Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: XLrcySnA0HuEQIvg7aJnf91JVVcg/i85DRnRP5hoVlc=
Subject key identifier: 8E:A3:16:F5:38:E9:39:EE:F9:AA:12:D0:FD:72:85:FE:31:FB:53:F9
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019E3072AE0DB18CD0B6A1104840FD874F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 1333
Signing time: Sat 16 May 2026 11:01:22 +0000
Manifest this update: Sat 16 May 2026 11:01:22 +0000
Manifest next update: Sun 17 May 2026 11:01:22 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: 1zaq4fzh0/aK7H4xXgYzBuqjHKMAor65yNicfDIvkPE=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:ae:0d:b1:8c:d0:b6:a1:10:48:40:fd:87:4f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: May 16 11:01:22 2026 GMT
Not After : May 17 11:01:22 2026 GMT
Subject: CN=8ea316f538e939eef9aa12d0fd7285fe31fb53f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:89:ad:74:a1:5a:49:47:f2:02:fd:b3:b8:
04:d3:9a:58:8b:fd:62:07:ce:8c:59:80:cf:c1:6b:
66:77:d0:76:bb:f5:8e:97:a3:e9:26:4b:0c:f1:92:
bd:bb:a6:2b:01:06:fc:03:94:3f:9f:8e:e3:5d:68:
b1:9f:ef:71:24:cc:b6:a8:78:44:b9:ef:6c:3b:aa:
9e:ca:dd:9f:c4:71:52:c5:ec:48:45:65:07:bd:97:
28:59:1b:58:85:8f:37:60:a6:42:8b:6c:d8:bf:25:
8c:e7:ef:5d:54:6e:06:c5:55:38:3c:f0:4f:fe:d9:
d1:12:cf:8a:28:60:95:83:8f:da:2f:d5:c9:5a:21:
30:f1:66:8f:76:4a:33:91:dd:c8:dc:80:03:a3:4d:
7b:ea:62:78:d1:01:b9:7d:5e:23:07:66:9e:5e:b8:
2d:be:65:b1:79:8a:ab:ec:b6:41:dc:03:f7:ba:52:
28:9a:13:2d:57:91:cb:c5:e7:39:07:57:6a:b7:5b:
e9:11:bd:83:ae:31:2c:85:eb:cd:98:7d:f9:76:7e:
8e:98:96:ed:67:e8:6e:98:19:51:36:d0:8c:14:2f:
0e:21:f3:24:52:fa:e9:92:eb:8a:fc:73:df:d3:84:
33:e2:91:52:3d:2e:58:50:84:47:46:8c:4d:19:3b:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:16:F5:38:E9:39:EE:F9:AA:12:D0:FD:72:85:FE:31:FB:53:F9
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:87:cc:5d:c5:6f:1e:95:73:b1:fa:86:84:e5:0f:89:fb:32:
59:71:4b:c4:c3:4e:85:f3:0d:d8:3e:b0:6a:61:84:06:04:8d:
83:31:80:e2:22:9d:ad:d5:c7:64:10:be:c9:04:90:77:0d:8c:
b2:31:3c:16:a4:e0:41:e7:ea:0a:f0:e6:b9:5a:64:7e:0a:42:
06:18:e7:cf:27:97:36:44:a4:92:3f:31:a8:3b:70:9c:d4:f6:
27:82:87:60:bf:40:57:84:55:eb:c4:f2:6f:d1:b8:f9:ed:85:
8d:a5:a4:f3:c8:63:6e:35:c7:fd:26:3f:8b:7b:07:a1:01:2a:
d0:1d:48:72:55:d0:f2:03:1b:a0:65:6f:4d:46:86:01:5e:8d:
20:46:a2:e8:21:6e:ea:4f:f7:29:c7:c8:f3:8d:e8:a8:3d:4f:
0e:e8:92:88:b7:ab:ad:a8:be:8b:f3:e9:81:0b:0a:ab:85:72:
9a:6b:c9:1c:7c:63:9d:9a:83:f6:fc:09:0f:4c:5f:58:b8:c7:
0b:47:ee:f7:85:d7:ea:8d:50:9f:65:79:eb:73:bc:03:9f:c0:
a7:1b:c9:94:d5:9b:c9:51:01:80:cf:d5:9d:33:ec:32:9c:3d:
f2:3e:95:91:2f:37:67:68:91:82:39:70:b2:74:ff:78:a9:5e:
5b:00:bc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:23 2026 by rpki-client