Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: hpJEpDnce6LoqSd42HISXzVsbuoo2qmkIuED/Q79m6A=
Subject key identifier: 2A:8F:DB:3B:99:5E:FA:EF:67:26:E5:C5:D2:ED:11:24:5B:A9:32:90
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 019FCBCB36FB1B438D7ABA4DBCC6AE5C65F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0D3F
Signing time: Tue 04 Aug 2026 08:02:00 +0000
Manifest this update: Tue 04 Aug 2026 08:02:00 +0000
Manifest next update: Wed 05 Aug 2026 08:02:00 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: tH2FGM4vrb2ruESBpFLV/gll+ef9R3Di7F/wasjzKGc=)
2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:cb:36:fb:1b:43:8d:7a:ba:4d:bc:c6:ae:5c:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Aug 4 08:02:00 2026 GMT
Not After : Aug 5 08:02:00 2026 GMT
Subject: CN=2a8fdb3b995efaef6726e5c5d2ed11245ba93290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:b0:e9:c7:e1:86:03:8d:12:6e:12:03:54:
62:a9:6f:43:eb:ae:b7:c4:cf:2f:6b:5b:9a:3f:31:
8c:0c:7a:ab:ac:ec:57:db:1a:cf:da:64:55:76:00:
73:e1:fb:f3:75:d8:95:da:14:e9:87:ae:f7:68:a2:
d2:b7:3f:c7:7e:7f:20:a8:79:5b:f7:b8:62:9d:77:
8d:86:3c:e5:4d:e2:21:76:a2:8f:ac:73:33:a8:5e:
82:0a:d0:fd:69:9d:5e:c9:75:eb:ac:99:13:df:32:
10:39:c7:05:72:3d:55:8d:b3:3e:c6:c2:68:8e:ae:
cf:a6:d5:05:82:cc:38:dd:5f:c8:b7:8f:16:41:2b:
d5:ba:4b:e0:fe:0e:00:a3:18:21:d0:8a:5b:04:b2:
b5:ce:ea:9e:90:fb:b1:75:a8:dd:34:dd:44:b3:bb:
fa:b6:44:69:60:9f:4c:c0:bf:40:5a:5e:12:0f:d4:
c0:3d:6c:51:89:4a:26:07:0a:42:7f:7e:0f:b8:48:
a7:48:a7:4f:07:4a:f9:6e:46:3e:6e:25:e4:11:11:
d1:2b:05:56:7e:57:4b:cd:fe:df:82:53:9d:cd:f5:
43:2f:20:06:be:f1:d9:94:3a:ad:89:a4:ce:97:00:
43:92:74:29:12:35:23:f7:da:8e:54:2c:55:66:17:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:DB:3B:99:5E:FA:EF:67:26:E5:C5:D2:ED:11:24:5B:A9:32:90
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4d:21:10:4f:ce:08:6b:be:5f:33:38:ce:e0:1f:ff:fb:a3:
29:ba:cb:94:82:2c:a6:6e:2d:d5:9e:33:d4:7d:18:a8:be:40:
06:de:f4:69:63:e7:b5:79:13:8e:ce:53:ca:a1:17:f2:c1:33:
40:8a:88:c4:90:72:3b:de:9f:ba:78:66:cf:dd:51:1e:bb:35:
12:38:5e:fd:06:8c:c5:15:59:57:46:63:21:fe:c8:02:48:4d:
0b:1d:72:32:83:f8:2e:0f:18:26:34:68:ce:ef:21:75:ad:51:
41:7e:09:8f:54:05:fc:52:f9:73:74:cd:d7:a4:19:6e:00:9d:
bc:a5:d7:42:5d:1c:23:da:bb:11:0d:cb:c2:03:ef:4f:16:14:
6e:c4:03:c4:65:39:31:c3:31:29:31:ed:54:11:22:d4:dd:4e:
35:0d:ef:88:32:ae:40:e0:0e:a3:51:ff:b1:3e:2a:56:66:32:
4f:5b:44:a0:fd:95:5c:f3:01:6c:04:92:e7:72:1b:bf:49:bf:
f4:9e:51:5c:e0:39:5a:21:3d:24:b7:df:0f:2c:f1:5f:b0:79:
56:75:07:b7:ef:cc:7b:9a:ea:49:ee:ef:20:ea:96:e7:e1:7b:
49:be:8a:5f:93:e5:27:62:2b:2a:62:cc:45:de:0d:10:a6:d3:
fe:43:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:20:28 2026 by rpki-client