Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: S3ro7i0eO2dAgX2c9hMrNag0DdXR4mBRj56y6LkLS2w=
Subject key identifier: E4:63:2A:2D:FB:CF:76:BE:93:A8:B6:2D:E5:0F:50:46:F9:98:E3:C3
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 019E295DCC9F59D2A5DA7496884F0DAE44D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 12CB
Signing time: Fri 15 May 2026 02:01:13 +0000
Manifest this update: Fri 15 May 2026 02:01:13 +0000
Manifest next update: Sat 16 May 2026 02:01:13 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: ZPs2t7WdfQtH4er3hz8hFm83c3+3hBevGOjz+Zht2Io=)
2: 3h0tgfEL54uXZSKGRLQARmVw2KA.roa (hash: f8vTeTyqS6eJf2HQkmlz6eipXPOPlN+oK8oViJ/L4C4=)
3: 6DqggK820YyLRE6DOMeCn20OVq4.roa (hash: pO4LdGxPE7DhXdUOzjR/JAV9KPAcLjMaprACs346LHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:cc:9f:59:d2:a5:da:74:96:88:4f:0d:ae:44:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: May 15 02:01:13 2026 GMT
Not After : May 16 02:01:13 2026 GMT
Subject: CN=e4632a2dfbcf76be93a8b62de50f5046f998e3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:71:0a:1e:eb:46:cd:9a:c8:57:a2:2e:78:
e6:3c:e5:2c:ff:f6:7a:a8:5f:b2:d2:a5:6f:9a:82:
8a:db:b4:c2:42:64:53:ac:33:ad:fd:90:af:b7:0e:
02:18:64:e1:c5:d0:a3:85:48:a4:72:e7:5d:14:6e:
87:14:d8:9e:29:94:4e:28:90:aa:50:5d:81:2b:a0:
2b:24:e8:1c:d7:97:ae:44:ac:33:45:59:de:08:61:
b5:c9:e7:72:ed:b2:d8:64:28:e2:6a:5e:f9:3c:0a:
c3:27:3b:c9:2a:cd:45:b8:63:7e:fa:bc:91:c8:a1:
e1:9b:00:96:93:b6:46:2e:1c:f3:b5:6c:31:4e:3c:
c8:13:63:01:61:14:7a:2f:30:20:57:dd:c5:02:73:
5c:7c:78:0c:5e:1a:92:bb:89:8d:e1:04:66:ce:d5:
f0:74:53:91:c2:d5:e8:01:5d:ce:60:27:39:a6:4d:
ab:f9:88:9a:78:56:75:52:c4:98:a5:79:eb:78:18:
a4:90:74:46:57:3c:aa:08:9c:a6:42:0f:c2:00:57:
43:8d:a4:3b:11:43:0b:f6:1c:a7:1c:3d:1e:91:16:
4f:ee:d3:22:55:7d:bd:90:b0:8d:75:9e:3c:33:d5:
3f:05:fa:64:e3:2e:a7:0c:2a:a7:03:86:d0:bb:c1:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:63:2A:2D:FB:CF:76:BE:93:A8:B6:2D:E5:0F:50:46:F9:98:E3:C3
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:03:ed:13:cd:a0:6c:76:42:f3:e5:15:53:2b:83:0d:e3:
02:27:c6:09:8c:0f:8a:1a:47:3d:43:90:17:62:a0:9e:08:9d:
c5:7b:02:a8:97:f9:ec:3c:e8:10:af:71:35:08:48:01:fe:cb:
69:2d:ba:d7:61:f9:d4:ca:cc:8f:4c:e9:94:d1:10:3e:14:22:
a9:a4:4f:f1:1f:ac:59:a5:d3:6e:a1:af:9b:d2:79:71:ed:0e:
b6:b0:6d:e4:12:c3:7c:ee:e0:72:9d:8b:c2:8a:d5:7a:7c:c6:
f0:a7:56:b5:fe:40:43:6e:88:68:fa:56:ed:ad:86:76:ab:9b:
0c:6a:88:76:dd:8d:c8:41:76:e0:2d:c9:17:41:0a:58:39:1f:
1f:39:79:2e:37:37:90:9d:35:04:33:c9:ac:75:be:df:99:e8:
f5:11:46:3f:7b:66:05:a1:44:ac:2d:bf:af:cf:53:ef:84:e6:
9c:47:86:db:c5:1d:41:0d:f6:70:f4:ba:57:62:11:a3:51:8d:
42:0c:5e:1f:fd:ad:10:f5:09:49:84:e9:e8:c2:03:2a:93:7f:
53:c7:e2:fd:59:d0:68:6d:c2:71:3e:52:d2:e9:d7:c1:00:44:
56:21:ae:fa:46:5b:89:37:34:2e:df:ad:59:c3:83:bf:fc:d1:
b9:63:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:04:04 2026 by rpki-client