Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: AjGkGUbdqCEquuUC7JwzW9NUYe5FNY4Z1H9bgACt9Jk=
Subject key identifier: 07:68:BA:2A:B0:BD:49:29:40:C9:F9:74:54:BA:7C:40:AC:C7:4D:BD
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 019D37F72DC3BE93F463E0F5A2797EB752B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 124E
Signing time: Sun 29 Mar 2026 05:00:39 +0000
Manifest this update: Sun 29 Mar 2026 05:00:39 +0000
Manifest next update: Mon 30 Mar 2026 05:00:39 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: pDJzzyD4FuEOgRlV7z0Gg2Jhk6A1ncuhUSM5RIJlzUA=)
2: 3h0tgfEL54uXZSKGRLQARmVw2KA.roa (hash: f8vTeTyqS6eJf2HQkmlz6eipXPOPlN+oK8oViJ/L4C4=)
3: 6DqggK820YyLRE6DOMeCn20OVq4.roa (hash: pO4LdGxPE7DhXdUOzjR/JAV9KPAcLjMaprACs346LHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2d:c3:be:93:f4:63:e0:f5:a2:79:7e:b7:52:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Mar 29 05:00:39 2026 GMT
Not After : Mar 30 05:00:39 2026 GMT
Subject: CN=0768ba2ab0bd492940c9f97454ba7c40acc74dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:30:07:36:be:f6:75:a3:90:e6:1b:77:64:
1c:e8:ab:8e:fe:7d:c0:64:50:d7:08:53:d7:ca:8c:
a3:fe:31:30:3e:96:de:f3:09:f1:ed:8b:6a:1a:62:
a9:da:84:4c:2e:3e:d0:c7:8a:94:38:b9:a8:ad:d7:
08:76:d6:57:87:db:91:f1:aa:b2:3e:73:73:61:47:
b8:d9:d3:9f:08:bc:33:08:03:10:54:25:c7:96:a8:
6c:40:97:bd:c6:e1:48:b6:55:98:e9:c8:09:e3:b7:
00:7f:ac:b8:5b:ea:6f:a5:32:2c:5a:6a:ec:95:a8:
53:ad:ab:92:07:b9:e3:30:b5:42:e5:65:d2:76:9c:
d6:4c:39:69:4e:b8:b2:62:06:5b:d2:15:91:82:a3:
4d:bf:31:17:74:dc:5d:7e:fe:ca:e8:b5:0f:36:d9:
4a:1b:db:3b:b5:c9:80:7d:7e:ab:7c:fb:d3:a5:18:
26:3b:70:61:3a:39:6b:05:f0:4c:b0:2d:6a:52:a2:
2f:48:5e:f9:ef:b3:03:bd:43:74:66:f9:d6:83:af:
2f:67:aa:a9:d7:cd:27:f9:23:df:a9:ab:0f:fe:30:
0f:45:b7:42:8b:3f:2c:b5:23:e6:49:21:38:93:0b:
88:fb:7f:63:62:9f:bf:af:2c:56:ff:d4:38:4b:cd:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:BA:2A:B0:BD:49:29:40:C9:F9:74:54:BA:7C:40:AC:C7:4D:BD
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:2d:f9:44:ff:a0:c0:61:e4:54:73:44:a2:5a:37:55:27:
c5:49:09:7d:d5:d3:c6:c3:a9:63:ad:7a:81:7a:ea:5e:a2:d7:
33:70:54:2e:6e:54:45:ec:5d:b7:9e:d4:be:fe:ce:41:f5:c8:
d0:f3:a9:06:6e:c2:b8:86:13:46:14:7a:82:f8:73:01:12:b3:
da:69:59:f9:09:98:79:f3:d1:31:3a:70:26:39:9a:26:ec:a9:
2c:d7:ce:1e:1a:23:4c:67:88:e2:46:75:63:97:e6:82:99:a0:
d1:eb:6f:6a:20:3c:ad:f2:a4:93:9f:be:b1:95:7b:c8:7b:ce:
1c:f1:80:cd:ea:28:09:14:aa:62:26:af:8f:78:dd:6c:27:56:
50:a6:6c:d5:ca:76:5b:84:b0:27:a3:c5:3f:69:51:06:32:66:
f8:81:83:6f:ec:d5:d0:15:63:52:4b:3e:6f:f3:9b:d8:2b:02:
d5:91:7e:2e:86:30:c0:a5:9b:67:bf:1a:12:3a:b8:2e:fd:a0:
ed:2e:61:da:ce:35:8b:12:22:6a:d8:f9:4b:04:71:70:34:66:
77:5f:50:c8:6a:a6:26:d0:40:7d:15:d0:c6:76:3b:1a:77:c6:
db:74:4c:bf:52:e2:3f:30:b8:6a:03:38:ec:4f:5f:83:41:b4:
22:98:54:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ039y3DvpP0Y+D1onl+t1KzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1
NTdiYjkwHhcNMjYwMzI5MDUwMDM5WhcNMjYwMzMwMDUwMDM5WjAzMTEwLwYDVQQD
EygwNzY4YmEyYWIwYmQ0OTI5NDBjOWY5NzQ1NGJhN2M0MGFjYzc0ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbQwBza+9nWjkOYbd2Qc6KuO/n3A
ZFDXCFPXyoyj/jEwPpbe8wnx7YtqGmKp2oRMLj7Qx4qUOLmordcIdtZXh9uR8aqy
PnNzYUe42dOfCLwzCAMQVCXHlqhsQJe9xuFItlWY6cgJ47cAf6y4W+pvpTIsWmrs
lahTrauSB7njMLVC5WXSdpzWTDlpTriyYgZb0hWRgqNNvzEXdNxdfv7K6LUPNtlK
G9s7tcmAfX6rfPvTpRgmO3BhOjlrBfBMsC1qUqIvSF7577MDvUN0ZvnWg68vZ6qp
180n+SPfqasP/jAPRbdCiz8stSPmSSE4kwuI+39jYp+/ryxW/9Q4S83yIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAdouiqwvUkpQMn5dFS6fECsx029MB8GA1UdIwQY
MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2
LTY4NmEwMTg4OGQyOS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk2LzY4ZmJhZi00NWYxLTQ5NDYtYTM0Ni02ODZhMDE4ODhk
MjkvMS8xLXp1enRLdHZfMWlOMjB6eXItYlZyRVpWZTdrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7Ut
+UT/oMBh5FRzRKJaN1UnxUkJfdXTxsOpY616gXrqXqLXM3BULm5URexdt57Uvv7O
QfXI0POpBm7CuIYTRhR6gvhzARKz2mlZ+QmYefPRMTpwJjmaJuypLNfOHhojTGeI
4kZ1Y5fmgpmg0etvaiA8rfKkk5++sZV7yHvOHPGAzeooCRSqYiavj3jdbCdWUKZs
1cp2W4SwJ6PFP2lRBjJm+IGDb+zV0BVjUks+b/Ob2CsC1ZF+LoYwwKWbZ78aEjq4
Lv2g7S5h2s41ixIiatj5SwRxcDRmd19QyGqmJtBAfRXQxnY7GnfG23RMv1LiPzC4
agM47E9fg0G0IphUzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:08 2026 by rpki-client