Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: 0U7RoQ9ZGKBHrei9Biq6ZwxrFjftifjzZbpgMsoZF48=
Subject key identifier: B6:8E:7A:00:7D:F8:68:D9:D8:B5:2F:2C:39:1C:2D:22:C3:48:98:37
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 019DDD68495310425F5BC3B29A8FEAF1E181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0C3F
Signing time: Thu 30 Apr 2026 08:01:32 +0000
Manifest this update: Thu 30 Apr 2026 08:01:32 +0000
Manifest next update: Fri 01 May 2026 08:01:32 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: 50Nt4Qekm3Q1B9M7te89XakqD47Ynl2wQ7Ljdn7W8bc=)
2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:49:53:10:42:5f:5b:c3:b2:9a:8f:ea:f1:e1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Apr 30 08:01:32 2026 GMT
Not After : May 1 08:01:32 2026 GMT
Subject: CN=b68e7a007df868d9d8b52f2c391c2d22c3489837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:66:d4:8f:ee:ce:ff:7c:be:1c:ba:6a:c2:
7e:fe:8c:12:32:89:28:4e:77:be:ac:4b:f3:3c:da:
e3:d5:77:35:2e:56:9f:5c:28:72:e8:15:0b:96:25:
5a:a2:60:94:2f:cc:51:0a:80:7c:e4:e5:9c:09:7b:
73:78:fd:91:a8:36:f0:50:45:62:a8:65:52:16:a9:
14:a1:dd:6a:1b:8f:66:a7:7a:61:60:c2:2d:fb:44:
19:de:1c:90:ed:28:ab:6f:32:d9:62:4c:58:6a:57:
11:e9:33:cc:3e:bf:9f:5e:04:e8:f0:49:25:73:b0:
73:8a:15:50:11:0e:79:c1:5e:90:50:57:81:0b:a2:
51:49:3b:42:3e:5d:06:da:32:51:60:4d:62:ce:84:
86:be:c1:e0:14:dc:39:27:af:14:f7:a4:2e:55:7e:
29:e8:94:d8:86:61:54:9a:c2:72:31:e5:14:86:df:
68:00:cd:41:8a:d3:bd:84:90:57:fd:40:ac:df:14:
d4:76:e7:99:78:7d:db:e8:0b:74:28:1c:cc:61:27:
e8:33:b9:a4:07:4b:ad:c0:ac:8f:f3:63:9e:75:48:
95:7f:3d:bb:fe:ac:df:c7:76:62:cf:65:98:1d:49:
2a:9a:56:0d:98:0d:3d:b6:30:fb:fe:a1:a3:5c:6d:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8E:7A:00:7D:F8:68:D9:D8:B5:2F:2C:39:1C:2D:22:C3:48:98:37
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:52:76:ef:69:ad:16:75:60:8b:f8:3a:2f:4d:0e:24:16:ca:
eb:99:d4:7e:a1:11:bc:36:05:48:be:6e:f0:ed:61:06:cf:28:
5f:cb:c2:ca:1e:bc:e1:19:0e:27:a7:be:4b:30:15:60:23:30:
9e:aa:42:3a:bf:c5:3c:d3:29:4a:57:30:2c:8c:4e:85:c5:32:
74:b0:e1:79:6c:2e:61:44:e5:2c:b3:b9:4e:fd:38:23:32:6f:
27:c2:f4:0d:b0:b2:20:b7:13:3f:40:25:07:52:92:98:c0:cd:
d9:f6:bb:c0:54:a2:dd:8b:04:ab:b1:62:8b:92:60:77:2c:0f:
17:fa:bf:56:b6:fa:10:68:e5:d8:98:65:39:51:4c:47:44:2f:
1e:39:e1:74:68:6f:3d:a9:53:1f:e7:5c:15:7e:61:50:2e:90:
9d:17:1c:15:58:f8:e6:b3:bd:bb:eb:ad:82:f7:f5:cf:04:a1:
77:8c:4c:97:ae:61:72:66:1d:c2:80:65:70:fe:77:1d:7c:d0:
c4:1e:fa:72:74:8e:77:b1:d5:a2:49:3f:92:a4:12:f7:de:e3:
b0:8e:9c:eb:2f:ec:74:c4:af:58:8d:db:a0:d5:82:42:d1:03:
c4:65:e3:b7:27:b2:76:2e:27:ad:ab:60:ae:90:ad:76:d0:52:
40:c9:8d:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3daElTEEJfW8Oymo/q8eGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5
N2RiNjAwHhcNMjYwNDMwMDgwMTMyWhcNMjYwNTAxMDgwMTMyWjAzMTEwLwYDVQQD
EyhiNjhlN2EwMDdkZjg2OGQ5ZDhiNTJmMmMzOTFjMmQyMmMzNDg5ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4xm1I/uzv98vhy6asJ+/owSMoko
Tne+rEvzPNrj1Xc1LlafXChy6BULliVaomCUL8xRCoB85OWcCXtzeP2RqDbwUEVi
qGVSFqkUod1qG49mp3phYMIt+0QZ3hyQ7SirbzLZYkxYalcR6TPMPr+fXgTo8Ekl
c7BzihVQEQ55wV6QUFeBC6JRSTtCPl0G2jJRYE1izoSGvsHgFNw5J68U96QuVX4p
6JTYhmFUmsJyMeUUht9oAM1BitO9hJBX/UCs3xTUdueZeH3b6At0KBzMYSfoM7mk
B0utwKyP82OedUiVfz27/qzfx3Ziz2WYHUkqmlYNmA09tjD7/qGjXG17IQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLaOegB9+GjZ2LUvLDkcLSLDSJg3MB8GA1UdIwQY
MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5
LTYzZmU2YmU2MmRjOS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzllL2VmMTY5OS04YzEzLTQyMzUtYTU4OS02M2ZlNmJlNjJk
YzkvMS8xLXJaUkpLNjJBNkRkWEZ6dUdncTJVaE9YMjJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlJ2
72mtFnVgi/g6L00OJBbK65nUfqERvDYFSL5u8O1hBs8oX8vCyh684RkOJ6e+SzAV
YCMwnqpCOr/FPNMpSlcwLIxOhcUydLDheWwuYUTlLLO5Tv04IzJvJ8L0DbCyILcT
P0AlB1KSmMDN2fa7wFSi3YsEq7Fii5JgdywPF/q/Vrb6EGjl2JhlOVFMR0QvHjnh
dGhvPalTH+dcFX5hUC6QnRccFVj45rO9u+utgvf1zwShd4xMl65hcmYdwoBlcP53
HXzQxB76cnSOd7HVokk/kqQS997jsI6c6y/sdMSvWI3boNWCQtEDxGXjtyeydi4n
ratgrpCtdtBSQMmNOg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:22 2026 by rpki-client