Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
File: 1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json)
Hash identifier: zxYQxYKXK09uT6wDvwvXETyEvE13Yq8ymM4DYzVq3+I=
Subject key identifier: B1:7A:35:51:D3:11:7E:35:5D:DE:0D:8F:2F:30:09:64:13:CB:14:9D
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Certificate issuer: /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial: 019D389BBAEF8A26956C3AA1E5F41BD39EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
Manifest number: 1038
Signing time: Sun 29 Mar 2026 08:00:23 +0000
Manifest this update: Sun 29 Mar 2026 08:00:23 +0000
Manifest next update: Mon 30 Mar 2026 08:00:23 +0000
Files and hashes: 1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: /NVVw+v3BfkxmN9JFKDQdBNpLsaNCZqKApfjfQCrerc=)
2: DUskNcIQZwjTb7DZ-freME2oNjk.roa (hash: nDcT9LCMb7BQTYuDE4O/4AXMPAGpOTpeKPOxcFIo824=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ba:ef:8a:26:95:6c:3a:a1:e5:f4:1b:d3:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Validity
Not Before: Mar 29 08:00:23 2026 GMT
Not After : Mar 30 08:00:23 2026 GMT
Subject: CN=b17a3551d3117e355dde0d8f2f30096413cb149d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:cb:e5:66:a9:a3:53:29:b5:b5:bb:96:47:
32:58:c9:64:cd:06:a1:10:99:33:42:43:85:b1:df:
97:a0:c6:24:4c:1d:4f:95:a0:d9:35:c5:17:fd:73:
e4:91:d1:c0:31:d2:3f:1a:2f:86:e4:2b:9b:75:a3:
b5:4f:7b:39:55:f2:7f:6e:61:c4:cc:9a:f7:b5:a5:
3e:de:a3:5f:b6:3b:68:00:17:aa:0d:6d:18:c5:4c:
19:66:1a:1d:b5:f2:fd:59:f4:e9:0d:90:0d:81:5c:
d4:63:70:84:54:7a:d7:e2:0a:a1:87:8a:01:16:c7:
20:42:d3:df:93:83:3d:be:35:e6:66:1d:08:f1:f5:
2b:fb:c6:cd:3c:4c:22:16:24:20:d3:04:ac:62:03:
c4:77:f2:41:7d:17:6e:b5:65:43:dc:e6:3a:c0:22:
b8:9c:91:2b:fc:c1:1e:e4:92:08:f7:ad:be:46:da:
2c:db:af:23:74:fb:aa:f8:62:c8:20:3d:f5:b2:89:
34:1e:d7:94:7d:66:c6:08:db:c5:42:f3:30:0a:35:
88:10:35:8e:e0:bd:10:cd:1d:da:fd:8a:36:4f:74:
b5:9d:5c:f6:54:7e:18:0d:14:52:70:e5:26:68:47:
53:8e:70:f5:c9:72:b0:97:e2:95:5a:85:8b:71:2f:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7A:35:51:D3:11:7E:35:5D:DE:0D:8F:2F:30:09:64:13:CB:14:9D
X509v3 Authority Key Identifier:
keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:42:22:eb:44:6a:71:60:aa:40:b4:73:d5:61:b4:c3:a1:f0:
dd:61:54:05:5d:7a:da:11:6b:80:0c:9c:a9:bc:2f:c2:7a:7c:
aa:ad:83:ff:ce:4a:b4:b3:31:c7:05:c2:ef:f9:1a:3e:68:fc:
31:07:6e:76:ff:a3:bf:e9:3d:12:73:37:70:fe:ec:8d:f3:8c:
9f:f0:1a:e0:fb:18:51:54:2f:ee:5a:7c:2e:f2:57:c1:48:fc:
f9:c2:bc:7d:69:12:4d:56:49:9b:5f:e2:02:11:07:b0:b7:4e:
c2:e5:cb:63:49:b5:00:4b:9a:64:4a:5b:b0:28:a5:54:0f:71:
99:03:c2:f9:0d:4d:aa:73:3b:8d:26:f0:03:9e:1c:0b:21:13:
81:c6:dd:b8:85:5c:ec:cf:e9:0b:59:2c:25:e8:73:45:6a:f5:
14:fc:10:ea:b9:1e:a5:2e:87:f2:89:e6:2d:70:fa:92:66:4c:
b5:ee:42:a9:e2:66:c5:a8:28:bd:2d:ef:38:33:70:14:3a:41:
77:07:23:8a:5d:d3:17:41:ef:b9:1f:97:b9:aa:4b:0a:2e:2e:
1f:f3:47:44:36:0e:03:1c:bf:4a:c7:68:b2:64:51:af:d8:31:
b0:ba:37:b3:dc:cd:63:82:e1:52:4e:c2:66:71:71:a9:8c:70:
84:56:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:40 2026 by rpki-client