Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: zDGWkuX5L8AOvaaTbxX07ZJUo0+6CWbmKThl/CnlPC8=
Subject key identifier: F4:8F:3A:7F:C2:51:E9:15:B3:49:07:97:83:1F:11:49:A8:D0:36:AE
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 019CF3BB22DEFEBAF67B9FC695F993CC3189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0BC6
Signing time: Sun 15 Mar 2026 23:00:53 +0000
Manifest this update: Sun 15 Mar 2026 23:00:53 +0000
Manifest next update: Mon 16 Mar 2026 23:00:53 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: 1YgLrwtKesBMHs03XJmjZ4X5Zx+zxe4/fGcxFE7CeRk=)
2: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (hash: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:bb:22:de:fe:ba:f6:7b:9f:c6:95:f9:93:cc:31:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Mar 15 23:00:53 2026 GMT
Not After : Mar 16 23:00:53 2026 GMT
Subject: CN=f48f3a7fc251e915b3490797831f1149a8d036ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:77:05:b7:db:68:88:66:0d:82:9b:ca:ee:
c0:56:c4:73:a3:68:f8:67:a8:47:0b:af:b4:b8:9b:
16:69:a4:4a:3d:95:07:df:de:9c:30:14:ff:19:f2:
59:38:40:17:42:df:23:04:af:cd:ce:3a:73:d1:ef:
de:61:46:73:b3:9e:61:be:87:96:a3:f6:cc:f4:67:
26:54:05:54:11:f8:62:ce:71:10:4e:36:20:f7:9e:
63:27:91:6a:83:f3:0a:15:4e:93:e0:9c:0d:01:fb:
b5:ac:75:76:d7:1e:55:18:5b:06:a3:68:72:b2:0d:
e6:ef:61:84:bd:93:1d:7b:35:52:fe:12:72:74:ec:
34:31:93:9b:bc:e2:65:59:b3:3b:0c:81:b0:8f:a0:
dc:ab:32:36:24:70:18:e6:95:5f:86:59:cb:57:f1:
83:12:41:35:f9:0a:a6:73:67:1a:39:38:37:9a:71:
c2:df:f4:b6:74:af:0f:16:32:7e:47:fd:9e:de:ae:
09:b5:d9:44:60:6f:59:d6:05:87:b4:91:75:62:14:
9f:07:a0:41:bb:1a:04:2d:4e:0a:52:a5:3a:f6:47:
6a:79:e8:64:3d:a2:03:81:d7:a7:78:4a:42:a9:b3:
8e:a8:e3:35:47:7b:f3:bb:46:92:d3:9e:b1:96:f1:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:3A:7F:C2:51:E9:15:B3:49:07:97:83:1F:11:49:A8:D0:36:AE
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1b:7b:12:0b:f2:cd:0c:1d:59:e6:81:e1:9f:95:2e:34:e8:
06:3c:dc:d9:d7:7a:a1:30:a9:35:19:b6:46:bb:02:73:0c:37:
b2:0c:2d:d0:fd:d4:9b:24:16:dd:c4:bc:d8:94:74:a0:5d:eb:
98:5f:bd:13:ca:77:b3:08:fe:d6:7f:01:d0:63:6d:30:3a:3f:
1a:7f:b3:e5:9a:d1:f2:fd:99:b7:d1:3c:26:1a:11:16:e1:b4:
46:1a:a2:62:56:27:83:a1:46:3a:6f:de:cd:d6:d5:4d:f1:69:
8a:cd:fe:5d:d6:0a:fa:91:b4:ed:37:92:46:26:0b:30:3c:ef:
3f:b4:ca:c6:05:8a:09:47:a5:2b:fc:17:5e:da:8f:ee:3f:0e:
9c:d2:10:65:7d:ac:72:3c:d4:69:58:5c:48:f1:b4:39:b0:5a:
cb:e3:27:67:f4:ee:b5:f6:5f:c0:a3:86:ef:bd:7a:c3:b0:94:
34:e6:93:ca:d9:59:fe:8e:1a:b9:3d:62:fc:1f:cd:3a:7e:dd:
80:cb:2b:84:c0:a5:4a:09:0e:f5:a1:d7:9d:5e:d2:6d:a9:b7:
3d:ba:3b:c2:fe:aa:36:89:2b:1b:ee:c9:fc:2f:8c:13:14:72:
bd:8b:ce:76:f1:c1:c7:8c:52:f7:aa:ca:28:75:39:33:53:03:
b7:51:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:51:23 2026 by rpki-client