Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: SbW50pmfs0EcABkCaM9s4DlyrxqD9lLm1lG3J5+tewg=
Subject key identifier: 0C:EC:C0:FF:25:EB:BC:F7:CA:B2:6D:03:65:6C:A7:71:36:FD:FE:07
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019E303B7CF52321AFAB274F5795EFD0DC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 102E
Signing time: Sat 16 May 2026 10:01:05 +0000
Manifest this update: Sat 16 May 2026 10:01:05 +0000
Manifest next update: Sun 17 May 2026 10:01:05 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: kHhzSPv7TDMpNMW9qYiXmgb3ZBVuwkD6q1PlU9LH/lQ=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:7c:f5:23:21:af:ab:27:4f:57:95:ef:d0:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: May 16 10:01:05 2026 GMT
Not After : May 17 10:01:05 2026 GMT
Subject: CN=0cecc0ff25ebbcf7cab26d03656ca77136fdfe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:e7:9b:e2:a4:ba:50:29:a3:0d:07:d7:e9:
bd:0a:eb:37:c0:4f:15:cc:12:b4:84:42:63:c0:94:
9c:46:0e:47:a6:40:4c:4c:5c:ef:2a:7a:a0:52:ef:
1d:0a:ae:59:80:1f:f5:c7:dd:d0:81:25:7f:01:7f:
a4:44:70:e3:65:66:5d:5b:94:4b:31:30:21:a9:b6:
fc:72:38:6d:92:9c:2b:9f:65:4a:21:10:56:e5:15:
d5:0f:8c:df:ca:be:a7:b4:26:2c:4e:cc:e7:49:13:
1e:d6:f8:84:8c:79:48:58:21:98:68:9b:ef:c9:28:
4f:1f:69:69:98:63:f8:56:48:85:3b:fe:21:67:b5:
89:e0:bb:a1:cd:fd:25:a9:24:63:b4:20:bb:16:a4:
9a:c7:0b:5d:b4:09:e2:d8:be:ec:f3:38:40:e5:40:
04:5a:da:fe:df:d6:6d:15:4e:14:a3:25:65:24:7b:
3e:9b:25:68:e3:b5:f6:27:50:be:97:b8:f5:50:8a:
99:9d:0d:44:0e:eb:5a:1f:4e:b0:82:3d:8a:4b:21:
92:73:62:5e:9b:29:08:f5:99:07:f9:04:37:87:a5:
77:9c:26:13:66:f2:c5:44:30:13:11:64:3b:ba:ab:
4c:3f:43:74:e5:b9:3c:4c:41:09:0c:34:c1:f8:fc:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:C0:FF:25:EB:BC:F7:CA:B2:6D:03:65:6C:A7:71:36:FD:FE:07
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c8:83:2a:3f:d4:3f:1d:07:bf:42:e8:6c:2c:c8:04:1b:15:
23:ee:8e:e0:b7:d7:50:68:d4:1e:1c:c1:cc:2d:07:0c:9f:35:
06:3e:63:db:57:8c:8d:94:19:f3:73:c1:45:8c:dd:09:7f:36:
68:3c:88:c8:56:d1:30:e3:c5:14:a8:c1:db:be:5a:29:1d:b4:
e9:d0:4f:0f:c1:93:c4:ae:56:03:0d:66:36:86:88:19:22:10:
35:af:86:53:b2:b3:6f:a4:2a:9b:a2:a8:a1:68:66:db:51:0c:
c1:e5:39:49:92:36:99:cc:49:8e:6b:9e:d2:d5:1b:79:c9:56:
c3:7b:64:9c:c9:72:4c:d3:0d:52:ca:50:2c:63:b4:fb:91:2d:
f0:42:83:29:8a:09:de:ce:94:ff:b0:e6:e6:16:b8:80:61:61:
78:9c:cf:83:a1:16:c5:ce:1c:99:f4:09:b3:5b:fb:37:4e:a2:
3f:75:bf:96:5e:30:77:9a:de:84:ee:12:0f:c4:ab:34:cb:2e:
1b:8b:ec:8b:f4:18:5c:18:3b:61:05:ee:12:72:9d:be:89:3d:
31:b9:54:1a:6f:d2:30:34:a8:e0:72:93:99:29:ee:ff:2b:ad:
31:09:bf:72:56:ad:6f:8e:92:47:61:71:cd:51:86:a7:cc:1b:
ba:bb:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:49 2026 by rpki-client