Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: gvpcF3IjTnqo9VqVilVDfwG0Sf8B58RcenLamblnAZE=
Subject key identifier: 26:87:07:47:2A:93:C2:28:0A:66:C0:2F:ED:B4:30:0B:63:AB:71:3B
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019D394118EEAAC978AD9A056248DBF40FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 12B3
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: YqZNUdbGBsVwwwElU7GyB5D9REjUZMHoj+4po3VRzU8=)
2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:18:ee:aa:c9:78:ad:9a:05:62:48:db:f4:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=268707472a93c2280a66c02fedb4300b63ab713b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:02:92:bf:87:af:de:df:55:2d:8f:7c:d8:
8b:e5:ac:d5:27:4e:21:45:1b:b5:29:5a:0a:f3:03:
b3:20:33:96:63:24:e4:bc:09:1b:cc:4e:cf:1f:bd:
c6:00:90:25:4a:dc:d0:b0:f3:aa:07:2e:97:71:19:
12:23:e2:4f:bb:9c:c2:77:87:ab:99:6f:d0:fb:97:
9d:21:80:10:bc:e6:b9:1d:87:48:cc:cb:11:21:5a:
78:b0:35:8c:fe:3f:7b:f8:1a:87:1b:49:4a:a5:4c:
98:7f:fb:a3:cb:fc:5c:fc:7b:bb:aa:00:c7:09:86:
83:c9:ae:ca:f1:09:a4:de:46:29:74:ce:44:d0:19:
a6:ae:4d:b6:3e:ce:da:91:9b:8a:ec:d6:e5:8a:9e:
7b:32:07:84:b2:72:52:43:bc:23:80:c8:c6:10:a3:
2b:f9:5a:62:dd:e1:20:6b:ba:d9:ff:28:98:26:ac:
ef:5d:44:98:76:4b:83:a2:69:26:2a:53:c6:50:91:
d0:11:65:36:1b:28:7c:f0:39:f3:cc:3e:c5:e7:68:
e2:61:86:bb:b1:53:b2:68:12:fa:fc:4d:6b:04:d3:
27:59:18:29:bd:75:a7:f9:05:e1:3a:d7:43:4f:2f:
da:db:e0:1e:22:dc:83:96:b2:4c:da:77:db:46:38:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:87:07:47:2A:93:C2:28:0A:66:C0:2F:ED:B4:30:0B:63:AB:71:3B
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:05:c7:8d:c5:16:3b:72:62:3e:e3:93:db:c5:a9:4a:a7:
4d:40:77:b9:ef:1e:01:5c:d2:51:48:b4:b5:2a:3c:96:87:18:
f5:52:37:ab:23:ba:60:99:dd:5e:bb:22:cc:73:4c:11:2b:a1:
6a:a4:1d:ee:99:38:53:63:ee:34:31:c7:ef:a7:38:a3:75:08:
7b:cb:51:cd:ca:3f:2f:b6:fc:4a:53:4a:7f:9e:bc:af:b2:d1:
e1:e9:97:ed:ca:b5:66:52:c1:6f:fb:49:6b:04:d2:1a:78:91:
62:5f:e6:14:34:72:5b:a6:76:32:4c:d4:db:f8:f2:de:bc:1a:
ce:d0:f5:4e:14:4b:da:23:1c:9b:93:7d:2f:c6:5d:57:3b:99:
54:ad:f9:69:5e:89:d3:ac:25:a7:c0:5c:9d:c7:f0:75:9a:80:
20:4b:ac:f3:7b:1c:ba:36:54:d4:11:14:9c:a2:08:09:86:47:
89:bb:c5:ef:6e:52:56:3b:21:c6:04:eb:78:da:b6:66:72:52:
3a:5e:69:9f:16:cb:3a:ea:35:02:4e:d7:33:cf:13:bc:78:c9:
a8:38:42:bd:c3:b7:ca:ca:89:56:a8:c5:67:65:d5:7a:f1:a9:
9e:4d:ee:58:be:cc:37:4e:05:4a:60:bb:44:0a:2c:a9:96:8a:
73:98:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:07 2026 by rpki-client