Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
File: 1-RZH5UfEr05b3GWeTBT5H_nOigU.mft (raw, json)
Hash identifier: zHXAz3CZW232UOSvosTf/U15SdSbuqsJE4m60DSxuDo=
Subject key identifier: 9A:BB:B9:35:3E:8F:28:43:7F:08:29:38:BA:BA:FB:A2:42:35:56:3D
Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
Certificate issuer: /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Certificate serial: 01A027A170124CB0ACE3C009071824BAA024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
Manifest number: 035A
Signing time: Sat 22 Aug 2026 04:01:26 +0000
Manifest this update: Sat 22 Aug 2026 04:01:26 +0000
Manifest next update: Sun 23 Aug 2026 04:01:26 +0000
Files and hashes: 1: 1-RZH5UfEr05b3GWeTBT5H_nOigU.crl (hash: 30EOeysiWo2niLhG6w7/GRb1ucIRLcAB8v0Uc/QWsUc=)
2: ZSSuDxoCE3_eFwdfTUSWnRDPsE8.roa (hash: PPIOgp4NjFXsYuOWxQoSBUarq2WQUEJtAkW510E33lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:a1:70:12:4c:b0:ac:e3:c0:09:07:18:24:ba:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Validity
Not Before: Aug 22 04:01:26 2026 GMT
Not After : Aug 23 04:01:26 2026 GMT
Subject: CN=9abbb9353e8f28437f082938babafba24235563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:b5:b9:75:c4:91:6c:2b:a3:c5:6f:04:12:
c7:5b:70:f0:a9:5f:e0:43:5e:e7:1b:88:a1:e4:49:
74:63:e1:e5:46:04:0d:47:ec:6f:8b:db:3a:e9:6f:
a4:f6:b4:c5:35:92:86:c6:c8:67:b7:a5:39:29:ec:
0c:7e:b5:c6:cf:26:88:cd:1e:0e:ba:c9:49:70:7b:
1d:4c:c1:f9:08:70:86:9f:62:a9:e5:a6:8f:13:80:
e3:3d:31:4a:1a:0d:42:98:57:b1:cb:14:c6:c1:e3:
b7:2a:c8:1b:f4:70:a5:d6:34:57:b2:3e:4a:13:fb:
5d:64:cc:1a:4b:c9:dd:4d:d9:27:d0:87:b7:da:7c:
60:12:23:85:7a:6c:83:ac:77:94:f8:91:58:b4:46:
26:f4:a5:58:f3:3c:c2:e6:e4:49:cd:2c:cd:f0:da:
9b:78:47:33:8f:69:41:60:88:3a:d0:88:d4:c0:6f:
36:cf:a0:ed:a4:40:cb:83:b5:5c:a0:dd:44:e4:b0:
59:32:a6:3b:ac:cc:01:e8:43:99:a0:e5:5f:81:73:
95:3c:35:d1:3d:5b:8e:00:d8:68:98:a6:ba:b8:9b:
dc:8a:34:63:ae:ae:03:a6:64:cb:f8:7f:20:5e:2d:
6e:fa:f1:b1:30:10:9f:f2:80:98:37:2b:73:d9:f3:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:B9:35:3E:8F:28:43:7F:08:29:38:BA:BA:FB:A2:42:35:56:3D
X509v3 Authority Key Identifier:
keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:08:bb:f7:34:b1:d9:af:0c:79:c3:31:f6:95:a8:47:10:2c:
03:99:af:50:9d:5b:f4:8b:86:57:05:b5:29:24:a9:f6:60:bf:
df:52:10:34:da:76:82:59:de:d4:43:94:13:ab:0f:93:ce:1d:
dd:8f:6c:42:99:36:8d:bb:ca:95:8e:5b:26:22:d4:4c:23:1e:
43:bf:fa:99:ce:75:d2:bc:a0:59:e9:38:cc:23:4b:e8:9c:c9:
8d:0f:04:80:1e:2c:34:f3:57:fe:01:eb:3b:11:16:b5:70:31:
72:14:df:11:17:c0:8e:6e:d0:07:20:5a:47:91:06:6d:e6:b0:
5e:ff:51:40:20:2e:51:aa:3b:19:5b:67:1a:8c:9d:9a:3e:7c:
65:c1:6f:0f:9a:39:43:31:2e:10:a6:60:4f:b1:79:b2:68:18:
75:38:72:50:aa:2a:68:98:6e:81:ab:02:45:fb:ba:82:e9:76:
22:99:ff:64:7c:17:ae:f9:b0:a6:82:18:87:3e:2d:78:60:54:
6d:ff:d7:f3:4f:31:37:88:c4:79:28:e9:e5:27:1a:f2:25:81:
49:75:ae:c9:64:52:7b:31:82:dc:e4:52:8d:ca:61:22:e9:fa:
00:a7:00:3c:d6:35:c5:f7:1c:08:0e:75:06:d8:72:ee:b1:32:
38:ff:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:37:02 2026 by rpki-client