Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier: 9kNxrpIJyjKNYoeh5a4OBfeNY7pSDysicP6vbhBDIIE=
Subject key identifier: F8:B5:6B:BD:C8:8A:F5:4D:77:4D:BB:D4:D2:14:01:08:AE:59:E3:D2
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 019D27E0680A8EA9CB69480A74CD9ED935A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number: 10A7
Signing time: Thu 26 Mar 2026 02:01:51 +0000
Manifest this update: Thu 26 Mar 2026 02:01:51 +0000
Manifest next update: Fri 27 Mar 2026 02:01:51 +0000
Files and hashes: 1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: nkHekxuH4LWrHDTZgdr7lqlmlVJFAeO6KyU+tAjbOxw=)
2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:68:0a:8e:a9:cb:69:48:0a:74:cd:9e:d9:35:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Mar 26 02:01:51 2026 GMT
Not After : Mar 27 02:01:51 2026 GMT
Subject: CN=f8b56bbdc88af54d774dbbd4d2140108ae59e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:d4:dc:3a:0e:a2:62:32:f5:76:1a:e5:d8:
18:d0:3a:e8:9a:98:f8:c3:43:c2:ec:98:05:c0:90:
50:78:e9:46:c0:27:f5:b9:26:1f:63:6d:23:09:b0:
44:1e:be:d2:47:93:a1:60:ae:23:98:8c:f6:37:39:
12:e3:4d:fe:d0:07:61:be:b6:61:20:68:a0:fa:79:
c8:f8:bc:5f:89:48:d4:1e:32:05:60:61:f7:fd:38:
c9:a7:c8:70:a5:bc:29:c7:be:46:af:ae:cc:3b:66:
fa:8d:72:34:9e:ec:a6:e4:e5:6b:2b:da:96:c3:b2:
35:ee:66:c9:fc:29:68:65:b1:3e:68:37:88:ab:14:
f6:48:9d:87:f3:fa:60:1e:8f:1c:1a:dc:d3:a9:b5:
15:3e:e9:61:5c:12:b8:cb:19:82:30:24:8c:2f:0d:
e3:ab:8a:4d:ce:3d:83:18:7b:bc:77:f1:6d:09:c4:
5b:f6:fb:28:3d:47:f6:28:e5:62:c5:fd:44:27:c0:
cd:f5:9f:a2:a8:54:d5:4c:c0:ec:b7:69:4f:77:cd:
05:6d:a5:17:71:16:70:d2:81:56:4f:66:56:7b:c7:
46:32:e3:3c:90:2a:47:87:c7:43:be:3b:5f:46:5c:
14:be:d6:9a:cc:a6:43:34:f9:36:79:87:4f:4e:6b:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:6B:BD:C8:8A:F5:4D:77:4D:BB:D4:D2:14:01:08:AE:59:E3:D2
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:a5:bc:19:e0:4b:1a:a4:20:a4:31:41:7a:38:9b:1a:03:
1c:27:d5:ba:61:95:0d:42:57:a2:38:b8:fa:46:63:5c:af:9b:
3d:1a:d7:c4:ab:4a:d0:10:16:28:43:e9:16:0a:9f:16:34:83:
fe:78:1f:4a:51:89:02:fe:c9:5a:48:ef:8a:2a:01:54:17:c3:
56:0e:e2:46:73:33:84:40:9e:09:64:56:d8:03:08:8b:09:de:
77:b9:d4:35:5d:9c:a7:4f:a0:07:19:9c:fa:1a:32:e1:71:61:
bd:82:7a:83:59:7b:56:3f:86:01:73:d2:28:4c:04:36:b5:a1:
17:61:92:61:e4:11:3f:54:06:ab:79:6e:71:1e:d6:37:c7:69:
5a:7b:af:05:fa:43:f0:35:8f:53:4f:a3:de:60:0c:bc:4c:54:
3f:a4:cb:1c:7c:d6:c6:6a:db:59:24:a5:59:b9:e2:93:34:b1:
37:ac:34:73:08:bc:ae:a1:10:45:8b:23:03:6c:4a:8a:12:e0:
52:bb:17:39:ff:cd:d4:52:27:86:51:64:2d:24:a3:b4:09:fe:
67:ff:be:aa:cf:25:dd:32:3a:2d:a7:9b:24:da:fe:1f:b6:b5:
3a:0d:54:ec:d6:4d:04:ff:67:90:f1:03:a3:ab:58:63:c8:5a:
06:b2:fc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:33 2026 by rpki-client