Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: B+Kx92xh2pWDxggwsNH129KZZoGZyX3EqSEfSPsnvyQ=
Subject key identifier: FB:00:37:EF:B4:6F:9C:E6:76:72:18:12:59:3A:D5:7D:C7:62:A7:E0
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019D330847B00C526D63EB76E380E30CA6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 07F8
Signing time: Sat 28 Mar 2026 06:01:13 +0000
Manifest this update: Sat 28 Mar 2026 06:01:13 +0000
Manifest next update: Sun 29 Mar 2026 06:01:13 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: rQ944Vewqc0WvlOz0XuPugqHn34p3VaN8IvyOoxq67c=)
2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:47:b0:0c:52:6d:63:eb:76:e3:80:e3:0c:a6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Mar 28 06:01:13 2026 GMT
Not After : Mar 29 06:01:13 2026 GMT
Subject: CN=fb0037efb46f9ce676721812593ad57dc762a7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:6e:62:92:f5:2a:6d:9e:30:b7:4d:45:74:
12:18:9d:7c:80:53:6c:1e:85:e0:77:88:96:aa:1e:
07:73:dc:33:29:0c:bc:aa:fb:fd:a1:1b:bb:e2:23:
23:ec:8d:0c:79:8f:a3:d1:7c:ca:dd:35:35:ec:22:
9f:64:0c:65:77:29:fd:e9:db:69:68:0c:a6:a2:13:
6a:4e:4e:55:5b:6f:90:5b:cb:98:ca:5a:65:ae:50:
f5:c2:78:da:1d:80:ba:34:c5:fa:e2:8c:a2:2b:f4:
f9:b3:f1:bc:8c:9f:db:1f:da:68:36:b5:fa:fe:ef:
8b:57:d8:4e:c4:a8:11:23:3f:56:75:b6:2e:d2:fb:
f6:c5:ec:90:54:64:51:a4:ec:93:98:76:7a:ba:8d:
c6:8e:91:68:03:c8:83:2e:e2:75:68:63:2e:35:14:
9e:df:21:3c:7a:1e:de:fd:6c:1d:68:d3:6f:fd:fb:
d2:26:ff:3b:9b:a1:71:c4:b7:94:ad:3a:b3:a1:e2:
6e:c7:04:74:94:60:a3:4f:e1:c7:dd:24:bc:0d:3c:
c3:43:2f:2b:82:66:be:11:ac:c3:6e:35:3d:12:17:
de:d9:b5:d7:4a:f2:34:62:52:c5:73:73:07:5e:a3:
10:10:e7:b4:0e:41:81:a1:66:8e:a9:af:aa:ae:42:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:37:EF:B4:6F:9C:E6:76:72:18:12:59:3A:D5:7D:C7:62:A7:E0
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5b:67:66:cb:47:49:64:76:39:c5:a5:07:b9:84:3c:48:87:
61:6b:fc:3e:b1:bd:d7:57:a9:72:e9:dd:62:e9:3f:86:85:6a:
ff:92:c3:e1:c0:4b:df:aa:e5:1b:24:87:d1:1f:a0:7e:21:c7:
46:2f:32:98:38:54:73:e1:d9:07:1e:22:ba:70:82:97:d0:81:
e9:d3:f4:f9:10:82:e4:e0:c3:20:3f:41:d6:33:99:6d:10:ba:
87:04:f6:09:c3:dd:6b:fd:c3:ac:6d:b7:2e:90:54:3b:3a:cb:
aa:f0:53:1e:3c:28:3f:5c:0c:5d:2e:63:2d:19:5f:b9:ff:68:
9a:1b:3b:1c:1a:83:ae:9e:83:0c:15:41:38:8b:0b:ea:c7:01:
48:65:4a:55:b4:18:84:ab:50:48:c2:82:78:cd:9e:69:6b:c0:
35:30:c0:03:3d:f7:ec:f8:68:f5:ce:4d:bf:7c:bd:be:f6:bb:
9f:e3:6e:72:c7:06:50:f2:b9:25:2f:88:b5:68:45:61:78:f4:
3c:c5:da:cb:aa:6a:09:ff:e8:75:ac:4d:48:b7:3b:5d:4d:72:
6a:68:07:6f:9b:d5:71:62:88:4d:f1:de:37:0a:f3:7f:bf:7c:
3e:5b:d3:30:8c:f0:06:12:ef:5b:80:48:99:6b:58:6d:7b:84:
64:01:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:02 2026 by rpki-client