Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: s8IuwZ0q+en7EXNS4snrw8uOvp85Bu89m6No1ws/jns=
Subject key identifier: 4A:4E:D4:B3:AC:D7:C3:70:D8:42:34:27:16:93:EB:8C:18:54:0E:B2
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019D333EFE4DBFAA9B6E69B2A4C107557D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 07:00:59 +0000
Manifest this update: Sat 28 Mar 2026 07:00:59 +0000
Manifest next update: Sun 29 Mar 2026 07:00:59 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: jr9C2pD6wpt90q13YxdQvaU895DWj2agJJhwFi5m/Xs=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:fe:4d:bf:aa:9b:6e:69:b2:a4:c1:07:55:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Mar 28 07:00:59 2026 GMT
Not After : Mar 29 07:00:59 2026 GMT
Subject: CN=4a4ed4b3acd7c370d84234271693eb8c18540eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:f5:94:79:7b:52:98:85:ea:a6:52:fb:12:
c6:b6:35:18:04:d3:29:32:57:b3:63:b6:53:04:0c:
a4:21:2b:d5:80:7a:a5:1b:e9:4f:c0:7a:96:66:cc:
6e:12:06:00:be:b2:cb:a8:27:a9:40:71:aa:1e:a8:
a6:57:da:78:97:ab:83:31:29:99:50:95:e5:6f:de:
0f:2e:97:0c:49:7b:13:4e:9d:58:61:75:87:aa:b5:
cd:32:c7:5f:76:b0:0a:ac:20:87:46:1a:41:e4:0f:
b9:71:5c:16:a3:9e:0a:20:18:fd:16:76:e1:ca:2c:
ee:38:fb:5e:1a:7d:dd:2a:39:23:bf:e7:cd:85:85:
b4:d1:ae:f8:dc:6f:28:75:18:42:52:cb:fd:a5:1c:
c6:f7:00:ee:fe:41:6f:15:86:72:08:ee:30:34:f0:
90:f7:33:49:2b:e5:0b:f1:ee:5d:c0:ce:fb:9d:7b:
ed:a3:6e:97:8b:8a:00:42:bc:7f:43:9b:70:6f:40:
25:77:1e:ea:75:d9:a7:3d:4c:14:69:9b:fd:1e:2c:
ab:d8:3c:2f:0f:6a:95:88:96:45:ef:7f:17:c3:13:
eb:ef:2f:f2:f7:5a:a1:84:5c:69:57:ce:93:fa:ff:
19:29:47:f1:86:02:db:5e:4b:77:5b:30:cc:ff:2f:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:D4:B3:AC:D7:C3:70:D8:42:34:27:16:93:EB:8C:18:54:0E:B2
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a8:22:86:52:27:fb:9d:77:ad:fb:6e:7f:9c:da:c4:a7:42:
b5:d0:1f:c2:8f:1b:f0:cb:f3:0b:62:e7:e7:09:00:a0:6b:d1:
24:8a:f6:fb:40:7e:5d:fb:92:28:83:9a:4e:2b:bd:96:86:eb:
3e:51:a5:f3:d5:6f:20:28:e6:46:c7:c4:d4:51:12:13:2a:c9:
22:6f:87:39:bb:ae:d0:93:68:81:70:4e:ac:36:5e:91:14:a7:
7e:dd:50:40:cc:3b:44:d4:f1:0b:d1:61:37:1f:8c:86:39:1f:
c6:c6:d9:a1:6d:22:e1:44:70:b3:26:87:c2:d6:3d:d3:62:d7:
80:ea:e4:b0:4d:ec:27:04:2c:d4:00:a4:81:71:ea:01:9f:b8:
89:95:65:1d:40:2e:51:de:15:67:4c:76:3b:c4:3f:5f:b8:c4:
4a:5b:81:04:da:34:58:f5:34:0b:b6:4b:48:df:97:91:d8:87:
10:c4:cf:59:d7:0f:43:bd:4b:76:c9:fe:04:e5:31:db:ef:b0:
a1:e3:b1:54:cf:26:37:aa:2c:21:33:12:d7:6e:9b:5c:9f:5c:
69:d8:2e:ea:ce:08:69:e1:e9:6b:c5:31:9e:f6:3d:23:40:aa:
51:b1:ae:6e:08:70:fb:7a:8b:fe:bf:01:88:86:d2:8c:86:88:
05:6b:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:13 2026 by rpki-client