0:59:5D:49:B9:AB
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 019F91DB1CAA38533986F65C64B8417C10C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0D21
Signing time: Fri 24 Jul 2026 02:01:23 +0000
Manifest this update: Fri 24 Jul 2026 02:01:23 +0000
Manifest next update: Sat 25 Jul 2026 02:01:23 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: /oSmXEXKdEpGn7cVbYzg1CnQZwluwR+XB4bLuND6TEE=)
2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:1c:aa:38:53:39:86:f6:5c:64:b8:41:7c:10:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Jul 24 02:01:23 2026 GMT
Not After : Jul 25 02:01:23 2026 GMT
Subject: CN=0cffdf0bfb6c2d2ed401a719fd7ed0595d49b9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:b8:db:54:37:cc:da:98:fd:76:dc:af:1d:
ed:99:ce:14:ee:7c:df:79:38:74:6f:6c:7b:0b:05:
92:41:8e:b7:79:50:13:ed:12:70:3b:a4:20:a8:23:
cd:6c:22:44:6e:25:63:5a:77:fc:de:5a:2f:a0:3e:
64:70:3f:ad:f3:40:93:4c:5a:09:b0:67:8e:dd:7c:
07:7d:41:ac:7b:fd:5e:3e:f4:09:42:fd:c6:aa:e6:
75:48:65:b9:ac:82:64:78:9c:37:33:73:11:fd:2d:
ac:27:bb:d0:1e:e6:58:0b:bf:b7:39:50:b5:5a:6e:
b5:a8:2b:f8:a6:46:f2:c8:66:7f:be:40:74:c8:6f:
fe:aa:4e:db:42:e3:e7:9b:2a:8c:e6:55:b2:68:2d:
ae:08:d1:ee:b2:9d:3d:d2:ed:4f:70:61:53:98:16:
f0:92:60:35:36:80:7a:dc:22:51:38:8a:24:34:ff:
63:b4:40:76:f7:f2:59:9d:b9:0a:6d:c7:a4:f4:7d:
f5:fc:89:1a:38:3f:ad:19:a5:2e:c2:b3:b8:26:34:
5d:df:c0:14:9d:6e:3f:ee:b3:be:42:a3:f6:69:58:
59:bb:b7:8b:41:03:26:6c:e3:23:bc:a6:45:cc:cb:
2c:83:35:c4:53:26:43:c9:cb:6f:c9:9a:e9:39:cc:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FF:DF:0B:FB:6C:2D:2E:D4:01:A7:19:FD:7E:D0:59:5D:49:B9:AB
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:8c:1a:62:9d:97:7b:84:66:8f:f5:d0:22:d4:96:17:83:
c7:bb:fd:71:e2:bc:e1:59:74:a7:77:37:31:f6:1e:06:8a:e7:
96:d4:0b:08:aa:53:d7:9e:6f:91:ce:63:5e:d7:47:43:3f:5f:
fb:34:e8:8b:34:5e:60:38:31:b8:e4:d6:87:51:f4:39:a1:bd:
81:43:b5:4f:90:51:30:62:6d:e4:7e:34:7e:a6:d3:39:4e:50:
26:0d:6a:dd:1f:30:5c:e9:fe:78:09:8a:d6:2c:d3:fb:6d:f1:
bc:7a:27:4a:6c:c9:bd:d9:db:f9:92:7d:cb:64:4c:08:9a:90:
d6:0f:c5:6d:6a:37:b8:13:70:a3:9e:a1:75:19:22:33:95:e0:
bb:1d:7f:eb:ae:ee:56:7b:bd:77:80:ef:c8:1a:83:43:74:65:
6a:17:2c:90:2b:78:e4:31:a5:b0:68:6a:3c:b4:60:aa:96:81:
d2:ae:24:81:41:0b:ac:c2:8d:b1:e7:51:79:83:60:ff:c5:2f:
42:2d:9c:af:f7:bd:39:0c:e2:81:eb:ab:e9:f4:1b:5c:03:c1:
b9:f6:aa:87:10:3a:74:86:7c:a8:d0:16:65:2a:14:f7:61:eb:
48:a6:0d:79:4d:e9:df:28:92:06:c6:b3:cf:d3:cd:d1:90:7b:
38:73:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:36 2026 by rpki-client