Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: lAXnYgbLW1hHLN08eOtmBY6xloY2OJpUc73d787nVdg=
Subject key identifier: 22:AD:FB:1E:F2:B5:DA:88:32:E3:5E:E0:C8:81:E9:F8:51:79:04:66
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019F1830CDB3D32AD6104787E278BB1E45EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 13AB
Signing time: Tue 30 Jun 2026 11:01:19 +0000
Manifest this update: Tue 30 Jun 2026 11:01:19 +0000
Manifest next update: Wed 01 Jul 2026 11:01:19 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: anuG8cywFBRCDjS9bwtUCJwazRXgUV4Gz2nSDQB+rDw=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:cd:b3:d3:2a:d6:10:47:87:e2:78:bb:1e:45:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Jun 30 11:01:19 2026 GMT
Not After : Jul 1 11:01:19 2026 GMT
Subject: CN=22adfb1ef2b5da8832e35ee0c881e9f851790466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:37:d7:4b:b2:1b:85:11:e8:02:5d:cf:f3:
0d:76:88:6f:9d:78:4b:8d:5f:05:1e:55:cf:fa:26:
33:cc:df:54:3a:ca:9a:b7:06:b1:20:ab:9b:98:af:
56:59:19:39:ad:7c:d1:ac:d0:90:ab:2c:45:e0:32:
fb:2d:87:e8:37:26:e9:38:d4:7f:b0:67:ba:c0:ab:
a4:f6:cf:c6:b6:11:85:a0:40:cd:d2:1d:a1:1e:ec:
b4:4b:f6:f0:b6:b4:6a:67:cf:e3:da:42:50:01:ce:
f0:a1:ce:11:10:3e:70:c3:17:45:bd:74:ce:38:58:
c8:53:e7:f2:92:0d:ca:af:22:1a:7c:5c:fb:64:98:
8f:97:ed:6a:36:88:d4:5f:f0:b0:6a:8a:4b:f9:6a:
08:dd:42:46:15:ce:0f:81:8e:8a:96:15:c6:2f:da:
ed:a7:72:64:8f:49:a6:af:8a:61:58:b2:a0:ec:66:
46:55:e5:67:25:ee:72:a6:bb:33:95:e1:22:cb:1e:
3f:93:0e:71:bb:54:e1:98:4e:6a:2c:43:37:a5:14:
14:6a:fc:4e:86:ab:b6:6a:d1:b7:2c:f7:36:14:33:
e4:d8:9d:e6:db:bd:6e:9a:94:10:e8:3c:05:27:6a:
e7:9a:1f:e7:23:9a:4b:ff:bf:23:0d:43:22:58:af:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:FB:1E:F2:B5:DA:88:32:E3:5E:E0:C8:81:E9:F8:51:79:04:66
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:54:b3:5f:dd:72:6c:3f:cb:1a:01:67:f2:9f:e7:37:7c:ef:
25:9c:2b:b2:f9:d0:34:38:bb:eb:47:f0:5e:49:d7:26:0f:97:
8d:dc:5d:ca:5d:8f:0e:79:e2:2c:06:ba:e8:d1:42:4b:09:b0:
21:8f:32:f0:5f:ba:b6:72:e2:3f:7c:04:10:e0:c6:06:f0:4d:
f1:66:61:b6:18:48:3e:ef:9b:f9:f5:a1:ff:2a:8d:12:ac:c5:
ee:e0:0a:c0:f1:67:33:cd:c1:34:68:e4:61:9e:31:5c:15:ca:
7d:35:f0:3a:66:19:72:ae:da:07:56:a0:c3:35:5b:71:a1:7c:
36:be:5b:49:5f:54:8f:30:ed:53:5c:b0:be:e8:09:cb:a0:90:
8c:5a:43:d2:20:34:d0:5e:30:8a:7a:d6:ff:0d:96:58:c3:81:
13:64:4b:ab:de:1d:8a:a2:a5:4c:71:96:33:73:5b:a1:12:e2:
1c:ef:ca:f2:2b:04:a4:0e:e4:c3:bc:98:d5:2f:bf:59:dc:8e:
de:8c:8e:67:a8:bb:d4:a3:6f:18:bd:22:59:50:3e:49:8e:ba:
77:e8:32:05:c6:0e:7b:0d:88:18:7b:43:2b:03:98:8e:ed:26:
f9:3e:09:8e:4e:f2:47:3b:12:af:8e:ac:63:1a:cc:e4:42:f4:
f3:40:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:47 2026 by rpki-client