Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
File: 1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft (raw, json)
Hash identifier: GMwAV0r2Alj5mLh5AOUOlGXR4+XD4OJkErhMzqu76FY=
Subject key identifier: FC:A5:37:3C:A0:D4:EB:21:FD:6E:86:20:73:42:AF:29:33:34:50:67
Authority key identifier: D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
Certificate issuer: /CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Certificate serial: 01A040171912672F12973BCFA6CCA514A399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
Manifest number: 64
Signing time: Wed 26 Aug 2026 22:00:50 +0000
Manifest this update: Wed 26 Aug 2026 22:00:50 +0000
Manifest next update: Thu 27 Aug 2026 22:00:50 +0000
Files and hashes: 1: 1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl (hash: pjizFGevz1+uya7XyX4QqQ1AWClIm8yPTofSHuJgQCk=)
2: Z-ZOiTUQ7YjrOleV4YlZJzDgCCY.roa (hash: ZM7zbsbbuuEKFxs+0/hoH2Zyr2M+8XmPDASRtn30LXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:19:12:67:2f:12:97:3b:cf:a6:cc:a5:14:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59980995bb11fb1ffabe0c9faa2f766752414d7
Validity
Not Before: Aug 26 22:00:50 2026 GMT
Not After : Aug 27 22:00:50 2026 GMT
Subject: CN=fca5373ca0d4eb21fd6e86207342af2933345067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:94:c8:86:26:c0:0f:7f:c3:6e:20:21:7f:
71:33:0b:52:02:ff:9c:cb:ed:98:8d:d0:13:c2:f2:
5e:4f:97:6a:02:9c:28:60:92:44:00:a0:47:36:4b:
cc:24:33:28:1f:16:dd:cf:d0:d0:4a:ff:5e:44:b5:
bb:d6:71:ab:51:7b:eb:88:d7:35:a0:27:6c:4b:26:
a5:ed:39:99:6e:b4:bd:21:45:0e:13:3d:6c:64:bb:
06:f9:5d:76:47:99:5b:39:cc:75:a7:f9:8a:52:79:
46:1c:79:e9:fe:01:82:5f:5c:31:e3:f9:20:aa:4f:
41:b7:bc:89:de:aa:9f:16:af:ca:f0:a9:32:8c:e8:
61:16:cd:8d:18:5a:61:fa:ab:19:db:b8:3f:2b:2a:
12:63:9a:f2:c8:92:c4:6e:3d:2c:8d:d3:bb:e1:7c:
79:b3:87:23:cb:68:cc:08:de:e3:4e:62:65:b6:d8:
f2:fd:a4:9c:31:d1:a9:0b:34:74:85:7c:74:09:89:
ec:ab:ac:cb:89:92:90:b7:7d:39:c8:7b:9e:3e:ef:
29:90:5d:bd:d2:ee:e9:04:4c:7f:b0:2a:8d:55:6f:
f5:87:bd:92:16:88:3a:c4:7d:4d:8c:93:38:65:10:
d5:d3:ae:3c:cb:5b:3f:94:fa:eb:8b:0e:ad:d2:f5:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:37:3C:A0:D4:EB:21:FD:6E:86:20:73:42:AF:29:33:34:50:67
X509v3 Authority Key Identifier:
keyid:D5:99:80:99:5B:B1:1F:B1:FF:AB:E0:C9:FA:A2:F7:66:75:24:14:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/053c6d-6c47-4e31-b36f-406b11c53b85/1/1ZmAmVuxH7H_q-DJ-qL3ZnUkFNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:32:fe:33:b1:1d:af:c5:69:52:88:d2:0c:98:36:c5:99:
f8:3f:cb:c9:01:a1:f4:cb:ac:cd:8e:e8:ce:e2:4b:84:c6:b2:
46:ea:45:95:6b:47:23:78:1f:d3:47:47:ee:54:9d:4a:63:94:
05:c8:6a:4e:ad:dd:fd:03:30:5a:e7:a7:94:3f:5a:85:59:67:
6f:bd:58:af:db:52:2a:6b:b6:61:65:b5:c1:b3:bc:03:15:02:
3f:4b:4b:c2:da:27:b1:9c:2d:5f:2d:82:d3:bd:58:05:ec:50:
49:fd:95:9b:40:be:12:d3:b6:c3:07:3f:53:14:5b:ee:d4:cf:
0b:9b:7c:ec:d2:66:09:b6:e1:f9:f7:b5:fd:cc:78:4d:30:ec:
5c:74:d4:bd:82:40:f4:61:e6:b4:a6:c0:f0:e9:e3:08:b1:ad:
d8:08:7e:78:4b:f5:4e:c0:d9:ff:ac:18:33:cb:40:d6:21:b7:
5b:62:b4:a7:fe:0f:f9:d3:ef:29:04:6c:5c:2a:da:99:9b:bb:
98:eb:1e:c9:cc:25:e0:bc:5b:ee:1e:bd:d8:27:93:70:b8:75:
77:6b:21:39:2a:cb:c2:af:b8:20:28:2f:01:e4:11:34:8d:fd:
dc:08:a4:9d:da:1e:45:86:ed:db:28:de:68:71:44:0c:aa:3f:
cd:02:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:34 2026 by rpki-client