Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: PEsZw3UoXMgVbxaMy4yAmJGGonMQg27j68vx39roKmQ=
Subject key identifier: D3:D3:21:B0:85:D1:39:70:07:C1:35:E0:EE:17:A6:61:AC:B2:61:EB
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 01A13E5CECEFB2FDD2FD1132E680B1195B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 07:00:39 +0000
Manifest this update: Thu 15 Oct 2026 07:00:39 +0000
Manifest next update: Fri 16 Oct 2026 07:00:39 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: hpptTunM01NRWwqWcITsO2KafxXqVeKwD/fczMBDiwE=)
2: Co-UgfR-RZ88nquGNkhgBiRlfWA.roa (hash: y8OicGcIeO8vwo/68H9AisrPu6OLxG9bR2N39A+AxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:ec:ef:b2:fd:d2:fd:11:32:e6:80:b1:19:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Oct 15 07:00:39 2026 GMT
Not After : Oct 16 07:00:39 2026 GMT
Subject: CN=d3d321b085d1397007c135e0ee17a661acb261eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:27:a7:46:6e:73:0e:38:d4:d9:1f:25:09:
c4:bb:fd:66:8c:ee:37:88:b6:62:ce:e6:99:fc:8f:
9b:fc:44:5d:7f:1b:ae:29:94:ad:f4:a6:49:f1:d1:
0f:a3:64:5d:b1:53:67:88:f1:28:cd:9d:57:c4:c9:
f7:af:7e:5f:c4:aa:ac:2f:76:f8:5f:27:38:6f:1c:
e3:c3:72:7a:ea:64:5e:41:23:d9:dd:aa:a1:f2:38:
62:29:6b:0a:b3:96:f4:f7:83:52:1b:66:1d:4c:b6:
8b:e2:56:2c:17:20:be:3f:96:e5:8e:d2:d1:23:a6:
d0:e2:89:15:ad:31:49:5b:41:cd:b8:3e:8c:8e:24:
cc:35:b1:5e:ea:8c:55:37:b5:5b:5d:9d:a5:b8:9e:
a4:62:d0:df:5a:10:94:cd:2e:7f:76:de:9d:99:88:
a5:75:b8:6f:3c:5b:b2:5e:64:3c:d0:14:bc:36:c0:
51:fc:4c:c5:ce:57:89:a9:b0:bd:86:99:85:b3:e0:
df:f9:82:7c:8d:2b:c1:0e:66:de:c9:93:00:77:6c:
74:9a:b3:8e:41:5c:91:67:8c:ff:32:07:72:9f:bc:
ea:eb:24:3c:f4:17:a8:5a:49:4c:5f:52:68:47:1b:
b8:1d:bf:c0:b4:9f:9b:bb:17:8d:32:d4:4d:94:25:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:21:B0:85:D1:39:70:07:C1:35:E0:EE:17:A6:61:AC:B2:61:EB
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3c:d8:4c:3b:da:18:32:35:81:09:29:5d:24:78:95:24:57:
9e:58:bc:9b:6a:27:24:55:ce:9d:2a:3e:18:77:59:62:60:0e:
4f:27:0c:51:37:40:85:64:e3:53:fa:ee:e1:ef:a6:b8:3d:8a:
ac:46:66:98:59:d7:dc:98:91:f0:9b:78:a7:e8:71:a9:0d:b1:
6b:f2:2c:bc:a1:4f:69:fd:d1:d1:f9:f6:44:64:7a:38:8d:24:
67:0e:8a:fa:40:aa:be:ee:e9:ce:e0:b6:07:29:5f:fc:b2:be:
ad:46:7b:f8:11:9f:56:ca:61:37:c8:6b:3e:f6:e4:12:86:75:
74:99:00:b3:8b:ac:d1:3c:5e:71:33:78:12:fc:94:60:73:45:
2a:f7:c4:cd:60:e8:01:11:ed:5d:09:0f:3e:34:7b:e3:7d:ed:
df:a6:b0:ae:c0:f7:ef:a5:ce:84:59:0e:8f:38:25:ab:0b:5d:
ab:da:f1:60:28:8f:76:12:fa:93:ef:d0:b6:87:a6:86:01:62:
5c:74:32:ad:f1:68:2d:8c:16:0e:a5:73:2c:22:07:6f:f6:04:
56:2a:42:5e:76:10:bf:5c:05:ad:c1:24:ae:55:d9:a4:17:3b:
7f:8f:5a:75:22:bc:a3:04:0d:c1:ca:15:77:27:01:ea:e0:4b:
a7:98:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:03 2026 by rpki-client