Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: FHQUd068C+LyNMM5pz0hIEHbPXwUs8iIC+R7WKm6DPw=
Subject key identifier: 29:52:96:D3:06:66:7E:03:77:33:08:4B:93:36:9E:00:F5:4A:96:F9
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 019D333F32FB95BBC128399FDD8E4CFACF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 1624
Signing time: Sat 28 Mar 2026 07:01:12 +0000
Manifest this update: Sat 28 Mar 2026 07:01:12 +0000
Manifest next update: Sun 29 Mar 2026 07:01:12 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: zcTWNc0q7K6Jzp/NI6Cw89bPr8kQy/QC+ZvxAUmDm/k=)
2: RSe6J6StOicXEQf8j22iaZH1Wqw.roa (hash: yq7M1favZHDaKZGtuLamDm7eKgNK2HtsjIbAmOI1HpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:32:fb:95:bb:c1:28:39:9f:dd:8e:4c:fa:cf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Mar 28 07:01:12 2026 GMT
Not After : Mar 29 07:01:12 2026 GMT
Subject: CN=295296d306667e037733084b93369e00f54a96f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:43:28:d7:4b:2d:20:91:7f:89:6d:23:a6:06:
e3:ac:a9:7a:1f:af:d8:4d:87:25:4a:22:03:10:ec:
10:ce:8b:dd:ad:90:c2:9c:c9:a7:56:ec:99:2c:fb:
7b:35:76:8a:1a:98:df:05:51:18:b5:30:53:ae:f8:
1f:fe:b8:d1:d0:59:8b:69:95:71:78:67:4d:8f:a1:
77:17:44:98:b5:94:f9:84:de:d0:fd:62:88:2a:5a:
59:29:3c:7f:8e:48:37:66:1e:b6:5f:2a:14:a1:98:
3b:2d:7d:be:0c:a9:02:86:f4:0a:80:dc:bf:49:39:
37:5a:e3:84:db:51:61:2c:04:9c:ae:92:e3:ae:f5:
0f:cf:30:71:63:42:5e:07:e4:45:a3:ea:8f:81:f0:
c9:52:97:7c:29:21:d8:bc:3e:7d:43:a6:a3:3c:eb:
60:e8:d4:d3:77:cc:a8:ff:11:91:0f:ab:88:e6:31:
47:dc:76:ac:6f:6d:11:28:6d:0c:88:96:6e:b2:f7:
e2:2b:6f:ae:99:a6:c7:01:61:d7:4f:f6:21:49:a0:
e2:6d:76:ab:fc:06:60:49:b9:58:1f:0c:2a:e2:0c:
b4:4a:f6:74:78:8f:99:63:86:8e:72:4e:dd:14:64:
56:b1:95:32:54:09:a2:50:ad:57:f7:5a:38:c7:b7:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:96:D3:06:66:7E:03:77:33:08:4B:93:36:9E:00:F5:4A:96:F9
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:b5:98:64:d1:9b:f6:df:02:1e:76:5b:13:4c:80:b2:36:
32:5a:0b:e1:ea:c2:42:55:d7:62:51:4b:66:4a:8f:a0:ac:00:
aa:70:4e:fe:40:c8:0e:e1:fc:52:4b:e8:3e:94:ac:39:06:4c:
0d:b8:d7:e5:8f:38:ac:39:79:42:26:bd:d0:d9:39:eb:6b:1f:
95:45:90:93:82:5a:6e:ab:db:f0:bf:63:e8:9b:6f:63:de:4a:
e8:4c:b6:ed:b8:00:ac:d4:5d:50:ea:3a:43:3c:ee:fd:57:93:
00:c2:10:25:b5:a0:6a:a7:15:24:5e:f1:08:7f:05:8e:c1:a3:
d4:3c:06:49:29:a4:5c:7a:a8:ca:54:40:4b:07:5c:0d:58:cd:
7c:04:d0:5d:ad:c0:db:1f:94:9f:8f:a1:87:b1:13:73:1d:95:
a2:1c:74:be:c5:4e:e3:02:f5:0f:58:81:eb:ab:86:4a:4a:64:
68:11:d4:59:9c:77:fa:bb:41:47:cc:d2:c1:a8:70:96:d8:5c:
57:c1:c8:45:8d:40:04:c1:b1:51:a2:7f:73:ce:dd:af:eb:5a:
6b:b5:fc:da:1c:6d:69:9b:71:1a:2a:da:32:1b:5a:f9:9c:fd:
d8:6b:49:16:a4:15:1f:49:a6:f8:95:6e:ed:08:22:2c:df:2a:
bb:28:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:49:22 2026 by rpki-client