Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: 8UPyoSmDUNq7rxyBfExu/x9OldjUGvk8dzwbYCWWN2U=
Subject key identifier: FF:64:BC:86:3A:96:03:5C:2F:9B:2A:DD:FD:9F:EB:F1:3A:12:2E:F1
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019D3865E5709BA6857EB8ECCF28AE3B0AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: +v+BtpG4KXyI+U40oN54O3VGeYfL0AThWPWO7xg2PAc=)
2: LdaZSUyQ2J35WViDp7K4OleiJM0.roa (hash: 8ojGftdjF7z5hU3TazuQkKR65kz8aTFetHlaO3cL+Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e5:70:9b:a6:85:7e:b8:ec:cf:28:ae:3b:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=ff64bc863a96035c2f9b2addfd9febf13a122ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:e3:89:e4:7b:f8:a8:b8:67:e6:87:d2:8c:
8a:5d:87:f5:87:97:15:81:16:a4:d6:86:37:75:5b:
54:9d:97:aa:a2:0b:23:81:f1:5f:1a:d9:aa:0f:fc:
f2:63:79:c7:df:75:69:9e:8b:2c:96:49:5c:df:99:
d4:54:86:20:2b:59:8f:f5:90:66:8c:de:91:af:a0:
02:61:b3:a5:6a:55:46:c0:16:3d:4d:a3:ff:a2:1b:
2a:e0:d1:80:94:4f:40:b6:3b:de:22:bd:eb:ac:1d:
90:2b:a3:13:80:0b:12:87:3e:bc:71:f5:c5:02:0c:
f3:31:93:d9:8b:f9:14:23:81:15:da:00:a0:62:ce:
6e:0e:a9:a5:57:ed:6e:45:9d:c0:a2:a1:b9:d2:02:
be:b7:9e:cd:67:aa:f6:78:ea:f2:20:61:ff:42:18:
74:f6:e6:cc:a4:ea:bd:4a:4b:15:f2:f0:3a:d6:ab:
f1:49:fd:a5:57:f8:4c:ee:71:42:da:68:7c:d5:3d:
56:ed:f4:50:c8:33:f2:94:f8:7c:55:4f:39:08:24:
04:5e:f1:73:28:fd:45:1a:92:f3:cb:ec:29:5c:73:
5f:d5:65:4a:f3:0f:c2:fc:11:88:24:e4:d4:51:9a:
e7:a9:1b:f3:4c:c8:14:21:84:13:e9:68:ed:8e:e7:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:64:BC:86:3A:96:03:5C:2F:9B:2A:DD:FD:9F:EB:F1:3A:12:2E:F1
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:da:c1:ab:63:2a:14:b0:45:cd:bf:c5:e0:e0:ef:e5:1d:
43:cc:13:5d:7d:94:d9:09:5a:24:ef:2f:bf:d0:b2:35:87:77:
8f:db:f3:b4:3f:79:f2:e5:33:06:3a:ba:12:09:33:ed:34:81:
4e:14:7f:fd:23:3f:78:ea:5d:a7:a8:46:a7:16:92:fe:7d:68:
2b:e2:0d:9d:e8:29:1c:e7:17:e2:dd:c4:22:ee:ac:7e:3c:53:
50:ca:48:35:71:fd:56:8b:6c:75:c9:ff:32:79:52:ed:1e:2c:
62:24:57:b4:36:cf:60:a5:00:5c:e6:8c:b7:59:0b:d3:3c:f7:
3c:68:32:20:29:29:f4:74:ef:96:81:77:15:9f:10:be:0e:e2:
5a:85:ac:c9:c8:86:f6:e7:e5:c9:28:7b:11:72:85:74:1b:74:
26:dc:bb:68:f9:9d:0f:60:be:a1:46:31:c2:b2:83:ce:e6:9b:
26:bf:30:2c:71:2c:6d:d1:ac:9f:9a:54:b6:18:0f:32:77:71:
d9:7d:a5:91:58:a0:72:2c:91:ce:9e:20:50:d4:e0:c7:04:39:
f7:d1:cc:f9:dc:72:25:f3:1a:cd:4f:8e:b6:dd:f0:69:66:a6:
a6:74:40:c1:09:4e:bc:29:3d:01:40:5b:f7:87:48:c1:a2:84:
76:a8:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:34 2026 by rpki-client